Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ce1d12f0-5347-41d5-b7bb-778dda0c1d4c.roa
File: ce1d12f0-5347-41d5-b7bb-778dda0c1d4c.roa (raw, json)
Hash identifier: JhjukBJEd14ONgVduK5o2h03KhH2tqdXvajmOk+FclA=
Subject key identifier: 41:D9:8D:5A:D1:88:E8:C4:10:8C:43:9A:CD:00:4E:3C:56:6D:FB:8C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 178E4E13B1DF2191E3117CB1D049D4A1D3199F76
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ce1d12f0-5347-41d5-b7bb-778dda0c1d4c.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.60.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:8e:4e:13:b1:df:21:91:e3:11:7c:b1:d0:49:d4:a1:d3:19:9f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=23a60e62cd34bb2f98d96f470be3454da14413a59c4de1b24e2540d4dde9d4b6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:a3:c6:5d:a5:5f:8c:da:ae:fb:81:ab:d0:
4f:c9:ea:b2:1b:10:d7:66:7a:5f:47:76:be:f5:8e:
05:8e:29:61:f3:10:b6:7f:78:96:38:51:5b:50:62:
f9:fe:9b:d4:a1:15:4d:10:41:3d:95:5b:f9:ee:b5:
07:54:49:37:a0:63:6a:5f:01:05:b5:f5:b2:18:e9:
fe:38:86:41:de:9f:79:4c:6c:3a:30:3f:40:41:a7:
55:b1:15:1b:42:fc:bd:3f:e4:93:9e:c5:2e:53:8d:
d3:5b:a3:e0:ef:a7:fa:9a:c4:f9:a4:64:91:13:4c:
a9:f3:00:e6:5b:cc:fa:b6:ff:d0:fd:c7:d9:fb:68:
bd:bc:a9:3a:5b:83:56:21:cd:6f:99:ea:89:b3:c5:
81:ec:57:a3:9d:41:53:0e:64:56:c3:f9:0b:40:54:
a8:38:0d:e1:f6:72:42:7f:ff:eb:8f:0a:15:49:c4:
fc:a8:d4:3b:ce:48:2d:f2:42:b6:f4:b6:4d:f7:e6:
aa:c4:32:44:8d:04:ef:5e:e2:97:5c:39:80:72:89:
ec:65:c3:72:18:ef:69:5c:63:0e:23:81:ed:7f:36:
2d:33:14:b4:7a:91:d4:7d:08:aa:e2:0c:9a:a9:8e:
af:11:78:9c:10:ca:b4:4a:33:26:ab:58:d2:6c:ad:
e3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D9:8D:5A:D1:88:E8:C4:10:8C:43:9A:CD:00:4E:3C:56:6D:FB:8C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ce1d12f0-5347-41d5-b7bb-778dda0c1d4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.60.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:2e:99:46:93:00:f6:3a:65:d7:5b:3f:bd:96:d7:80:3b:15:
0f:3b:01:f4:66:b6:6d:44:b9:c2:38:d9:7e:11:64:4f:e0:52:
30:b0:1b:ce:a0:ca:ca:4f:44:3b:47:e4:cf:78:8c:0e:18:a9:
ea:3e:24:db:3e:78:a1:6d:61:43:3e:80:56:f2:46:14:ae:1c:
8a:5f:ae:a5:a3:2f:5e:b1:ee:49:06:fc:d2:63:94:f4:ae:e1:
a7:c9:4e:51:c3:ef:67:6e:a5:87:46:df:b7:96:36:80:9f:42:
d8:1d:7c:be:09:61:54:39:b5:d8:b6:5e:78:23:b9:43:34:6e:
70:5e:f1:2e:6d:dc:82:5f:92:e6:bd:48:19:cd:11:12:e6:d0:
bf:14:e9:a6:c4:e0:8b:5c:59:03:df:21:8e:d3:4a:e1:ec:9e:
90:05:23:d8:4d:55:d3:55:f7:f8:6e:a3:25:0f:32:9c:45:87:
e8:e0:ea:74:6c:77:29:5c:bd:ea:40:e4:dc:71:c3:46:55:7c:
c4:f8:27:7f:4e:3b:b2:52:79:91:85:ab:cb:cf:56:08:03:b0:
d4:9c:13:a6:19:d0:82:72:c2:2e:0e:2f:89:11:90:b7:1d:33:
21:fa:95:5a:42:f2:fd:d4:b5:bf:ec:af:43:d3:9c:cc:de:67:
95:5f:d1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net