Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e0030b8b-a0f4-4c9b-8010-e1bd69d211cd.roa
File: e0030b8b-a0f4-4c9b-8010-e1bd69d211cd.roa (raw, json)
Hash identifier: NaTn673m/g8AvlbC97WdOVPXsYmxkaZ0MXRzpQqNh7Y=
Subject key identifier: 1D:62:A9:FE:D9:61:42:D9:EE:EA:F1:B6:89:BB:5A:A7:FE:CA:73:47
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6F82A4D258486952651482B0C899F29F62117E2E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e0030b8b-a0f4-4c9b-8010-e1bd69d211cd.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.118.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:82:a4:d2:58:48:69:52:65:14:82:b0:c8:99:f2:9f:62:11:7e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=6ba3b65b355b893f390b2ed74ea6a6590fa447e4f419d5298c2b6a31d11fe46e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:6c:f9:94:46:e0:74:8f:6b:ce:b9:f0:ea:
44:0b:66:c2:17:d2:18:db:cf:25:74:a4:19:3f:c7:
aa:dd:a5:eb:f1:cb:e0:1d:cf:2a:65:7e:12:56:a3:
7f:36:08:e6:74:b8:38:83:d8:d3:23:7d:d1:9e:84:
fc:65:a8:6a:ad:cf:f2:e0:1d:c4:f0:e5:62:77:a4:
10:15:f8:65:3c:b7:99:dd:50:11:8d:d1:c2:b4:a8:
40:3a:a2:82:56:08:26:79:75:a0:36:a9:6f:4b:b4:
0f:16:fd:53:af:0f:9d:2b:e1:91:28:cf:f2:70:c1:
f7:71:df:ee:61:26:82:8b:24:0c:d8:5b:95:09:0b:
6f:a6:14:b6:79:70:cd:9e:f5:fe:56:aa:c0:5d:cb:
4e:8f:99:3b:80:55:56:0e:70:ba:f2:d0:2a:01:60:
44:a3:8e:7e:29:0f:cf:16:ef:07:ba:62:11:dd:06:
9e:9a:ab:fa:43:06:b8:e0:1c:49:b4:4b:8e:d9:2c:
1d:f8:dc:17:9a:ab:69:e0:ff:e5:4e:5c:bd:7a:e8:
f1:e5:26:b4:85:ee:e4:24:d9:c5:c9:d6:0d:9f:cb:
8c:e7:80:00:7c:59:95:9e:c9:b5:58:ca:fb:72:4d:
33:37:2a:62:45:28:f5:8f:4e:da:0a:68:d4:06:5e:
93:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:62:A9:FE:D9:61:42:D9:EE:EA:F1:B6:89:BB:5A:A7:FE:CA:73:47
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e0030b8b-a0f4-4c9b-8010-e1bd69d211cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.118.0.0/15
Signature Algorithm: sha256WithRSAEncryption
40:4e:e6:58:11:dc:21:c3:cd:d5:f1:bf:d7:e4:d2:e3:9a:36:
44:10:b5:73:6e:ee:1f:bf:f1:85:04:13:e1:52:d0:81:aa:57:
19:e8:63:dc:7c:df:50:f4:fb:8a:aa:c5:aa:01:ca:af:89:84:
e9:16:7b:d3:f9:a0:39:29:34:b1:6d:cc:50:b7:aa:4d:87:92:
73:b7:7a:26:ee:b4:56:40:50:72:61:f6:64:3a:1d:11:b9:2b:
13:2d:6a:04:c3:c2:03:aa:89:69:be:12:ae:a7:17:d1:5b:11:
4c:65:03:4a:40:fe:8b:de:2c:75:c1:12:82:9e:bd:65:5b:a5:
8d:d7:7a:4a:eb:3b:84:f7:53:a4:0e:89:c7:a4:7a:a8:a0:47:
98:fd:d4:1b:e2:e5:e7:c9:e2:3f:c2:f6:b9:d7:c1:80:55:36:
62:dd:9f:84:b8:a4:05:bc:1f:7c:82:bd:c1:51:3b:1f:d3:d0:
b4:5a:46:f8:a6:df:a2:a5:83:2b:5c:a1:b5:af:89:53:70:52:
49:c6:68:5e:ca:72:db:24:6a:ed:aa:64:3d:5a:87:15:cc:5b:
e7:f0:25:f3:c3:c6:e0:59:7e:5e:5f:c1:80:ea:63:17:24:4b:
56:9f:fb:b5:c5:c2:c5:a1:e3:15:7a:2e:a3:38:9b:c1:c2:6c:
8d:6a:f6:43
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUb4Kk0lhIaVJlFIKwyJnyn2IRfi4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDZiYTNiNjViMzU1Yjg5M2YzOTBiMmVkNzRlYTZhNjU5MGZhNDQ3ZTRmNDE5
ZDUyOThjMmI2YTMxZDExZmU0NmUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKmkbPmURuB0j2vOufDqRAtmwhfSGNvPJXSkGT/Hqt2l6/HL4B3PKmV+Elaj
fzYI5nS4OIPY0yN90Z6E/GWoaq3P8uAdxPDlYnekEBX4ZTy3md1QEY3RwrSoQDqi
glYIJnl1oDapb0u0Dxb9U68PnSvhkSjP8nDB93Hf7mEmgoskDNhblQkLb6YUtnlw
zZ71/laqwF3LTo+ZO4BVVg5wuvLQKgFgRKOOfikPzxbvB7piEd0Gnpqr+kMGuOAc
SbRLjtksHfjcF5qraeD/5U5cvXro8eUmtIXu5CTZxcnWDZ/LjOeAAHxZlZ7JtVjK
+3JNMzcqYkUo9Y9O2gpo1AZekyMCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQdYqn+
2WFC2e7q8baJu1qn/spzRzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZTAwMzBiOGItYTBmNC00YzliLTgwMTAtZTFiZDY5ZDIxMWNkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATN2MA0G
CSqGSIb3DQEBCwUAA4IBAQBATuZYEdwhw83V8b/X5NLjmjZEELVzbu4fv/GFBBPh
UtCBqlcZ6GPcfN9Q9PuKqsWqAcqviYTpFnvT+aA5KTSxbcxQt6pNh5Jzt3om7rRW
QFByYfZkOh0RuSsTLWoEw8IDqolpvhKupxfRWxFMZQNKQP6L3ix1wRKCnr1lW6WN
13pK6zuE91OkDonHpHqooEeY/dQb4uXnyeI/wva518GAVTZi3Z+EuKQFvB98gr3B
UTsf09C0Wkb4pt+ipYMrXKG1r4lTcFJJxmheynLbJGrtqmQ9WocVzFvn8CXzw8bg
WX5eX8GA6mMXJEtWn/u1xcLFoeMVei6jOJvBwmyNavZD
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net