Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b8a2b42a-9ea3-4e8d-92ec-e89c9c446705.roa
File: b8a2b42a-9ea3-4e8d-92ec-e89c9c446705.roa (raw, json)
Hash identifier: DxU/+15USKHjAojl6Xj5QBxMQnQjkUWrjdZ5D3yYD+Y=
Subject key identifier: 90:EB:AB:FB:CC:23:05:D5:93:3F:34:BC:2C:F5:16:40:E5:C7:B4:06
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 39D466D2A0799633FC57CAB38A6BCE87F238721B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b8a2b42a-9ea3-4e8d-92ec-e89c9c446705.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 159.239.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:d4:66:d2:a0:79:96:33:fc:57:ca:b3:8a:6b:ce:87:f2:38:72:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=633ad511253d5ea331aff5094e89ccfc1410f5a5d9d71d1d36edc0a0c8b55770, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:da:c1:bd:38:50:bf:0d:fa:46:31:b2:67:
b6:7f:08:b5:78:44:ce:08:86:c1:c7:81:b9:5e:32:
ac:8f:20:06:94:e8:98:57:f6:cd:56:e8:a7:20:3c:
b9:26:2b:2e:08:90:a2:62:31:92:d3:f1:40:74:f0:
18:df:dd:4e:58:9b:1b:4c:fb:6e:9b:43:09:34:38:
24:06:3a:b4:18:20:32:85:2a:61:55:51:0a:d8:9b:
92:75:9a:21:50:37:02:c2:95:17:3f:f4:74:ac:bf:
cd:a4:47:c8:eb:e0:ee:c4:37:3b:3b:26:fd:61:56:
66:70:7e:31:a6:23:7e:fd:1f:71:c2:a1:9c:ed:61:
8a:c9:91:36:c9:6c:7e:bb:7a:30:d0:71:10:aa:7a:
2a:0e:08:af:9d:51:2d:ac:e4:86:d5:05:c2:9e:b4:
33:86:98:b2:b6:8a:48:2b:d0:b7:25:05:21:1b:19:
35:48:2b:b5:a5:ce:8f:7d:13:ef:fb:8b:e8:a5:87:
c5:fe:08:65:be:57:a5:7a:8a:4e:03:37:0b:57:5c:
f1:58:ec:f9:31:ca:c9:97:7d:e9:e1:95:85:52:58:
18:5a:a5:52:0f:59:4e:fd:82:92:05:c0:42:86:5d:
f2:85:51:b0:ef:88:5b:62:1f:15:70:76:1b:11:40:
e6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EB:AB:FB:CC:23:05:D5:93:3F:34:BC:2C:F5:16:40:E5:C7:B4:06
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b8a2b42a-9ea3-4e8d-92ec-e89c9c446705.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.239.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:e3:d4:72:96:fe:aa:44:7e:ce:2a:a8:90:b6:98:b5:bb:13:
41:07:10:f1:0c:5b:64:d1:c1:31:f0:e5:21:c3:fe:56:07:f9:
c8:f2:18:ce:e3:59:a0:64:58:3b:a3:34:2c:d9:b4:2d:ec:d8:
05:ed:a5:d1:90:ab:b5:31:9f:42:73:66:79:cb:7c:8d:b3:01:
1d:48:ec:93:39:b1:16:a7:43:54:78:a1:0c:74:af:82:d7:db:
ab:6b:40:c7:29:40:38:13:f3:c3:58:f4:96:e0:f9:29:a8:f2:
b1:a0:75:88:83:0b:76:e1:15:05:f6:4a:aa:b8:9b:47:d5:03:
33:bd:0d:a9:18:9a:1a:78:e7:49:aa:2b:a9:41:21:7f:f5:b8:
95:03:50:df:87:cf:20:f6:33:65:16:60:24:f4:a1:41:2c:b5:
dc:59:eb:93:f0:8e:af:78:81:69:da:c9:ef:c9:64:df:ad:f3:
5d:8d:99:65:ad:4d:98:9e:7f:45:60:5c:95:62:db:c9:79:12:
37:33:e9:57:12:4d:ff:ea:14:ce:d9:67:bd:29:df:d1:6b:4e:
0c:9d:b2:55:c5:48:c1:51:0a:9d:88:43:e3:c6:ee:2d:61:27:
82:5e:40:83:f4:41:00:7b:27:7e:96:ef:b3:72:c9:93:43:64:
6d:83:da:9a
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUOdRm0qB5ljP8V8qzimvOh/I4chswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMDMwMDAwMDBaFw0yNTAxMDcyMzU5NTlaMHoxSTBHBgNV
BAUTQDYzM2FkNTExMjUzZDVlYTMzMWFmZjUwOTRlODljY2ZjMTQxMGY1YTVkOWQ3
MWQxZDM2ZWRjMGEwYzhiNTU3NzAxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALAn2sG9OFC/DfpGMbJntn8ItXhEzgiGwceBuV4yrI8gBpTomFf2zVbopyA8
uSYrLgiQomIxktPxQHTwGN/dTlibG0z7bptDCTQ4JAY6tBggMoUqYVVRCtibknWa
IVA3AsKVFz/0dKy/zaRHyOvg7sQ3Ozsm/WFWZnB+MaYjfv0fccKhnO1hismRNsls
frt6MNBxEKp6Kg4Ir51RLazkhtUFwp60M4aYsraKSCvQtyUFIRsZNUgrtaXOj30T
7/uL6KWHxf4IZb5XpXqKTgM3C1dc8Vjs+THKyZd96eGVhVJYGFqlUg9ZTv2CkgXA
QoZd8oVRsO+IW2IfFXB2GxFA5m0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSQ66v7
zCMF1ZM/NLws9RZA5ce0BjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YjhhMmI0MmEtOWVhMy00ZThkLTkyZWMtZTg5YzljNDQ2NzA1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAJ/vMA0G
CSqGSIb3DQEBCwUAA4IBAQCk49Rylv6qRH7OKqiQtpi1uxNBBxDxDFtk0cEx8OUh
w/5WB/nI8hjO41mgZFg7ozQs2bQt7NgF7aXRkKu1MZ9Cc2Z5y3yNswEdSOyTObEW
p0NUeKEMdK+C19ura0DHKUA4E/PDWPSW4PkpqPKxoHWIgwt24RUF9kqquJtH1QMz
vQ2pGJoaeOdJqiupQSF/9biVA1Dfh88g9jNlFmAk9KFBLLXcWeuT8I6veIFp2snv
yWTfrfNdjZllrU2Ynn9FYFyVYtvJeRI3M+lXEk3/6hTO2We9Kd/Ra04MnbJVxUjB
UQqdiEPjxu4tYSeCXkCD9EEAeyd+lu+zcsmTQ2Rtg9qa
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net