Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b88c226f-e19c-4f39-bbb3-1928bd2cdd62.roa
File: b88c226f-e19c-4f39-bbb3-1928bd2cdd62.roa (raw, json)
Hash identifier: cyLQgf5Huda4qc+lt2ZnuaueFuEODwd/Nw39w63BDhE=
Subject key identifier: 82:FA:1E:BF:37:F3:0A:0A:67:58:1B:66:A6:CD:29:F6:9F:DB:C2:62
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 78D3EF25909EDE4B67B2F32F05CC3E14BF73371F
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b88c226f-e19c-4f39-bbb3-1928bd2cdd62.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.240.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:d3:ef:25:90:9e:de:4b:67:b2:f3:2f:05:cc:3e:14:bf:73:37:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=3b2111b8ce54992ec1bc40ce8bf0e851d13a5814e1095f9cb154624c245ae06b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4d:f5:c2:53:e5:72:a8:68:86:5e:01:35:19:
28:aa:80:da:ed:c4:88:47:c7:60:73:4e:39:da:fe:
64:c8:fc:d9:7a:34:1e:db:ff:59:a7:6c:8e:ef:f0:
6d:fb:40:e1:0f:7e:f1:b5:f9:10:48:fe:b0:ab:a1:
e0:5d:d0:1a:2b:48:71:5d:44:57:ca:33:6b:7b:71:
e0:d3:09:ae:50:9c:55:2e:4e:1e:f8:24:6c:eb:78:
f9:cb:34:48:2e:74:dd:59:fd:6b:a2:57:39:09:c0:
f5:75:95:93:92:4d:aa:e9:21:21:92:57:8a:9f:c3:
f4:bd:a8:77:f1:d6:ae:74:57:06:71:f2:89:9b:a7:
ca:7e:27:ad:9e:18:15:48:56:57:51:78:ce:cb:aa:
87:24:ac:1b:51:50:b6:22:33:eb:7b:39:bb:22:9b:
ad:43:35:a5:7f:94:08:1f:7c:4b:c9:45:e3:e1:34:
ab:19:6f:8e:7a:b3:8f:72:92:17:14:81:e6:cd:50:
cc:49:db:7c:5f:15:39:9f:3c:ba:c2:3d:e5:64:a9:
a7:09:8b:59:ab:92:a5:f9:88:8c:68:cb:9a:a3:be:
eb:8c:05:aa:16:8f:f5:de:ea:49:a9:03:8c:e6:b0:
56:03:8d:2c:1a:1d:97:20:c3:27:c0:b1:25:75:d6:
d0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FA:1E:BF:37:F3:0A:0A:67:58:1B:66:A6:CD:29:F6:9F:DB:C2:62
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b88c226f-e19c-4f39-bbb3-1928bd2cdd62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.240.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bd:ae:69:9b:66:da:8f:71:66:a2:a2:96:c7:91:4a:de:6f:d9:
fb:cc:d9:87:43:30:04:26:68:04:bb:97:61:85:12:9d:70:89:
80:2b:63:e9:d6:5d:4e:34:fc:03:4c:09:5c:84:44:36:88:f5:
20:25:45:b5:3d:b2:50:c7:07:da:dc:41:e4:44:8a:61:e6:26:
73:a6:28:91:60:9b:85:93:a4:4f:68:53:5b:00:f7:6f:d2:d0:
f5:73:a2:94:fb:b0:98:4d:fa:f0:b2:dd:0f:66:21:f4:d2:f5:
78:d4:34:c0:24:90:e1:c7:56:4d:7e:57:93:d8:06:8b:ad:d9:
85:d0:a2:9c:88:77:fa:35:b2:55:16:b3:e1:c8:0f:af:d7:76:
b8:97:a0:1c:fe:d5:5a:64:3e:90:96:b4:9f:c8:dc:c2:5a:f4:
73:04:2e:dc:2d:c0:df:4f:a9:0c:e6:ec:bb:17:0f:83:ff:1f:
68:8d:c0:61:40:f7:ba:e9:6d:4b:fb:b2:f7:c7:c6:e7:a6:65:
7f:6d:a3:a8:bc:13:2e:2a:31:5d:2d:15:93:23:1d:86:a9:33:
e3:6d:bc:da:75:42:38:c5:85:c6:de:c6:15:c7:5f:d1:fc:87:
1a:67:79:1f:58:be:e7:34:31:b0:99:ba:bb:84:46:02:a3:9b:
9a:92:33:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net