Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b0e4a315-0256-4fb7-917f-d9d79ce0c782.roa
File: b0e4a315-0256-4fb7-917f-d9d79ce0c782.roa (raw, json)
Hash identifier: AjVPPHb87Aw+PQOrLpE1SUC9Ba2o/iroPt1f785a3TU=
Subject key identifier: 2A:88:CA:73:23:9B:95:C3:4F:92:F2:08:DC:B6:5A:8C:DA:48:27:47
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0493DBF944CDCD98C2D3A5EAE728F387E1274714
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b0e4a315-0256-4fb7-917f-d9d79ce0c782.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.32.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:93:db:f9:44:cd:cd:98:c2:d3:a5:ea:e7:28:f3:87:e1:27:47:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=61dd36d34bb9db73a083cc10d2133559e3fabc1d368bf02fab52d914e95cb820, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:ce:1d:62:81:53:38:e4:91:c8:a7:3e:6a:
09:19:df:34:d6:63:0f:97:f4:fd:c8:1b:a8:f8:de:
4f:3c:e6:44:9d:7a:1e:eb:90:f7:3a:b4:00:1a:c7:
bf:87:4f:d4:ba:8e:f8:00:29:de:a6:eb:fc:c0:6d:
a8:40:1b:d2:fa:1e:77:a7:45:f1:6e:1b:04:8a:9b:
ef:a9:dc:8f:0c:a1:32:09:16:0b:20:8c:0c:cd:42:
7a:59:6c:67:6e:32:b1:91:a1:da:bf:1f:79:cb:d0:
20:3e:dd:d1:59:4a:5a:0a:30:62:fe:e8:af:9f:21:
7e:b4:23:b6:ad:29:bf:0c:2b:db:08:b2:58:69:93:
30:8d:ee:5d:50:71:1d:6e:8c:e2:a2:e5:39:5a:a9:
a4:8e:d1:6a:df:c2:5f:5b:fe:b3:2d:e9:ea:42:f8:
23:71:e9:97:f2:8a:93:58:97:da:2f:57:43:7c:c0:
2b:2c:7b:bd:35:2f:9e:94:62:7d:b7:3f:aa:5f:99:
49:8f:cb:f6:10:a6:9f:ac:b7:82:eb:91:63:70:14:
b3:16:3d:d1:b7:f7:60:19:ea:d9:03:32:dc:e1:3d:
73:76:1c:48:3d:5d:26:19:db:d5:ed:c5:f5:15:b2:
d7:70:ed:f3:76:31:78:db:12:7d:2a:44:4c:0b:e0:
c1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:88:CA:73:23:9B:95:C3:4F:92:F2:08:DC:B6:5A:8C:DA:48:27:47
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b0e4a315-0256-4fb7-917f-d9d79ce0c782.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.32.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:d8:1e:3e:61:36:ed:f6:fd:c2:47:ea:87:e2:35:6a:1e:e0:
44:6d:72:95:d9:f8:2e:c3:2c:19:6e:19:25:94:a7:ad:55:fa:
8d:c8:85:13:f6:d8:16:8d:0c:b4:d2:5c:1f:35:7f:cd:8e:f0:
f5:9b:37:a8:7d:1f:78:f2:32:f5:b5:3b:85:2c:8b:ae:35:4f:
a5:d8:2e:f5:1a:71:10:00:91:41:1a:67:4a:97:46:e8:d3:78:
88:e6:0b:f5:82:3e:ca:b3:16:13:d5:8d:3e:ed:ed:26:15:8d:
fa:24:82:24:98:a8:3f:62:fb:d6:35:21:37:5a:7c:70:dd:39:
ee:ba:05:71:19:fc:d4:79:90:2b:b7:9e:44:cd:40:c2:b3:5d:
98:64:21:0c:59:98:e5:c0:17:d0:30:6a:58:6b:01:91:97:47:
48:c5:d5:12:24:78:91:cc:77:58:93:21:93:a6:38:c6:75:36:
a4:30:22:c0:c5:3b:4b:8d:49:a4:7b:3c:ee:9f:6b:54:6a:53:
64:9d:6d:28:9a:3f:c8:68:26:bb:bf:c3:68:75:f9:e2:52:26:
62:c7:ea:bc:33:2d:85:cd:5f:ad:09:16:2e:07:f7:38:17:4a:
d5:ef:fa:29:31:72:a1:fb:a8:ac:2f:cc:57:44:d0:2d:88:7c:
44:1d:34:5b
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUBJPb+UTNzZjC06Xq5yjzh+EnRxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDYxZGQzNmQzNGJiOWRiNzNhMDgzY2MxMGQyMTMzNTU5ZTNmYWJjMWQzNjhi
ZjAyZmFiNTJkOTE0ZTk1Y2I4MjAxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMSZzh1igVM45JHIpz5qCRnfNNZjD5f0/cgbqPjeTzzmRJ16HuuQ9zq0ABrH
v4dP1LqO+AAp3qbr/MBtqEAb0voed6dF8W4bBIqb76ncjwyhMgkWCyCMDM1Cells
Z24ysZGh2r8fecvQID7d0VlKWgowYv7or58hfrQjtq0pvwwr2wiyWGmTMI3uXVBx
HW6M4qLlOVqppI7Rat/CX1v+sy3p6kL4I3Hpl/KKk1iX2i9XQ3zAKyx7vTUvnpRi
fbc/ql+ZSY/L9hCmn6y3guuRY3AUsxY90bf3YBnq2QMy3OE9c3YcSD1dJhnb1e3F
9RWy13Dt83YxeNsSfSpETAvgwSsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQqiMpz
I5uVw0+S8gjctlqM2kgnRzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YjBlNGEzMTUtMDI1Ni00ZmI3LTkxN2YtZDlkNzljZTBjNzgyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADMgMA0G
CSqGSIb3DQEBCwUAA4IBAQA22B4+YTbt9v3CR+qH4jVqHuBEbXKV2fguwywZbhkl
lKetVfqNyIUT9tgWjQy00lwfNX/NjvD1mzeofR948jL1tTuFLIuuNU+l2C71GnEQ
AJFBGmdKl0bo03iI5gv1gj7KsxYT1Y0+7e0mFY36JIIkmKg/YvvWNSE3Wnxw3Tnu
ugVxGfzUeZArt55EzUDCs12YZCEMWZjlwBfQMGpYawGRl0dIxdUSJHiRzHdYkyGT
pjjGdTakMCLAxTtLjUmkezzun2tUalNknW0omj/IaCa7v8NodfniUiZix+q8My2F
zV+tCRYuB/c4F0rV7/opMXKh+6isL8xXRNAtiHxEHTRb
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net