Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c7ef0ea6-7a32-4830-bc70-a378537a2733.roa
File: c7ef0ea6-7a32-4830-bc70-a378537a2733.roa (raw, json)
Hash identifier: FLG+ZLGhbl5lmRjhIu2eSTDXBwuz2li4cQfPhgBJcY4=
Subject key identifier: 5A:7C:F2:EA:45:06:2B:C6:F4:0C:0D:F2:CB:BB:18:3E:C7:F6:20:BD
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 030AE4A94AA9DE9B0001FB1AD436761FC92232D9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c7ef0ea6-7a32-4830-bc70-a378537a2733.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.88.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:0a:e4:a9:4a:a9:de:9b:00:01:fb:1a:d4:36:76:1f:c9:22:32:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=9cd9461eb107046f85089e197d5248061bb5781fb27c001bdb48d90c72c502a0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:42:e0:ef:71:56:16:24:1b:17:21:a1:52:e5:
12:4d:36:e4:50:0f:f1:5c:34:83:86:b3:a0:a5:3e:
01:14:86:7a:3e:ab:bc:39:c1:4f:49:7a:16:57:18:
aa:62:c7:f5:38:52:7b:d9:31:d2:0f:9c:c7:d3:48:
9e:74:6e:66:ac:c5:95:30:35:af:b3:43:d5:6b:b6:
6e:f5:f7:3b:21:50:36:84:9b:8e:38:69:da:a0:40:
00:99:34:00:7d:62:e6:ac:f7:03:ee:31:54:89:ee:
ef:12:99:bb:8c:99:b6:96:fb:6a:84:6b:eb:24:28:
fa:ae:45:b7:81:8d:59:61:90:85:dd:ab:c4:2f:fe:
e3:2c:14:8c:7b:26:ed:2b:f0:a3:26:1b:dd:82:6e:
fd:20:7b:eb:81:89:e1:3e:93:ad:d7:f0:69:eb:d8:
d6:07:e9:34:eb:26:db:18:ac:77:67:15:10:31:e9:
56:7d:cd:b3:95:06:da:cb:d3:29:b0:9c:71:f9:5d:
9d:2c:c8:b2:e5:45:36:c1:f1:1d:34:b8:dc:b5:35:
fb:69:61:10:82:ee:12:fd:a5:0f:7b:6f:96:2e:96:
f5:30:4d:19:48:4a:39:e8:e8:42:37:32:76:3a:05:
d4:a8:9d:cf:ab:22:41:0b:ec:8f:e7:69:26:92:3f:
4c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7C:F2:EA:45:06:2B:C6:F4:0C:0D:F2:CB:BB:18:3E:C7:F6:20:BD
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c7ef0ea6-7a32-4830-bc70-a378537a2733.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.88.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:77:b1:49:b0:4d:e5:eb:f4:2d:dd:34:b9:9b:69:13:15:4c:
d7:6a:cc:30:e6:74:bd:0c:1a:c9:ee:51:6b:fa:c8:83:90:d4:
24:20:2d:91:46:35:4c:a7:64:a0:79:28:d1:3f:60:d4:d6:3b:
e7:58:8a:64:a8:72:c1:2d:44:d0:a1:c9:6b:d1:68:59:34:f4:
97:b1:46:d1:93:f6:9f:ef:e8:03:d3:55:7a:3a:60:cc:8c:21:
3b:a3:b3:9a:7e:7e:2e:63:20:8b:c2:fb:d0:db:31:be:3c:a5:
51:96:18:4e:83:06:ca:13:4d:cc:57:fe:38:19:24:40:fb:cb:
cc:ee:a2:90:cb:35:b6:28:e1:83:18:df:9d:c8:13:b4:88:0c:
4f:7e:a9:11:32:a4:ef:8e:4d:bc:f3:6a:cc:b6:51:b5:30:8e:
7d:85:1f:14:ab:2b:8d:c0:4f:ff:de:35:40:8f:f6:b9:55:89:
03:76:16:9f:16:7e:c3:31:a1:c7:2d:c2:35:3a:f6:b3:ff:7d:
aa:01:d0:f7:51:10:49:0e:bf:22:de:7d:f5:5a:1f:e7:f6:ea:
ec:b1:32:a0:f6:4a:2e:47:e4:0c:b0:78:85:7b:c8:39:e6:bb:
1e:5f:1a:03:a5:ca:43:2b:16:9f:ff:0d:aa:3b:ee:a5:c5:00:
e0:89:13:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net