Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d1041a1c-b1fc-47a9-8ff6-bd37619381f4.roa
File: d1041a1c-b1fc-47a9-8ff6-bd37619381f4.roa (raw, json)
Hash identifier: aX9oyB6TmIpqgp+++Xv3h+p3UkDKAChSgnLx4XI2iH0=
Subject key identifier: 86:39:78:DD:3E:87:0C:79:23:73:1A:47:40:10:AF:B2:5F:4D:90:62
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4527EB1510B625D904A1C9C6988501516370D2BA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d1041a1c-b1fc-47a9-8ff6-bd37619381f4.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 145.17.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:27:eb:15:10:b6:25:d9:04:a1:c9:c6:98:85:01:51:63:70:d2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=829f4d648db6176551eedfe84e59ba8d67855427af10a58da639b8056d45d688, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:50:1e:ed:c8:f4:a5:23:14:ec:ef:46:c3:
4c:0a:76:76:05:a4:e7:2b:67:8d:84:34:ae:5f:19:
61:2f:6a:31:28:ef:02:16:52:10:7d:1d:6f:97:1a:
c8:c2:a6:f4:18:dc:19:8c:1c:a1:c6:73:7b:2a:03:
3d:7f:98:d2:5e:b6:58:f2:1d:7e:2f:a5:d7:a7:3f:
72:35:48:d4:28:66:4d:ee:8d:6f:0e:64:1a:dd:03:
5d:06:a9:d7:48:c0:28:a8:7f:7d:cf:d6:80:af:c8:
57:f5:43:8a:e9:59:7f:4f:dc:34:ce:62:e8:8f:dc:
0f:13:76:48:6f:6b:e7:f5:af:03:84:80:30:44:5e:
4b:3a:fb:0b:6f:94:b1:6a:cc:a7:14:90:d5:da:9d:
4b:cf:2d:4b:84:41:a5:40:86:f3:f3:e6:5f:6b:e7:
6f:8a:2c:8d:78:38:cf:64:43:a2:ed:31:80:b3:14:
2c:0a:52:81:a7:3d:87:3d:32:29:5c:9d:ac:36:72:
70:3f:61:40:22:76:a2:fd:c6:2f:e0:c7:3a:e8:f6:
6c:01:92:66:2e:a4:58:21:bf:27:0f:51:dc:1f:ec:
d0:71:d9:20:a9:27:e5:7e:41:60:e2:92:d8:1c:dd:
63:0d:2f:53:87:e6:d5:ae:68:bf:a1:da:71:18:ae:
f9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:39:78:DD:3E:87:0C:79:23:73:1A:47:40:10:AF:B2:5F:4D:90:62
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d1041a1c-b1fc-47a9-8ff6-bd37619381f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.17.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d6:aa:94:e4:e4:a3:c6:50:a9:d3:0c:17:d7:a7:c9:f4:50:ac:
cf:02:b3:61:34:0b:57:fe:63:21:7a:7a:ff:d9:53:ab:22:5b:
5c:e8:5a:82:1f:68:c3:08:9c:ef:0e:af:38:4b:53:f1:91:88:
8c:aa:2d:55:aa:9b:92:93:98:3a:e5:f6:45:1a:55:fe:97:cc:
44:a8:e0:2d:4d:e0:74:79:74:71:23:c7:a7:3c:ab:68:ac:95:
be:01:bf:ad:94:ed:e2:b8:e9:b4:49:cb:91:5f:6c:62:0f:77:
5a:1b:97:ef:fb:95:69:f4:a7:79:0a:25:02:7d:7d:25:cc:c2:
80:e2:76:c2:c1:b1:3a:58:1e:f0:68:a1:36:ea:7d:e7:e0:1f:
cc:c2:32:a0:b0:0b:3f:e6:f1:9c:4a:ac:14:65:c8:cd:71:2f:
e3:0d:b2:e5:6e:85:d7:6b:9b:30:15:cd:a2:42:3e:d6:74:8a:
36:51:d0:56:19:4e:3a:08:ff:32:4e:bb:31:d2:e6:75:20:88:
b8:fe:61:10:40:ad:24:01:54:8a:da:09:ba:e9:00:cf:cd:79:
8e:3b:af:b9:45:9b:2d:c1:71:6a:d5:1c:74:8a:60:ab:0d:ce:
45:00:6f:57:cb:9b:2b:ab:51:c2:12:45:91:82:14:67:5e:3e:
64:95:a7:cc
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIURSfrFRC2JdkEocnGmIUBUWNw0rowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDgyOWY0ZDY0OGRiNjE3NjU1MWVlZGZlODRlNTliYThkNjc4NTU0MjdhZjEw
YTU4ZGE2MzliODA1NmQ0NWQ2ODgxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALY9UB7tyPSlIxTs70bDTAp2dgWk5ytnjYQ0rl8ZYS9qMSjvAhZSEH0db5ca
yMKm9BjcGYwcocZzeyoDPX+Y0l62WPIdfi+l16c/cjVI1ChmTe6Nbw5kGt0DXQap
10jAKKh/fc/WgK/IV/VDiulZf0/cNM5i6I/cDxN2SG9r5/WvA4SAMEReSzr7C2+U
sWrMpxSQ1dqdS88tS4RBpUCG8/PmX2vnb4osjXg4z2RDou0xgLMULApSgac9hz0y
KVydrDZycD9hQCJ2ov3GL+DHOuj2bAGSZi6kWCG/Jw9R3B/s0HHZIKkn5X5BYOKS
2BzdYw0vU4fm1a5ov6HacRiu+eMCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSGOXjd
PocMeSNzGkdAEK+yX02QYjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZDEwNDFhMWMtYjFmYy00N2E5LThmZjYtYmQzNzYxOTM4MWY0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAJERMA0G
CSqGSIb3DQEBCwUAA4IBAQDWqpTk5KPGUKnTDBfXp8n0UKzPArNhNAtX/mMhenr/
2VOrIltc6FqCH2jDCJzvDq84S1PxkYiMqi1VqpuSk5g65fZFGlX+l8xEqOAtTeB0
eXRxI8enPKtorJW+Ab+tlO3iuOm0ScuRX2xiD3daG5fv+5Vp9Kd5CiUCfX0lzMKA
4nbCwbE6WB7waKE26n3n4B/MwjKgsAs/5vGcSqwUZcjNcS/jDbLlboXXa5swFc2i
Qj7WdIo2UdBWGU46CP8yTrsx0uZ1IIi4/mEQQK0kAVSK2gm66QDPzXmOO6+5RZst
wXFq1Rx0imCrDc5FAG9Xy5srq1HCEkWRghRnXj5klafM
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net