Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/be32e063-2484-4f24-b3d4-21b5c8f55455.roa
File: be32e063-2484-4f24-b3d4-21b5c8f55455.roa (raw, json)
Hash identifier: 4VbP280+vRe/slUK9BCYkH57uJ6/761ZdHsrCD/KXCc=
Subject key identifier: E5:88:67:E8:1B:9B:B6:31:64:C7:25:A3:8B:A3:45:3F:23:D7:5F:B2
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7FDA6A9694BF3177EB2E08A12161C8071D4BDCAC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/be32e063-2484-4f24-b3d4-21b5c8f55455.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.139.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:da:6a:96:94:bf:31:77:eb:2e:08:a1:21:61:c8:07:1d:4b:dc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=31e659d226d0fd8792946fca3fb875c507e29a32dd2bc7516a66fbebdbb4d7fc, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:94:fc:95:0c:49:38:87:0c:2c:76:74:18:05:
ff:74:9e:c0:36:dc:10:b7:b7:0c:9c:d1:24:0c:64:
5b:fa:c0:13:58:1e:6b:04:0d:be:12:0e:51:33:d5:
09:4e:6c:b3:3a:4a:92:5b:50:18:7c:90:c0:5d:0f:
b2:f3:ad:ba:c2:7d:b6:40:5c:cf:76:4d:2a:5b:49:
8f:47:cc:46:94:34:d3:fa:7d:28:e0:4d:ce:07:48:
75:d0:54:a4:04:20:6c:37:34:13:ac:28:96:10:de:
78:a7:f3:48:73:59:91:7a:8c:66:b0:fd:3b:50:b8:
43:6f:19:39:ff:8d:7e:f6:8d:d7:e7:77:11:9d:43:
12:17:3a:02:03:bd:96:72:ae:17:e0:ab:00:1a:5e:
32:d6:4c:9c:60:dc:e9:28:b3:0b:30:dc:32:2b:54:
b1:bc:d4:23:3f:75:ca:11:26:e9:d2:48:2f:9c:16:
3f:ee:52:59:70:96:9a:b2:71:ee:60:f9:69:98:23:
8c:bd:59:01:08:af:82:3b:89:06:27:3c:49:ec:ec:
51:41:2f:91:7e:eb:68:2e:ce:1a:62:d1:0a:bf:dd:
d6:08:05:40:cc:c8:e9:ad:bf:38:68:df:0d:c5:39:
25:ef:85:29:70:20:76:93:1b:43:c1:51:e2:d6:6d:
be:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:88:67:E8:1B:9B:B6:31:64:C7:25:A3:8B:A3:45:3F:23:D7:5F:B2
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/be32e063-2484-4f24-b3d4-21b5c8f55455.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.139.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:af:bb:6d:5a:a3:04:33:6c:61:db:3a:d6:d3:29:9d:77:6f:
85:34:f7:8f:99:92:0f:60:3d:b6:05:f1:bb:74:98:52:f6:4d:
aa:7e:c8:ca:84:21:dd:d5:46:42:75:0d:ad:cc:ed:0d:a0:6d:
83:a4:83:0b:38:72:8b:b1:ed:8d:a3:ab:4c:c6:4c:b2:b8:1e:
c1:52:f4:09:92:26:31:ee:e0:c9:63:6d:f6:b2:dc:bf:19:d4:
ce:71:89:24:92:69:bf:d1:35:02:47:3a:6f:1d:76:09:79:b1:
c7:f2:78:99:c9:23:e4:b1:5b:11:91:0d:36:6a:f9:b0:e8:0d:
4a:fb:3b:f4:43:eb:cb:e3:34:be:f5:fb:e0:d6:c1:eb:75:e0:
20:f6:c0:a9:d4:e8:bc:17:24:60:37:50:03:8f:9b:9b:73:aa:
67:5c:59:fd:65:09:ab:cf:c0:54:05:3f:47:a3:31:92:98:e7:
d0:f8:fa:4c:1a:28:93:61:a1:2a:45:4a:ac:db:8b:c0:1e:14:
60:07:c8:ff:20:f4:6c:bd:41:85:48:0b:5b:17:db:6a:36:38:
95:c2:38:f4:7a:67:24:31:6d:83:c9:8d:5a:bc:c4:14:d9:b5:
b9:fc:81:bb:a3:07:53:63:7f:33:48:61:7d:93:99:6e:e8:99:
4e:57:f6:9b
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUf9pqlpS/MXfrLgihIWHIBx1L3KwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDMxZTY1OWQyMjZkMGZkODc5Mjk0NmZjYTNmYjg3NWM1MDdlMjlhMzJkZDJi
Yzc1MTZhNjZmYmViZGJiNGQ3ZmMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM2U/JUMSTiHDCx2dBgF/3SewDbcELe3DJzRJAxkW/rAE1geawQNvhIOUTPV
CU5sszpKkltQGHyQwF0PsvOtusJ9tkBcz3ZNKltJj0fMRpQ00/p9KOBNzgdIddBU
pAQgbDc0E6wolhDeeKfzSHNZkXqMZrD9O1C4Q28ZOf+NfvaN1+d3EZ1DEhc6AgO9
lnKuF+CrABpeMtZMnGDc6SizCzDcMitUsbzUIz91yhEm6dJIL5wWP+5SWXCWmrJx
7mD5aZgjjL1ZAQivgjuJBic8SezsUUEvkX7raC7OGmLRCr/d1ggFQMzI6a2/OGjf
DcU5Je+FKXAgdpMbQ8FR4tZtvhcCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTliGfo
G5u2MWTHJaOLo0U/I9dfsjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YmUzMmUwNjMtMjQ4NC00ZjI0LWIzZDQtMjFiNWM4ZjU1NDU1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADOLMA0G
CSqGSIb3DQEBCwUAA4IBAQBAr7ttWqMEM2xh2zrW0ymdd2+FNPePmZIPYD22BfG7
dJhS9k2qfsjKhCHd1UZCdQ2tzO0NoG2DpIMLOHKLse2No6tMxkyyuB7BUvQJkiYx
7uDJY232sty/GdTOcYkkkmm/0TUCRzpvHXYJebHH8niZySPksVsRkQ02avmw6A1K
+zv0Q+vL4zS+9fvg1sHrdeAg9sCp1Oi8FyRgN1ADj5ubc6pnXFn9ZQmrz8BUBT9H
ozGSmOfQ+PpMGiiTYaEqRUqs24vAHhRgB8j/IPRsvUGFSAtbF9tqNjiVwjj0emck
MW2DyY1avMQU2bW5/IG7owdTY38zSGF9k5lu6JlOV/ab
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net