Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e13da95c-db81-44f8-9505-033de114acce.roa
File: e13da95c-db81-44f8-9505-033de114acce.roa (raw, json)
Hash identifier: lM+tW6vi1NbdUbbRG6u7dPDz1V7ROR4vpGg/IzhMwRE=
Subject key identifier: E9:28:9C:D5:18:9C:20:84:6B:0E:90:B6:42:11:ED:B6:62:62:19:78
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2D09F2C9EA56C54D48300AF71AB8E9C0B65D0559
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e13da95c-db81-44f8-9505-033de114acce.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.152.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:09:f2:c9:ea:56:c5:4d:48:30:0a:f7:1a:b8:e9:c0:b6:5d:05:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=e1ec72e4d07b618ee85b1be3e2ade84bb256fc5005618190fa936c6aec1f64b6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:ba:88:bb:e5:0e:37:dc:c8:1b:9d:42:50:
9e:34:3b:be:95:78:71:01:77:0c:4d:1a:c9:bf:9e:
01:a8:12:98:c3:cc:37:0d:60:85:b1:94:76:7f:bd:
d9:e6:34:e7:ef:7d:fc:5d:94:7f:6d:56:85:de:ca:
c0:ec:8d:d2:91:14:19:c5:8b:47:4e:04:4c:31:f5:
9c:06:d5:7f:4b:33:5e:18:92:65:49:4a:2a:30:43:
02:42:05:f4:5a:94:da:aa:66:12:dd:a6:e9:91:4b:
dc:4b:67:20:a1:cd:cb:45:14:4d:71:63:bb:b9:12:
2c:41:58:3b:18:28:0d:c6:6c:68:0c:eb:cc:63:29:
bb:4b:fe:0d:e2:19:9c:fe:0c:33:fb:25:5d:55:32:
03:24:ab:24:a0:7b:67:2e:39:ed:bd:24:26:06:9a:
85:36:0f:2d:c0:95:77:52:c9:2d:73:e3:9b:f4:eb:
a0:9a:3b:a9:fc:85:f7:50:f4:a8:5d:12:4b:83:7c:
d8:38:7e:0e:a4:c4:bb:39:b9:30:c0:ba:c6:89:8f:
eb:bf:b9:87:a5:1b:0f:23:e1:f1:5a:db:62:1b:e9:
8c:82:71:c7:6b:fa:37:98:a9:23:a7:f5:af:72:b6:
b0:a0:5c:8c:bd:13:7d:48:dd:cd:c3:24:bc:15:c1:
e3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:28:9C:D5:18:9C:20:84:6B:0E:90:B6:42:11:ED:B6:62:62:19:78
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e13da95c-db81-44f8-9505-033de114acce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.152.0.0/15
Signature Algorithm: sha256WithRSAEncryption
22:a6:21:5d:6b:a8:d5:f7:22:6c:3e:5f:4f:59:06:16:79:14:
b5:2e:dd:9b:57:df:31:9d:29:e4:7d:15:c0:1d:4e:59:24:de:
2c:fc:96:e5:1c:c8:17:f8:36:d4:e9:cd:b9:45:02:d4:79:73:
26:fb:7d:f2:87:40:6b:7f:c4:69:ac:52:97:5f:6d:42:0c:03:
ce:a4:0e:cc:e7:65:23:45:2a:4e:ab:45:cd:b8:c2:29:c1:0a:
4a:73:d2:29:d9:09:22:df:24:88:b8:d9:2b:7e:3a:1a:7e:c5:
5a:dd:2c:96:d3:93:be:88:00:2d:7f:73:b3:bc:15:62:e1:64:
12:b0:4e:6b:72:fe:31:5e:d2:77:27:d9:57:c7:c8:bd:90:4a:
9b:e0:b0:85:be:84:43:58:1e:22:a9:f5:5e:0d:fb:46:df:d0:
5c:46:ed:71:55:dd:2e:9d:10:b5:29:2e:8f:03:a2:51:fa:4f:
59:e1:62:1a:07:7b:13:17:a0:66:d9:9a:f8:75:8f:8c:19:99:
75:76:ea:48:6d:26:0e:0e:70:07:29:88:46:22:2c:5f:e1:31:
00:ee:9d:0b:ea:1e:7e:1d:a9:a5:9e:43:8b:27:93:46:e1:42:
47:2f:61:3f:0b:c1:38:92:f4:11:c6:9b:3d:f3:76:da:f5:1f:
6c:96:97:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net