Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/cd3318b5-2879-4be5-ab89-dd65461ef6fe.roa
File: cd3318b5-2879-4be5-ab89-dd65461ef6fe.roa (raw, json)
Hash identifier: M9Cme3X8H2gmsKCsUn7CtXaUlJJmOiZH5eNxf6jLqOw=
Subject key identifier: ED:3E:BF:77:C6:BC:93:F1:27:A8:20:DC:BA:4F:04:23:FC:FA:6D:B0
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3503D5B95C49A286A74B5586C981DC7185A8B36A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/cd3318b5-2879-4be5-ab89-dd65461ef6fe.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.204.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:03:d5:b9:5c:49:a2:86:a7:4b:55:86:c9:81:dc:71:85:a8:b3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=c9126edbee9cc0b6555ba7ad355c5b4c732215d44c0c4fb037b2ed40380ce22d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:5f:13:f5:28:9b:9b:8d:5e:e4:32:69:0c:
5a:89:82:30:b1:6a:af:d1:5d:8d:12:38:67:b7:a9:
c1:a0:23:75:7a:d5:77:35:cb:f2:4e:f5:2b:22:3a:
cf:a0:bf:a4:12:e2:7f:02:8b:7a:d3:25:93:35:11:
0e:e7:9b:d9:93:b9:04:14:02:84:2a:6e:9d:1d:36:
c5:38:f6:c8:e9:d6:80:54:9a:db:22:4b:96:c0:ee:
76:5f:e0:0f:52:d9:22:29:58:f1:c1:ca:5b:9d:76:
ce:f8:bb:09:3e:2c:a7:d8:ff:ea:77:3e:f8:27:52:
f9:d6:cd:e4:76:3c:1d:e0:84:44:fc:4d:4b:3c:53:
fd:80:92:be:5e:9d:e3:a5:24:2e:de:c0:e2:a0:be:
f8:99:89:8c:ce:12:59:af:07:9b:0d:a5:21:8d:b5:
9d:cb:c9:0b:e6:27:b0:38:3e:90:65:5b:0d:6a:63:
34:2a:a6:4c:dd:50:d0:29:53:df:5d:75:4f:21:5f:
6b:45:5c:00:3c:f4:22:27:5d:7b:45:ec:72:b2:6b:
70:1d:94:bd:72:94:98:a5:e3:66:06:40:9e:63:52:
97:70:07:4f:2c:d7:ec:83:e0:47:87:09:7c:25:fa:
42:1a:bc:f9:13:b9:48:5b:ca:ca:c6:4c:06:62:85:
a9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3E:BF:77:C6:BC:93:F1:27:A8:20:DC:BA:4F:04:23:FC:FA:6D:B0
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/cd3318b5-2879-4be5-ab89-dd65461ef6fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.204.0.0/15
Signature Algorithm: sha256WithRSAEncryption
18:5e:e8:b4:d6:b5:83:1f:37:7c:51:f7:6f:7d:fc:d6:c2:75:
c3:a2:bc:f5:e2:b5:05:30:1a:17:57:44:78:57:e6:2e:9d:be:
f8:0b:f9:7c:82:c2:76:b9:46:72:d5:a0:2f:d0:02:ba:35:fd:
83:f5:25:bb:1a:8f:1b:8a:39:60:e2:63:61:86:1e:7c:ab:18:
2c:f4:42:ec:db:c5:87:a1:84:23:0f:45:51:ba:92:af:94:4a:
00:97:4a:7a:ff:27:44:53:24:02:bf:3b:17:6d:d8:24:b5:1f:
de:7d:9e:c6:05:80:ba:30:dd:bf:34:28:d5:8d:24:26:b9:8f:
8e:b2:7f:b6:37:e4:c1:aa:35:20:b2:74:bd:63:e1:c8:51:ab:
6f:2e:d9:b1:ba:9c:b3:97:d0:28:d1:19:25:45:4f:1b:04:56:
c3:fc:2e:c8:50:c9:e3:4e:38:15:8f:d8:a1:06:c9:46:e3:6f:
8d:e0:d8:88:09:3f:e3:3a:44:60:67:2f:93:18:57:5a:a9:e2:
e1:ce:7d:97:6c:ff:a8:b7:bf:d2:75:0e:44:f4:75:45:79:6d:
aa:b7:6a:3f:3a:e8:32:00:93:0e:df:25:17:f4:74:82:96:a6:
b9:68:77:cf:64:20:53:7c:15:ee:49:33:d2:ce:3d:c1:70:80:
e7:64:b1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net