Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bee56394-d0ee-4578-8df3-6c45679cffb6.roa
File: bee56394-d0ee-4578-8df3-6c45679cffb6.roa (raw, json)
Hash identifier: dWiF2eCZ8Q7nvCOPoT2N9TaCfZAKpOoseEFp/RPrxXY=
Subject key identifier: E4:30:9F:81:E8:29:C8:C3:92:11:69:40:EE:03:F6:CF:0A:1A:68:8F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7C5D52E88FFE344354BFEEC6F11B39D6D412CD50
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bee56394-d0ee-4578-8df3-6c45679cffb6.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.84.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:5d:52:e8:8f:fe:34:43:54:bf:ee:c6:f1:1b:39:d6:d4:12:cd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=f383ccdf6a712340db062f5c932a097137a941b0163bd842cb36feacc497cc1d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:d5:04:c0:37:6f:3f:3b:02:e0:67:7f:5f:
70:db:f2:24:0d:54:aa:dc:ed:70:a8:6b:1d:71:7a:
d0:b7:a2:5a:17:21:d1:f9:5a:fe:e9:6f:71:e9:fa:
c4:5e:c9:8f:6f:08:99:a3:61:f1:43:35:9f:70:36:
a3:f9:58:0b:b2:91:ba:d5:09:7d:ac:1c:8b:1b:4e:
c7:13:8d:3d:8a:ae:29:6a:38:ca:3f:55:f8:3e:70:
4a:6e:ee:8f:cd:55:0a:2f:d7:32:e5:1e:f8:ed:a3:
c6:9d:f0:ee:57:f8:11:92:4e:10:c7:ad:1f:c4:33:
ed:8f:c7:e8:a1:75:09:82:17:af:82:c9:cf:6e:21:
15:f3:10:40:5f:1f:d3:8b:31:83:59:a5:fd:a1:2e:
ef:e8:fa:da:e3:12:10:43:3d:fb:0c:c6:50:8b:70:
03:61:da:e6:b9:9d:c2:b9:ae:58:f0:71:ac:c8:3d:
25:d6:7d:4b:23:db:ef:78:10:7b:d5:49:4c:86:9b:
15:ec:c8:96:27:9b:2c:bd:c2:58:ca:ab:8b:85:b1:
a5:5f:f3:7c:ee:ab:38:8b:c4:84:0e:87:f8:17:b0:
e2:37:c9:8f:ec:d5:ad:84:55:66:b8:62:8f:d8:6f:
a2:5e:96:1c:89:de:50:27:0e:7d:7f:93:f2:09:69:
d8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:30:9F:81:E8:29:C8:C3:92:11:69:40:EE:03:F6:CF:0A:1A:68:8F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bee56394-d0ee-4578-8df3-6c45679cffb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.84.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7a:a4:90:62:4b:b5:d4:a7:e6:88:66:28:f0:51:ee:be:ed:76:
3d:89:fe:c1:e8:ff:fe:44:d7:46:85:d2:6e:f4:da:04:a3:d4:
7a:fa:53:6f:6f:94:27:9f:34:ba:bc:ed:b8:f3:34:14:bf:22:
dc:b7:41:50:f1:8d:56:f4:c9:0c:a1:d3:74:37:82:06:90:40:
ed:72:c4:cc:08:e3:a9:f9:60:bf:7a:4f:a2:74:b9:2a:fc:ec:
09:74:ad:27:93:89:e3:d7:56:40:b1:c8:f3:c2:26:7c:cf:1a:
e7:ed:c5:de:85:8d:7d:b0:26:3b:83:47:51:03:05:82:32:f7:
24:09:47:9f:33:cb:01:c7:70:dd:c3:d3:ba:1b:cb:c4:f0:b1:
8b:b1:0e:80:98:ed:94:8a:a5:e2:0b:53:d1:52:e7:91:6c:d0:
a8:67:87:30:d4:fd:b7:93:ad:80:40:4b:95:cb:df:1c:1a:d8:
0c:b5:37:39:96:0c:25:fd:75:ca:f5:e2:5c:da:0f:91:ed:88:
e3:6e:22:7a:4a:6a:7c:57:00:61:19:c1:2c:30:e3:d1:17:c7:
f2:1c:8d:84:4a:05:67:42:af:ea:3a:db:c0:f2:50:dc:4c:ad:
b2:4a:14:1a:c2:3f:4c:df:75:5c:1a:65:8f:74:0b:0b:f4:aa:
6a:18:17:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:40 2024 by rpki-client on console.sobornost.net