Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b540e59d-bfd2-4a72-9bb0-37e848d41cd6.roa
File: b540e59d-bfd2-4a72-9bb0-37e848d41cd6.roa (raw, json)
Hash identifier: LJKg9ytmZ8f5BFLCk29oQ02BlrAc88GL92JuvXBVI70=
Subject key identifier: A6:9C:F6:8C:F5:D9:AE:63:1C:51:99:15:03:80:88:F4:23:BE:07:93
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 12E97387F98F79CE5BBE5D8ADE67A129E97B42EA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b540e59d-bfd2-4a72-9bb0-37e848d41cd6.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.34.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:e9:73:87:f9:8f:79:ce:5b:be:5d:8a:de:67:a1:29:e9:7b:42:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=b918a831730317f9edd7e57f831d2c25eb2319b35778d8b3e3dd9b3de060ed72, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f1:bd:4f:61:11:1a:da:c7:1c:e3:6e:af:f0:
22:66:fe:bd:9f:d2:14:a2:05:d5:10:f4:fb:bb:5c:
1b:db:0a:24:8d:e1:eb:ee:29:2d:2e:a9:30:18:02:
b7:ff:8d:61:de:1e:a2:ea:73:5b:f2:b2:c5:0f:1a:
fc:2b:ed:6c:e4:3b:6a:92:99:a1:9c:c9:18:e3:17:
00:21:8e:e7:41:15:35:b8:a8:2a:26:6e:92:06:d3:
bc:5a:d0:d0:a5:e8:1a:b1:eb:fc:05:56:cb:f7:c4:
dd:da:33:87:98:7d:bd:f7:d4:e2:58:7a:c2:aa:1d:
93:22:24:b5:c9:0b:65:e1:7b:c4:c6:6c:e9:31:94:
03:21:9e:85:0c:df:e2:74:47:d7:8c:96:16:d1:22:
75:fb:66:9d:3f:fb:86:d1:fd:14:7a:f4:08:06:96:
46:20:a5:00:ae:3e:44:6d:88:42:1e:52:2e:47:31:
86:8b:6a:5a:81:40:12:a2:e4:ec:b3:ed:83:16:0e:
eb:4d:18:fa:b2:ae:44:c1:94:b6:80:76:1f:41:da:
c3:86:44:42:16:5a:95:59:9b:93:eb:fe:57:38:1a:
f0:00:0b:3f:fe:cb:85:fe:e0:f1:26:64:97:96:3d:
84:e0:d2:11:2e:74:da:af:91:61:81:73:1d:68:4b:
87:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9C:F6:8C:F5:D9:AE:63:1C:51:99:15:03:80:88:F4:23:BE:07:93
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b540e59d-bfd2-4a72-9bb0-37e848d41cd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.34.0.0/15
Signature Algorithm: sha256WithRSAEncryption
cf:2c:dc:17:de:e5:b0:d1:b9:cd:7c:20:a4:c9:4d:0e:9e:a2:
fe:c1:7a:97:9c:5e:8d:89:91:79:13:3b:9a:86:23:02:61:1e:
92:b2:93:b4:d9:83:0c:22:36:4a:3e:1a:a9:09:f2:4b:fb:b1:
cb:5a:b7:f4:2a:b0:98:66:2b:9a:00:a1:86:a6:af:f6:fd:fb:
17:d1:ee:82:79:2a:25:41:68:f6:e8:ab:d8:7e:c0:86:56:5b:
08:07:6c:5a:da:56:06:d7:f5:38:89:06:05:b0:db:bd:7e:ae:
70:80:56:c7:12:8b:b3:e0:be:74:ce:8d:9e:1f:16:b2:b9:9c:
61:0f:2c:5b:95:19:e1:43:1e:8c:62:84:f7:b7:c9:d9:e0:92:
9b:91:67:d0:f0:d7:2b:e7:cb:06:54:ee:8f:56:b5:c3:4a:b9:
c4:58:1f:63:28:27:2c:c4:ab:cc:59:61:96:56:69:39:5a:4d:
5a:45:99:01:94:83:e0:3c:93:d6:44:be:b2:4f:91:f9:ae:5b:
c7:ec:09:d1:a7:22:fb:d4:d2:00:7d:b7:c9:cf:25:17:a8:79:
c3:79:ef:c0:f9:c1:7e:8b:f7:fa:21:c0:ce:c1:21:6e:ff:b0:
2a:0d:38:fe:45:94:53:c8:f7:78:d2:f4:5b:a7:c3:9f:0c:65:
86:f7:01:17
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUEulzh/mPec5bvl2K3mehKel7QuowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGI5MThhODMxNzMwMzE3ZjllZGQ3ZTU3ZjgzMWQyYzI1ZWIyMzE5YjM1Nzc4
ZDhiM2UzZGQ5YjNkZTA2MGVkNzIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKbxvU9hERraxxzjbq/wImb+vZ/SFKIF1RD0+7tcG9sKJI3h6+4pLS6pMBgC
t/+NYd4eoupzW/KyxQ8a/CvtbOQ7apKZoZzJGOMXACGO50EVNbioKiZukgbTvFrQ
0KXoGrHr/AVWy/fE3dozh5h9vffU4lh6wqodkyIktckLZeF7xMZs6TGUAyGehQzf
4nRH14yWFtEidftmnT/7htH9FHr0CAaWRiClAK4+RG2IQh5SLkcxhotqWoFAEqLk
7LPtgxYO600Y+rKuRMGUtoB2H0Haw4ZEQhZalVmbk+v+Vzga8AALP/7Lhf7g8SZk
l5Y9hODSES502q+RYYFzHWhLhxMCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSmnPaM
9dmuYxxRmRUDgIj0I74HkzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YjU0MGU1OWQtYmZkMi00YTcyLTliYjAtMzdlODQ4ZDQxY2Q2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATMiMA0G
CSqGSIb3DQEBCwUAA4IBAQDPLNwX3uWw0bnNfCCkyU0OnqL+wXqXnF6NiZF5Ezua
hiMCYR6SspO02YMMIjZKPhqpCfJL+7HLWrf0KrCYZiuaAKGGpq/2/fsX0e6CeSol
QWj26KvYfsCGVlsIB2xa2lYG1/U4iQYFsNu9fq5wgFbHEouz4L50zo2eHxayuZxh
DyxblRnhQx6MYoT3t8nZ4JKbkWfQ8Ncr58sGVO6PVrXDSrnEWB9jKCcsxKvMWWGW
Vmk5Wk1aRZkBlIPgPJPWRL6yT5H5rlvH7AnRpyL71NIAfbfJzyUXqHnDee/A+cF+
i/f6IcDOwSFu/7AqDTj+RZRTyPd40vRbp8OfDGWG9wEX
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net