Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ca0f75ca-e966-4e9d-99ae-b78535acfaf7.roa
File: ca0f75ca-e966-4e9d-99ae-b78535acfaf7.roa (raw, json)
Hash identifier: x3nPJ9SC8P61FArTCBlA2xy3BE8rYBfcH4/lyQsEk7U=
Subject key identifier: 5F:4F:CF:C5:43:59:43:6E:61:E6:0A:6A:34:27:94:3F:43:4C:E6:3D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6D79813597EE01988B1E9A29BE0BA878D6067AEB
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ca0f75ca-e966-4e9d-99ae-b78535acfaf7.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.166.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:79:81:35:97:ee:01:98:8b:1e:9a:29:be:0b:a8:78:d6:06:7a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=0e45377bf852f9c7b469504aa287adc642cc027843f7dc64da4b665a93a83e8b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:16:54:a5:1c:26:1a:40:aa:78:ee:66:25:
7a:f2:9f:77:47:06:ec:17:73:1e:ca:36:6c:7a:04:
b9:0f:12:2a:b8:80:10:9b:84:c6:76:9c:75:79:d9:
77:9a:5a:ae:cd:58:94:d4:eb:c3:61:95:d7:77:bb:
bf:d1:a6:45:ed:2b:dd:55:1f:e3:90:27:80:f0:98:
c5:c9:84:56:e3:3d:20:20:bb:fb:42:69:c0:43:d5:
8a:20:f0:89:56:89:0e:49:5b:e1:fa:8c:95:04:4e:
5b:e3:23:29:09:52:25:f0:d4:55:c0:85:5e:38:8a:
90:05:17:ab:f7:74:7d:19:3f:84:62:a4:68:ae:e2:
71:0f:80:f6:f8:04:bb:70:b1:c9:c0:25:69:7b:6a:
46:31:49:02:16:55:60:d5:ad:58:c6:1d:84:ba:5c:
70:9c:6d:e9:c2:9b:85:d1:ad:13:85:64:c6:1a:b5:
14:bc:08:76:40:89:d7:72:1d:24:08:ca:6e:f8:b8:
da:c2:e2:40:89:f1:90:30:31:97:66:22:d2:43:b2:
a3:c1:e9:49:dc:cb:3b:e0:05:ab:76:fe:68:75:bb:
2c:c5:1d:c1:04:68:5e:cd:21:98:f0:a2:d1:6d:a5:
05:c2:2d:b0:b7:69:a5:49:cf:2d:28:ce:02:5e:71:
07:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4F:CF:C5:43:59:43:6E:61:E6:0A:6A:34:27:94:3F:43:4C:E6:3D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ca0f75ca-e966-4e9d-99ae-b78535acfaf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.166.0.0/15
Signature Algorithm: sha256WithRSAEncryption
2f:bd:2b:b8:bc:bf:b5:83:b9:e0:20:8a:5c:ab:b7:11:34:45:
80:0e:20:e7:cf:48:9f:fb:d2:51:28:e3:1c:f4:1d:ef:e0:b3:
6d:58:c0:78:b6:a1:07:0b:49:7e:56:da:d2:71:3d:7a:8d:0f:
36:4d:5c:a4:5b:b2:4a:b1:51:dd:a4:74:59:1a:b0:6b:26:af:
ee:2f:1a:da:2b:c7:d6:ca:35:b1:60:b2:29:76:95:a8:3c:d6:
6f:30:eb:61:67:d0:12:dc:04:d1:65:d4:93:18:0c:cb:26:f4:
b9:48:47:5e:75:a2:e5:6a:a8:c3:ff:2c:e4:4d:15:e5:3b:01:
f3:4b:e5:62:50:40:7a:5e:30:79:f2:e5:7b:ad:83:f7:d3:c0:
31:8d:23:09:e7:48:6a:47:61:29:77:64:62:fc:7d:04:0a:70:
2d:6d:db:c9:5c:a3:de:76:8b:5c:d6:37:8e:6d:37:f8:0d:5b:
aa:db:1e:4e:af:4a:40:b8:bc:2a:44:74:40:71:4b:d0:60:77:
0f:c3:b7:61:6a:3b:93:38:74:ad:d6:09:bc:65:9e:c2:5c:63:
6b:a9:fb:e1:f9:5a:71:1f:ce:c8:de:06:a3:c9:a5:7b:db:a1:
63:db:b6:62:32:55:bb:24:2a:50:6e:fe:5f:c9:cf:5e:62:a5:
e4:f7:cd:c5
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUbXmBNZfuAZiLHpopvguoeNYGeuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDBlNDUzNzdiZjg1MmY5YzdiNDY5NTA0YWEyODdhZGM2NDJjYzAyNzg0M2Y3
ZGM2NGRhNGI2NjVhOTNhODNlOGIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKwzFlSlHCYaQKp47mYlevKfd0cG7BdzHso2bHoEuQ8SKriAEJuExnacdXnZ
d5pars1YlNTrw2GV13e7v9GmRe0r3VUf45AngPCYxcmEVuM9ICC7+0JpwEPViiDw
iVaJDklb4fqMlQROW+MjKQlSJfDUVcCFXjiKkAUXq/d0fRk/hGKkaK7icQ+A9vgE
u3CxycAlaXtqRjFJAhZVYNWtWMYdhLpccJxt6cKbhdGtE4Vkxhq1FLwIdkCJ13Id
JAjKbvi42sLiQInxkDAxl2Yi0kOyo8HpSdzLO+AFq3b+aHW7LMUdwQRoXs0hmPCi
0W2lBcItsLdppUnPLSjOAl5xB+ECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRfT8/F
Q1lDbmHmCmo0J5Q/Q0zmPTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
Y2EwZjc1Y2EtZTk2Ni00ZTlkLTk5YWUtYjc4NTM1YWNmYWY3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATOmMA0G
CSqGSIb3DQEBCwUAA4IBAQAvvSu4vL+1g7ngIIpcq7cRNEWADiDnz0if+9JRKOMc
9B3v4LNtWMB4tqEHC0l+VtrScT16jQ82TVykW7JKsVHdpHRZGrBrJq/uLxraK8fW
yjWxYLIpdpWoPNZvMOthZ9AS3ATRZdSTGAzLJvS5SEdedaLlaqjD/yzkTRXlOwHz
S+ViUEB6XjB58uV7rYP308AxjSMJ50hqR2Epd2Ri/H0ECnAtbdvJXKPedotc1jeO
bTf4DVuq2x5Or0pAuLwqRHRAcUvQYHcPw7dhajuTOHSt1gm8ZZ7CXGNrqfvh+Vpx
H87I3gajyaV726Fj27ZiMlW7JCpQbv5fyc9eYqXk983F
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net