Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/de2bba33-294e-4f48-b36f-b2ba0435d372.roa
File: de2bba33-294e-4f48-b36f-b2ba0435d372.roa (raw, json)
Hash identifier: EN9Tf/zmfPfxBDGmn2VSZvNqbkZ0ioBcF4EFJQCYnxY=
Subject key identifier: 3C:3E:4A:A8:67:33:6A:2C:30:4E:A0:16:9B:68:45:78:DA:5E:45:BB
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5AC9F60D3BB990BE5DB5176BF4EB20761F25094C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/de2bba33-294e-4f48-b36f-b2ba0435d372.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.110.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:c9:f6:0d:3b:b9:90:be:5d:b5:17:6b:f4:eb:20:76:1f:25:09:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=5b435395a3f4d6c6de9466af5967e833a9eb497687d5d2c2a73288772bffce9b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:24:7a:cd:63:b4:74:4a:d9:19:ee:fa:b1:
b2:ac:c3:64:a9:b4:9b:aa:70:e7:68:b7:8f:9d:8c:
95:88:13:83:01:1e:6b:e4:8f:47:6f:aa:79:c6:26:
c9:24:50:ab:d6:8a:7e:77:f5:be:7f:27:ad:9b:61:
ea:bc:42:e7:c3:00:c6:f5:98:1f:10:46:cf:a2:de:
aa:3a:30:2b:1f:23:d1:97:45:b6:35:e8:e9:56:aa:
05:7a:db:54:35:ce:75:6b:d4:75:e7:e7:4e:28:36:
39:79:dd:3d:f1:70:c5:81:04:4b:79:d1:96:0c:90:
17:f1:2f:8e:c6:97:ae:dd:de:87:0f:4a:55:3a:e0:
b4:20:d0:9e:05:eb:5a:05:32:1a:e2:29:c8:99:5b:
a9:82:2b:90:cf:fd:1f:d5:78:3b:e3:07:76:da:e0:
84:17:48:79:fb:22:18:a9:28:21:14:12:9b:80:08:
f9:1a:04:fe:bf:c5:1d:0f:33:60:7f:35:a0:cf:6d:
0e:37:3c:94:7e:58:9c:e1:b2:c2:97:e5:a3:bd:6f:
eb:8e:c3:ae:e9:62:c1:a1:35:15:3e:1e:bc:ff:07:
e9:35:b2:21:ef:fc:17:e9:e5:bd:32:1a:70:b1:4c:
d9:f1:00:8f:2e:f9:80:ee:78:bf:e5:72:c9:a9:07:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3E:4A:A8:67:33:6A:2C:30:4E:A0:16:9B:68:45:78:DA:5E:45:BB
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/de2bba33-294e-4f48-b36f-b2ba0435d372.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.110.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:d8:23:5c:27:18:22:0a:41:b0:48:39:21:26:6e:50:99:45:
dd:c5:29:a8:14:0a:0e:f2:5b:5a:a0:69:89:7e:77:f5:64:c6:
fe:cd:15:f6:e9:43:0f:9a:9e:60:f5:df:e4:0d:63:49:01:f3:
70:74:72:9d:06:5b:96:1f:61:6f:e6:2b:cd:a8:09:11:37:6a:
04:15:3f:7e:76:aa:88:55:b1:62:6c:3b:95:2c:a0:63:ff:3f:
b4:05:c3:7d:b8:ea:5c:0b:b5:59:98:ae:2a:fc:f0:7a:73:5d:
c9:eb:bf:c2:05:97:3a:bb:75:6b:26:18:96:68:8c:1f:45:b1:
c6:14:8c:f9:af:0d:72:d5:93:d9:4d:3f:e6:bd:b5:bd:fa:2f:
fa:90:c1:00:57:9d:67:53:a4:1f:b5:41:d8:3c:4b:82:c0:54:
90:3f:b2:b2:93:c7:64:70:00:c5:16:f5:cb:c7:40:8f:b9:46:
91:2e:15:f9:55:e1:40:3b:6d:f2:4e:ba:d1:d5:61:d8:c1:ee:
79:db:0d:3c:e8:ad:86:4b:88:ba:9d:b0:3d:7d:44:9a:20:68:
ec:ea:67:10:b1:f9:d0:47:2a:f0:f1:6e:1c:3d:7d:ac:9c:ad:
3b:ec:68:d8:57:9a:61:23:69:00:37:e0:fd:26:e3:3d:bb:57:
78:f7:11:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net