Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c05da6d0-4bbb-4fb4-b558-5efec1f55506.roa
File: c05da6d0-4bbb-4fb4-b558-5efec1f55506.roa (raw, json)
Hash identifier: FyfJIsuWFA0tQSMvtASMSITYTRxiNowkp10JprY8/Fk=
Subject key identifier: 16:50:F2:61:7E:CE:50:F2:38:71:A5:C8:36:36:F8:89:D8:CB:92:7E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 199E412196BBACC5380A005163F2EA703F0CE9E1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c05da6d0-4bbb-4fb4-b558-5efec1f55506.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:9e:41:21:96:bb:ac:c5:38:0a:00:51:63:f2:ea:70:3f:0c:e9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=970de26a687991ca26a04e0d04696756f284fa10f59c99ecf274d9cc964fbb15, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:f4:67:24:a0:25:bf:ab:93:bc:3a:ef:2e:
9b:17:48:f3:fc:d5:34:3a:79:96:98:74:6c:a2:24:
67:42:38:bd:52:aa:09:2b:4c:ae:fd:bd:2a:da:a0:
0c:6c:30:bf:59:36:4f:a5:91:89:a9:82:51:6a:f6:
1c:99:a3:e3:bd:aa:a3:a0:35:0d:62:4a:ef:2c:45:
43:1b:42:96:6d:ac:1d:83:07:76:34:d0:a4:47:f0:
fc:04:1c:cf:d6:22:4b:9a:6d:33:f7:c0:14:71:bb:
29:62:ec:82:79:a2:01:a7:f9:b5:4f:aa:de:cb:ff:
6a:c1:8c:48:aa:9e:07:d6:ae:bb:03:83:9d:cb:f4:
d9:b5:93:2a:c8:ac:b9:10:31:c7:9d:d2:73:84:d1:
96:6d:dc:57:63:c6:92:a0:85:bc:b8:34:b3:cc:2d:
2f:02:25:00:a6:dc:5b:25:aa:14:d2:ca:27:21:62:
b5:ea:55:c2:18:28:af:e8:f3:35:fa:70:05:25:95:
e7:0c:f5:aa:43:56:e7:ab:8b:48:48:71:fe:15:f6:
f3:9a:c9:a8:c2:46:8e:37:97:01:ae:28:ef:fe:69:
23:94:13:04:b9:72:71:82:1a:ac:7b:4b:20:44:71:
6a:d4:48:35:ea:f8:7d:7b:2e:c1:56:d0:5d:4d:b4:
25:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:50:F2:61:7E:CE:50:F2:38:71:A5:C8:36:36:F8:89:D8:CB:92:7E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c05da6d0-4bbb-4fb4-b558-5efec1f55506.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.0.0/15
Signature Algorithm: sha256WithRSAEncryption
97:2a:3f:a9:6b:ee:9b:b9:d0:55:da:b7:14:b2:93:04:18:7c:
5d:05:55:71:0f:83:b6:f3:3a:d1:3c:8f:a1:70:8c:1f:11:1a:
46:36:08:1a:0c:6f:ad:7c:50:63:f8:0a:45:4a:d0:34:b9:76:
4b:76:d9:1f:10:c4:c8:2b:a6:4e:d2:9d:28:5f:9d:df:54:6f:
d1:81:81:8b:c4:82:e1:40:cb:7c:c4:40:96:18:ac:ac:f3:e7:
c2:e2:6c:8a:ac:21:24:2f:cf:01:40:99:0d:e9:7e:50:cd:d6:
b3:36:bc:1d:9a:b3:25:c3:60:e4:f8:35:dd:b3:70:5c:5a:a9:
7a:0a:cf:91:d3:aa:d2:bc:00:b1:5b:74:3e:dc:86:1d:38:38:
62:02:14:e6:de:58:a0:8e:f1:64:58:45:99:8c:da:ba:3e:1d:
a7:20:0b:78:52:53:62:1e:77:61:d2:1d:a7:b8:62:63:25:33:
fa:93:26:d0:29:9a:14:83:e8:80:90:ed:3d:81:89:ec:d8:e2:
99:96:01:c9:c0:78:5f:d2:d1:06:57:14:b2:11:cf:3e:80:45:
09:0a:5b:84:40:61:3b:6b:46:8e:d1:d9:97:6b:d7:34:eb:89:
53:64:5d:e1:6f:3e:d0:8c:22:0d:93:13:2b:c1:f4:d4:47:3a:
e3:9a:c7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:40 2024 by rpki-client on console.sobornost.net