Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/cbe95385-fe81-4c34-adbd-731e6cec5432.roa
File: cbe95385-fe81-4c34-adbd-731e6cec5432.roa (raw, json)
Hash identifier: HIRnqGQG1SpKme7RwAxmOQW1Ehc9pwdDobZ7BY78bSA=
Subject key identifier: 6E:A0:73:1D:B4:CD:E2:89:63:AA:AE:5B:26:2E:57:61:0A:39:24:E2
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2C3852D79EA889A898F94F8EE45D0669FD6DAD8F
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/cbe95385-fe81-4c34-adbd-731e6cec5432.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.202.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:38:52:d7:9e:a8:89:a8:98:f9:4f:8e:e4:5d:06:69:fd:6d:ad:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=cf9145ea9e77f537190c820626be340f23593586ae3d7608bb29dc0b97c9bf73, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:3b:01:b9:9c:22:de:78:f9:61:d9:63:fe:
73:a7:89:84:20:89:1c:60:b2:40:ca:d7:3e:0d:8a:
b1:3d:5e:ca:10:2d:dc:00:a7:1b:7b:8a:7e:f0:79:
1e:0b:ce:e5:db:a1:ab:a6:60:3d:a8:1b:0d:03:d7:
63:f9:b4:8e:3a:f6:4d:79:e6:27:fd:d3:4e:e6:56:
51:a4:a7:3c:59:f7:00:c9:08:32:e5:b7:be:2f:cc:
19:fd:09:5d:1b:ae:65:49:cd:01:c7:f4:e0:fa:c9:
0c:d7:9f:b1:09:ef:30:35:bc:01:2b:93:4f:6c:42:
b5:14:dc:bf:37:7a:5f:68:bd:60:45:91:df:e1:a2:
1e:f8:f8:f7:df:a8:8c:9a:59:6b:6e:c1:f2:bf:56:
c4:01:c7:25:19:d7:ba:fb:79:4c:50:21:ec:a9:38:
8b:e3:e1:98:a9:74:4b:13:a1:21:36:bc:18:00:7c:
9a:b8:4f:8d:fa:a9:36:a4:77:cb:6b:da:f2:18:2e:
19:b5:08:57:35:b8:e7:a1:79:e7:51:d8:f4:da:fc:
f2:8b:45:01:53:a7:75:fe:24:6d:8a:51:aa:61:7a:
4e:a0:8f:5d:c4:59:c8:53:dc:11:b4:b6:51:2a:a0:
9e:98:81:f5:8b:48:0d:65:01:82:13:25:0b:cc:67:
69:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A0:73:1D:B4:CD:E2:89:63:AA:AE:5B:26:2E:57:61:0A:39:24:E2
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/cbe95385-fe81-4c34-adbd-731e6cec5432.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.202.0.0/15
Signature Algorithm: sha256WithRSAEncryption
70:38:be:9f:91:8e:b6:6a:91:33:4a:30:62:48:f7:4c:69:fb:
e9:bc:39:70:f7:cb:e5:e0:bc:a7:68:82:d0:d8:a6:a3:34:55:
f1:57:59:d7:44:f8:42:84:18:de:65:cf:47:71:3c:2e:35:a8:
4f:5c:95:7a:9c:85:96:72:ae:9d:b4:16:44:27:a3:11:ff:34:
c7:21:5d:ad:7e:d0:ef:cf:aa:a4:85:c2:f6:21:e5:66:48:f6:
bb:7d:9d:3e:98:f2:fa:d3:3d:4f:9c:8c:23:7d:88:7d:ad:ba:
13:8b:a5:8c:1d:cc:98:72:af:c4:46:a4:fd:47:2b:4e:6c:4b:
70:da:d0:83:fa:14:11:f8:75:80:5e:25:96:aa:8f:3a:02:fe:
5f:f3:02:0b:55:2a:da:c4:a4:61:21:70:fd:c2:73:b6:ec:1a:
2f:d9:cb:9c:8a:e6:20:f7:c2:5d:89:5b:39:25:72:bb:06:1a:
c9:d3:7c:12:45:0c:ba:df:8c:da:40:6b:41:15:15:b8:de:d3:
4a:4d:b0:dd:26:3b:16:0c:24:1a:0a:2d:0b:9d:be:cb:e4:ac:
a3:c9:29:0c:e4:ab:e6:a0:e1:e7:d6:f3:c7:8b:ee:fc:b4:1f:
5a:5d:76:8d:db:7d:8e:81:88:e7:52:87:bc:3d:f2:78:e7:ca:
66:27:60:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net