Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/aa8c347b-a2d5-4fe5-8b98-684b4ad77529.roa
File: aa8c347b-a2d5-4fe5-8b98-684b4ad77529.roa (raw, json)
Hash identifier: CDfQU/CjAA0z05MvknrBAXbyGcwrBCgfe+YWrJgQ/Cs=
Subject key identifier: B1:2A:7A:E4:62:71:52:6D:5E:54:4A:B7:43:18:C3:C7:31:F9:5E:EA
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 277A1E1AC72FFDDE779BDDF1ABB962C0A33ABAAC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/aa8c347b-a2d5-4fe5-8b98-684b4ad77529.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.134.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:7a:1e:1a:c7:2f:fd:de:77:9b:dd:f1:ab:b9:62:c0:a3:3a:ba:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=a97463a616246e5d93878151a9c4ae55654f6692c813f66e08749ae704ec80a2, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:3d:b3:d6:09:8f:be:1c:80:ab:28:2e:44:
3b:09:f5:65:77:70:ad:34:6e:ca:33:55:4f:b1:c3:
ab:15:87:3c:9f:5b:a1:88:25:a3:5e:6a:e3:eb:88:
5c:bd:80:6c:cb:1f:7b:15:a9:10:45:98:d9:b0:07:
26:cf:32:d1:98:fc:9d:d1:00:82:ef:64:46:c8:5c:
60:64:ac:54:21:db:71:56:6f:32:93:5a:dd:ad:77:
c4:61:63:e1:8b:b0:e6:c3:fa:12:29:01:f2:d9:39:
bd:f9:9a:2d:ac:79:9a:00:9f:86:61:75:3d:23:fa:
73:02:b4:27:1d:66:e3:3d:fb:6c:6e:61:96:0e:c6:
8c:d9:f1:06:2e:8d:9e:3e:f6:99:f3:26:27:25:bc:
e0:c4:8c:08:06:9f:42:41:b1:14:ca:72:49:51:36:
62:76:de:05:dc:8f:a6:0a:b0:80:1d:ca:b8:63:db:
1a:96:16:6e:7d:f3:4b:ee:ab:94:ba:dd:b2:c5:09:
73:28:d2:69:a0:af:10:a6:59:0e:37:87:71:47:3d:
d4:b9:cd:f9:01:4c:a5:7a:8f:43:4d:6d:07:c6:7a:
94:e1:36:de:9e:e1:58:bd:3e:b5:46:9f:bc:67:32:
d8:35:ef:30:8a:90:9f:47:46:11:79:3e:64:47:0b:
5d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2A:7A:E4:62:71:52:6D:5E:54:4A:B7:43:18:C3:C7:31:F9:5E:EA
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/aa8c347b-a2d5-4fe5-8b98-684b4ad77529.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.134.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:ad:51:6a:b4:f5:ef:51:36:c3:e3:79:30:11:ce:af:a3:b1:
bf:02:3b:08:dc:83:46:87:e2:b7:18:f8:e3:e7:a6:e9:03:da:
0d:22:39:4c:55:6f:24:28:50:aa:91:df:3c:02:ae:d9:72:bc:
0f:d0:d8:d2:16:45:e7:6d:70:ee:92:67:4c:d4:c7:ae:9b:35:
f4:fe:1a:17:12:42:c0:c8:27:ce:9a:10:76:97:ea:34:68:01:
cc:95:4e:6b:3a:4e:4c:1d:c3:b3:02:42:9f:fb:04:2f:26:bd:
a0:ea:34:8f:51:9a:e5:70:e6:32:55:6d:48:b6:d0:20:0e:03:
43:0b:57:ac:46:04:a9:b5:da:36:c9:70:ae:45:8f:b9:d0:ae:
5e:0f:90:86:1e:02:02:b6:91:b7:76:f7:2a:3a:77:3e:b5:53:
aa:c6:81:6e:c4:31:7b:40:87:cb:f8:1a:eb:08:38:8d:49:5a:
07:ff:7f:e6:e9:e9:a2:f6:68:d0:d8:fc:bb:6d:2d:93:21:08:
17:b2:d0:6a:89:fa:0a:d9:66:86:39:2b:ac:da:06:aa:93:ba:
a6:26:45:58:93:e5:e7:63:d2:54:34:92:77:21:c2:dc:0c:3d:
9c:8a:a0:8c:19:8c:de:e7:af:e7:9d:7c:b8:10:04:b4:0c:d4:
47:39:82:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net