Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c6e5629f-2225-4c0c-962b-6950ec611f11.roa
File: c6e5629f-2225-4c0c-962b-6950ec611f11.roa (raw, json)
Hash identifier: j5Mai/M9Ll2LpPPXtdbiQgtSIG51FnPHSxLDOThKweM=
Subject key identifier: 1E:E0:95:E0:96:F5:D4:81:9A:81:C6:AA:30:AA:67:E5:13:CD:EA:E0
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0F3CFB36C26861127D4A98DF94ACB77437AC00C9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c6e5629f-2225-4c0c-962b-6950ec611f11.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.122.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:3c:fb:36:c2:68:61:12:7d:4a:98:df:94:ac:b7:74:37:ac:00:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=059841746cf6443ad104362d636a559813c3bf3a39de57cafdaa9d338caebe35, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:da:8e:c5:8b:58:0e:3f:21:0e:ca:77:a4:
ef:8b:f5:43:06:ce:6f:a6:10:b0:27:6d:8b:f8:4a:
53:80:3d:f4:c5:6c:16:11:f1:16:b7:13:ae:7f:5b:
a6:ee:e2:89:75:6c:34:f5:78:c9:98:3f:48:31:00:
32:54:00:f8:d4:52:e1:a2:76:54:e5:8f:5e:90:94:
b7:fb:1c:1d:89:48:78:22:84:0c:2b:9d:b2:f2:51:
3e:21:24:12:c4:6a:96:16:a0:59:d0:c6:83:20:f2:
72:ca:02:ee:9a:0e:aa:1e:2e:e8:7b:84:bf:fa:71:
27:fe:bc:82:c7:e5:be:a9:0a:41:06:4f:06:91:f2:
51:fd:98:30:97:e8:43:1e:9a:61:ca:48:db:2b:9c:
9c:74:33:2d:11:a2:86:04:d1:b0:fc:8d:af:61:ca:
e9:ed:74:74:d2:99:94:3f:e4:8e:aa:fa:db:12:d2:
5b:66:e8:fc:1d:35:55:f6:9f:00:be:f5:5a:ed:2f:
cc:ae:9e:ac:07:7f:e8:75:c0:05:bb:74:22:26:93:
37:d1:ca:2c:2c:0b:42:e3:31:cc:db:69:85:e6:be:
bb:2e:8a:9f:42:7d:f3:ff:7f:be:db:cc:d4:00:7c:
2c:69:7f:7f:0f:0e:ea:b8:c2:8f:cb:a1:e2:be:d1:
8c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E0:95:E0:96:F5:D4:81:9A:81:C6:AA:30:AA:67:E5:13:CD:EA:E0
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c6e5629f-2225-4c0c-962b-6950ec611f11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.122.0.0/15
Signature Algorithm: sha256WithRSAEncryption
32:10:e6:6b:84:74:b0:1f:a4:83:a7:2d:7b:44:85:bc:21:6c:
1a:ec:2e:0d:a4:f9:3a:58:e4:5f:d8:35:f6:ed:de:b2:55:3d:
0a:dd:e8:37:35:67:f7:b8:51:79:6a:0a:3d:94:d8:64:3f:f9:
05:f9:5f:af:a1:40:79:9a:21:4f:be:3c:4d:e7:94:3f:17:9e:
7b:fb:37:11:60:0c:fa:dd:c5:25:38:e4:fb:54:bb:d5:d3:3e:
2d:20:e2:0c:b3:a3:e9:6c:d4:03:62:3a:59:82:a4:03:10:63:
d7:e6:22:37:46:e1:0a:c2:28:34:e5:e0:16:4c:33:5f:99:50:
63:ef:0e:98:b2:e4:9d:15:97:d3:0c:56:40:e6:9e:c7:1e:35:
78:a2:b6:12:ee:91:db:2f:80:f0:d9:22:97:6b:29:14:1f:60:
60:03:08:b0:12:3a:f1:c4:3d:c3:1a:8c:73:5e:d8:f7:19:95:
63:f8:7b:dd:c5:fc:7a:37:a9:e3:82:d7:9f:8f:36:68:74:25:
b4:13:09:e8:a6:13:5b:fb:c3:55:cd:69:48:07:87:a9:9d:c7:
6a:65:30:42:49:f5:8a:72:02:a0:5c:fe:dc:90:ea:ca:78:bd:
51:42:6f:4a:c2:a5:02:66:5a:8c:87:70:3e:68:d4:92:53:3f:
f4:be:96:7c
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUDzz7NsJoYRJ9SpjflKy3dDesAMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDA1OTg0MTc0NmNmNjQ0M2FkMTA0MzYyZDYzNmE1NTk4MTNjM2JmM2EzOWRl
NTdjYWZkYWE5ZDMzOGNhZWJlMzUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKhG2o7Fi1gOPyEOynek74v1QwbOb6YQsCdti/hKU4A99MVsFhHxFrcTrn9b
pu7iiXVsNPV4yZg/SDEAMlQA+NRS4aJ2VOWPXpCUt/scHYlIeCKEDCudsvJRPiEk
EsRqlhagWdDGgyDycsoC7poOqh4u6HuEv/pxJ/68gsflvqkKQQZPBpHyUf2YMJfo
Qx6aYcpI2yucnHQzLRGihgTRsPyNr2HK6e10dNKZlD/kjqr62xLSW2bo/B01Vfaf
AL71Wu0vzK6erAd/6HXABbt0IiaTN9HKLCwLQuMxzNtphea+uy6Kn0J98/9/vtvM
1AB8LGl/fw8O6rjCj8uh4r7RjGsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQe4JXg
lvXUgZqBxqowqmflE83q4DAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YzZlNTYyOWYtMjIyNS00YzBjLTk2MmItNjk1MGVjNjExZjExLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATN6MA0G
CSqGSIb3DQEBCwUAA4IBAQAyEOZrhHSwH6SDpy17RIW8IWwa7C4NpPk6WORf2DX2
7d6yVT0K3eg3NWf3uFF5ago9lNhkP/kF+V+voUB5miFPvjxN55Q/F557+zcRYAz6
3cUlOOT7VLvV0z4tIOIMs6PpbNQDYjpZgqQDEGPX5iI3RuEKwig05eAWTDNfmVBj
7w6YsuSdFZfTDFZA5p7HHjV4orYS7pHbL4Dw2SKXaykUH2BgAwiwEjrxxD3DGoxz
Xtj3GZVj+Hvdxfx6N6njgtefjzZodCW0EwnophNb+8NVzWlIB4epncdqZTBCSfWK
cgKgXP7ckOrKeL1RQm9KwqUCZlqMh3A+aNSSUz/0vpZ8
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net