Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ba49e847-161e-4e06-ade5-750cb58ef3e5.roa
File: ba49e847-161e-4e06-ade5-750cb58ef3e5.roa (raw, json)
Hash identifier: JycwICtYft8UMH7oUTk6XQwYeZJHpCAAHS6b9s7JdzE=
Subject key identifier: 49:E7:17:CA:B4:AF:C8:B6:5F:60:F0:A4:E1:C4:1A:C0:7B:2D:97:D5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0574FCF52B94930BD76A39ECA95D4E3FEF772C91
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ba49e847-161e-4e06-ade5-750cb58ef3e5.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 193.57.182.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:74:fc:f5:2b:94:93:0b:d7:6a:39:ec:a9:5d:4e:3f:ef:77:2c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=2334cfa3b9efd45364fce9e0d8239bb802dbd6721296c12c848a46995922f86a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:db:2e:66:d1:73:e1:b8:f5:4f:c6:a9:9c:
5f:8a:60:ff:de:78:0d:1b:87:ca:b8:65:59:64:47:
3f:04:b0:22:19:f5:47:d8:ce:c7:d1:d3:17:3f:87:
c6:9c:79:e0:a4:ac:60:f4:79:dd:90:15:b3:cd:ee:
f6:5a:5c:70:10:2e:3b:68:ab:c7:5a:66:66:fd:05:
1d:08:2f:ff:54:d3:f7:84:18:49:52:2e:51:fa:b2:
9b:94:1e:66:99:82:3c:ad:3f:c2:37:6c:fa:b9:cb:
28:a5:70:65:80:af:1c:f7:70:ed:51:eb:e2:13:fa:
18:d2:5c:fe:d0:6a:cb:5a:65:ba:6b:dc:87:2f:62:
c1:35:cb:ca:1d:07:ef:cc:f2:9c:4f:4f:bb:ef:7d:
83:1f:aa:63:38:66:79:77:24:d8:f9:6d:1c:b0:a6:
b8:6c:5d:96:04:ee:f8:e4:59:52:e6:4e:15:01:01:
fa:42:d4:72:f2:42:56:49:04:c8:2b:99:f8:10:fc:
a8:e7:cb:f4:21:e2:ea:30:69:4d:69:db:c7:81:6d:
c6:50:e5:d7:cd:3a:39:93:13:4f:bd:7a:33:eb:53:
dc:06:87:26:d5:5e:59:ec:bb:a7:c5:b7:01:75:13:
65:7e:c6:72:d7:09:c7:b6:c6:ff:6f:05:cf:bb:77:
92:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E7:17:CA:B4:AF:C8:B6:5F:60:F0:A4:E1:C4:1A:C0:7B:2D:97:D5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ba49e847-161e-4e06-ade5-750cb58ef3e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.182.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:e6:4c:b6:24:99:1e:90:cc:24:63:3d:69:6d:96:36:34:39:
ba:66:ef:79:5d:bd:d7:2f:2d:fd:e8:d9:bb:f6:9f:95:07:1b:
67:50:8f:71:66:06:f6:93:79:3a:4d:11:92:7d:25:af:8a:2c:
38:89:ed:47:45:d0:63:c7:50:09:19:7d:9c:26:e9:ab:cd:9f:
c4:a8:1d:47:3e:23:d8:8f:1c:95:0f:4e:06:54:79:e9:ab:75:
23:b6:53:f7:df:f2:c6:b6:15:28:d9:ea:15:9e:91:ea:98:05:
6c:14:05:79:45:60:2d:7c:54:0f:11:81:c8:90:f0:4a:87:e8:
09:cb:9f:6c:0a:23:67:90:88:cd:25:4c:c9:ac:59:d0:2f:f7:
cf:7e:56:3f:80:1b:1d:78:e5:09:de:18:55:e0:e8:b0:c7:70:
e1:28:c7:95:4c:91:fd:b9:04:8b:6b:16:71:75:6a:4e:a3:d3:
33:95:22:ac:ef:08:cb:81:a1:03:fd:9b:ca:52:08:88:56:25:
ad:cb:38:d9:40:45:33:b7:ae:75:8f:3a:73:99:af:eb:2f:fa:
a2:ea:58:13:0f:10:39:df:fc:e2:12:2d:54:7f:23:87:85:c0:
02:2e:e7:26:ef:4b:bf:77:79:f6:4c:50:e3:68:6c:2c:1c:fb:
b6:0a:af:b5
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUBXT89SuUkwvXajnsqV1OP+93LJEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDIzMzRjZmEzYjllZmQ0NTM2NGZjZTllMGQ4MjM5YmI4MDJkYmQ2NzIxMjk2
YzEyYzg0OGE0Njk5NTkyMmY4NmExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALOO2y5m0XPhuPVPxqmcX4pg/954DRuHyrhlWWRHPwSwIhn1R9jOx9HTFz+H
xpx54KSsYPR53ZAVs83u9lpccBAuO2irx1pmZv0FHQgv/1TT94QYSVIuUfqym5Qe
ZpmCPK0/wjds+rnLKKVwZYCvHPdw7VHr4hP6GNJc/tBqy1plumvchy9iwTXLyh0H
78zynE9Pu+99gx+qYzhmeXck2PltHLCmuGxdlgTu+ORZUuZOFQEB+kLUcvJCVkkE
yCuZ+BD8qOfL9CHi6jBpTWnbx4FtxlDl1806OZMTT716M+tT3AaHJtVeWey7p8W3
AXUTZX7GctcJx7bG/28Fz7t3ki0CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRJ5xfK
tK/Itl9g8KThxBrAey2X1TAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YmE0OWU4NDctMTYxZS00ZTA2LWFkZTUtNzUwY2I1OGVmM2U1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcE5tjAN
BgkqhkiG9w0BAQsFAAOCAQEAfOZMtiSZHpDMJGM9aW2WNjQ5umbveV291y8t/ejZ
u/aflQcbZ1CPcWYG9pN5Ok0Rkn0lr4osOIntR0XQY8dQCRl9nCbpq82fxKgdRz4j
2I8clQ9OBlR56at1I7ZT99/yxrYVKNnqFZ6R6pgFbBQFeUVgLXxUDxGByJDwSofo
CcufbAojZ5CIzSVMyaxZ0C/3z35WP4AbHXjlCd4YVeDosMdw4SjHlUyR/bkEi2sW
cXVqTqPTM5UirO8Iy4GhA/2bylIIiFYlrcs42UBFM7eudY86c5mv6y/6oupYEw8Q
Od/84hItVH8jh4XAAi7nJu9Lv3d59kxQ42hsLBz7tgqvtQ==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net