Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d310e678-58b7-443e-b704-6a24720f63c2.roa
File: d310e678-58b7-443e-b704-6a24720f63c2.roa (raw, json)
Hash identifier: hLJNHbEh0qowRK2mvgZ0C7ADYBZ49vcHPO26Gy8KEFg=
Subject key identifier: 2D:4C:31:9D:A6:06:D2:22:58:25:5B:69:2C:CA:05:82:A9:BC:FB:D5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 482141D6AEC0FD19F59A5AD583E4DB0A537472EE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d310e678-58b7-443e-b704-6a24720f63c2.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.114.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:21:41:d6:ae:c0:fd:19:f5:9a:5a:d5:83:e4:db:0a:53:74:72:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=de675dcbd1fc236f900d6d5ce9c23e91002e9df8928ad4103442c64c28ec2ed1, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:86:6b:26:5e:a5:e9:56:c6:1f:3a:1c:1c:c7:
70:cc:d0:01:13:7a:29:b2:bf:39:dc:0f:b8:02:78:
4f:71:2d:ad:99:4d:b2:36:47:80:59:38:c7:64:69:
85:28:92:4b:42:2b:08:ed:97:51:b4:77:48:64:ea:
f8:77:ac:37:33:8d:79:95:2b:ec:9a:01:05:2a:bc:
6b:31:59:4c:d1:cb:d7:7d:e3:d8:2b:e1:6b:7d:73:
f5:3c:3a:9f:b6:90:34:0b:ff:ea:1e:24:1e:63:e3:
67:9d:3b:dd:ba:1f:7d:ff:94:78:7b:c3:4a:6b:1b:
ee:a7:52:9c:06:80:cc:60:6a:4f:4f:05:af:0f:0f:
bc:39:61:e0:ca:ba:df:b7:ea:99:d4:06:7d:4a:00:
33:2d:d9:73:e0:0b:d2:3f:cc:f8:8d:06:26:ad:4b:
fb:fc:a5:7c:70:4e:31:eb:ee:f1:a7:b3:66:fa:9a:
65:b5:6e:c4:51:5b:31:ed:a3:2b:3f:5a:42:e9:22:
cc:3d:61:55:1a:5f:4c:c6:5f:5d:a1:6c:a5:93:66:
ef:89:27:f7:28:db:a5:c9:ed:5a:a2:9c:a2:e8:d2:
94:93:62:a5:0d:73:a8:97:36:2f:02:f5:ae:cf:6a:
2c:0d:49:3c:e0:30:d3:df:c0:c3:76:0d:64:87:c8:
29:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4C:31:9D:A6:06:D2:22:58:25:5B:69:2C:CA:05:82:A9:BC:FB:D5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d310e678-58b7-443e-b704-6a24720f63c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.114.0.0/16
Signature Algorithm: sha256WithRSAEncryption
26:26:b1:ad:d9:80:42:da:6c:e3:f9:9c:3f:7a:61:d9:1b:b4:
e8:a8:9a:8d:8e:5e:8e:a7:24:6c:4b:a4:23:88:d6:7d:f9:9f:
fa:8f:e1:dd:f1:27:d0:10:57:a6:db:28:18:44:f3:0e:26:d3:
91:0d:48:3d:7f:5e:3a:41:75:26:ff:77:62:70:a7:c5:56:aa:
7d:8a:8e:50:9b:93:6e:02:40:45:e9:08:c3:66:b8:54:57:94:
49:cb:d3:24:fb:e1:57:4b:6a:ac:ab:14:17:8d:9e:40:99:6c:
ec:da:2b:58:e1:81:7c:fd:70:e8:c5:12:40:05:ed:7c:d9:4d:
08:8c:5a:44:b4:a7:f7:8f:28:5f:c0:0a:ef:f9:25:2e:bd:32:
75:d7:27:ed:20:00:a5:d5:8e:2d:7d:ae:73:f1:d4:e8:0b:c9:
c7:1c:d7:01:dc:c5:53:66:8b:32:7e:67:c3:d1:8e:75:ca:54:
03:e0:56:48:bf:58:ed:5c:6a:12:be:58:34:69:a2:16:cd:c1:
bd:9a:4d:7b:79:f3:66:d5:ca:70:21:79:9a:0f:4b:3d:82:17:
92:9b:1a:a3:00:f2:05:da:e6:82:59:a0:b2:ca:14:0a:3e:22:
c2:ec:90:05:a5:57:cb:24:0e:04:fc:6f:89:3f:32:b1:c3:ca:
16:ad:70:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net