Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b1f8fa83-54f1-44cc-a915-6249a6f6a284.roa
File: b1f8fa83-54f1-44cc-a915-6249a6f6a284.roa (raw, json)
Hash identifier: tUYP3mf6cF7IX+fMU4c0W7feMNtx1UwBpURaZ4ytfJU=
Subject key identifier: D7:75:54:C8:6C:2E:6F:07:DF:2B:BE:9F:39:76:BA:B9:1D:11:0D:A9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 762BA87AC39AAA6FEF05F3B6041F6897AE722481
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b1f8fa83-54f1-44cc-a915-6249a6f6a284.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.3.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:2b:a8:7a:c3:9a:aa:6f:ef:05:f3:b6:04:1f:68:97:ae:72:24:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=e471e2219210459f07f2ce5ec3a1bb5f14278bb876f817c7a1d7249b6627f21d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:a2:a4:2c:2f:5d:60:1c:05:91:2a:3c:b7:
83:f6:44:cc:71:02:85:60:91:d7:22:67:cb:94:7d:
99:15:be:f6:38:5e:72:c6:ee:f0:22:6a:a3:32:3e:
28:d8:e4:66:93:1a:4c:b1:ce:40:5b:0a:5a:12:ab:
47:b9:f6:aa:5e:e5:e8:83:9a:70:d2:06:9d:9e:b4:
c9:92:11:7c:41:07:47:5c:6a:e8:6d:a2:28:f9:e8:
15:7b:73:49:12:bb:1e:c3:5b:b2:f0:07:ef:7f:c9:
b0:6f:d8:91:21:f8:98:72:0b:f0:53:6e:89:d4:90:
a4:f9:77:d7:3d:29:80:4c:dc:de:55:1f:5c:94:34:
8d:2f:03:0e:12:44:30:ad:f1:c8:51:10:41:3e:8c:
ac:17:9f:86:b2:d1:4b:8a:c0:78:5e:f2:75:a5:23:
2d:f6:1b:08:ec:e7:4f:dd:fb:d3:43:23:ec:8d:1d:
35:46:3a:ae:6c:4b:fa:ca:3d:1e:42:63:49:36:25:
fb:e8:83:01:49:7b:28:d1:c5:f3:ff:ab:90:73:e9:
5a:93:f5:d0:95:e0:50:2b:e5:a0:fc:a1:73:52:c5:
19:13:76:d7:e5:58:fc:e3:78:b0:70:a5:e5:b1:70:
97:79:42:0b:49:f0:1d:5f:9c:fb:c3:97:e6:09:cf:
fb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:75:54:C8:6C:2E:6F:07:DF:2B:BE:9F:39:76:BA:B9:1D:11:0D:A9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b1f8fa83-54f1-44cc-a915-6249a6f6a284.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:c2:5c:60:c0:55:d2:15:d4:80:85:a2:ed:66:77:7f:e4:0c:
29:51:d4:75:6f:fd:b6:76:22:ea:43:3a:99:ab:df:3c:46:27:
a1:35:7f:32:94:67:3a:36:a3:82:10:8a:43:ed:47:5b:e4:15:
51:f1:a3:1b:6e:16:c5:f6:21:0f:21:80:ad:f6:cd:d2:dc:22:
e5:1b:d7:36:4b:4a:a4:17:88:ef:ea:f1:b6:49:4e:cd:79:26:
5c:1f:50:13:aa:fa:92:69:82:00:d1:b8:72:69:0e:d5:f4:3d:
fa:ac:50:cc:1e:a7:95:d1:70:b5:d0:af:fc:88:77:71:cd:18:
9e:e3:f2:c3:fc:8e:8d:c2:31:62:4e:29:b7:ed:ae:59:99:10:
30:25:12:6b:3e:12:dc:14:86:7a:ef:41:ae:f2:be:ca:a3:41:
c1:cc:cc:10:c3:e9:5e:7b:31:a3:ea:9e:dd:b9:13:f3:1d:c1:
48:9d:29:d1:44:22:16:e6:f0:6a:e8:6e:14:ac:a5:ea:33:09:
cd:7a:68:d7:24:13:fa:74:db:05:ab:64:6a:29:db:3f:9b:f9:
1e:59:56:e5:c9:48:e2:3c:bb:76:ff:f9:3f:42:5a:e0:6d:aa:
62:66:35:19:b5:39:06:a6:09:de:e7:ee:5f:6c:66:e1:21:6e:
e2:27:1e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net