Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e18ba74d-e46b-4bdc-ada9-e9a9072e0625.roa
File: e18ba74d-e46b-4bdc-ada9-e9a9072e0625.roa (raw, json)
Hash identifier: 6aBLxV6C9/Wrc/JOLyUniDLaX5hTWCMTftd20TfMv9o=
Subject key identifier: 1A:66:88:53:9E:B0:F7:3F:E0:EE:D9:93:3C:D4:7B:86:89:0A:6B:73
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0641C5AE516FB87AC6D67A87F52B328E05C0F660
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e18ba74d-e46b-4bdc-ada9-e9a9072e0625.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 83.116.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:41:c5:ae:51:6f:b8:7a:c6:d6:7a:87:f5:2b:32:8e:05:c0:f6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=d97496d2ced7cd9a9cb5c4b0196404033a3968b6870754b4be79773bd9af0f5e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a6:24:50:e3:8e:ff:bf:64:f7:07:68:fd:30:
00:25:85:a8:a0:87:75:c3:4a:1c:9c:d9:bc:8d:3f:
a6:b6:bb:49:88:bf:bf:30:72:73:91:19:9f:97:24:
bd:d6:cd:63:24:9a:e3:2c:dc:43:25:67:4a:63:0f:
d7:5c:eb:50:9c:14:2b:26:db:2a:2a:70:58:5c:ce:
34:b7:f1:56:00:d9:04:47:f4:a8:ac:47:97:9c:79:
01:14:cc:c6:ff:01:19:cd:1d:85:67:8e:2a:c5:fa:
d2:a9:07:7e:7b:83:e5:b3:4d:a0:c6:bf:d8:49:dd:
93:46:08:20:07:dd:1f:a9:98:0e:e0:73:51:56:ba:
13:5b:8b:46:55:8f:eb:32:81:e3:6c:a1:2e:1f:bb:
02:02:35:d7:43:53:80:eb:a2:e6:1a:1c:c8:05:3f:
a0:a9:e4:02:5f:4f:be:64:b5:46:90:68:7e:aa:87:
83:e5:82:d7:0f:7e:69:ab:47:5f:0e:09:42:03:6c:
44:ce:74:db:e4:78:49:34:4b:82:49:50:92:01:61:
e3:12:1a:f7:d5:a8:85:8a:99:f1:c3:38:aa:a8:b7:
2d:aa:bb:a7:64:83:14:aa:36:d2:ff:76:88:b2:cf:
e4:37:bf:49:da:e2:d6:dc:45:aa:4a:7d:a6:52:18:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:66:88:53:9E:B0:F7:3F:E0:EE:D9:93:3C:D4:7B:86:89:0A:6B:73
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e18ba74d-e46b-4bdc-ada9-e9a9072e0625.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.116.0.0/15
Signature Algorithm: sha256WithRSAEncryption
1a:36:23:ca:a6:12:22:a1:42:a2:cd:e6:4f:d3:57:78:77:b5:
31:d3:42:0f:fb:72:01:f1:88:1a:3f:5d:7b:2f:0a:10:61:c0:
47:df:f0:a0:b0:cb:0a:de:dc:c5:1c:5d:0c:e3:0c:1b:f4:f2:
f5:9d:16:6d:21:39:6a:00:7e:e1:2c:bb:2a:94:6e:6f:9b:d7:
f1:b6:ff:1a:99:07:97:0f:26:46:a5:32:9e:8c:a0:95:71:99:
ce:56:fc:c0:a8:df:12:fa:8c:d7:38:a8:b5:52:28:c2:3e:35:
ec:b6:0f:d7:57:93:ee:21:28:26:ed:43:d7:3a:53:9b:27:a8:
06:82:ff:9e:85:a0:54:37:ac:09:ee:67:db:98:32:3d:05:34:
67:9a:64:f6:e2:cc:9c:1a:11:fe:d8:e0:55:17:3d:5a:33:2e:
8b:6b:3b:65:91:c8:42:33:6d:83:05:a9:c1:57:43:33:67:e9:
5c:1b:a4:c0:75:b6:6f:ee:fd:8b:34:81:1d:04:73:1a:74:16:
a3:dd:69:cd:d0:59:a3:92:e6:97:a6:4b:83:61:48:fd:18:c8:
97:be:c9:60:eb:2e:47:e9:c8:d7:97:2e:cb:e6:41:e6:18:0f:
d6:35:95:38:67:69:79:4b:45:d9:1a:29:33:4b:90:36:3c:8b:
bf:ce:1d:19
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUBkHFrlFvuHrG1nqH9SsyjgXA9mAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMDYwMDAwMDBaFw0yNTAxMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ5NzQ5NmQyY2VkN2NkOWE5Y2I1YzRiMDE5NjQwNDAzM2EzOTY4YjY4NzA3
NTRiNGJlNzk3NzNiZDlhZjBmNWUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOOmJFDjjv+/ZPcHaP0wACWFqKCHdcNKHJzZvI0/pra7SYi/vzByc5EZn5ck
vdbNYySa4yzcQyVnSmMP11zrUJwUKybbKipwWFzONLfxVgDZBEf0qKxHl5x5ARTM
xv8BGc0dhWeOKsX60qkHfnuD5bNNoMa/2Endk0YIIAfdH6mYDuBzUVa6E1uLRlWP
6zKB42yhLh+7AgI110NTgOui5hocyAU/oKnkAl9PvmS1RpBofqqHg+WC1w9+aatH
Xw4JQgNsRM502+R4STRLgklQkgFh4xIa99WohYqZ8cM4qqi3Laq7p2SDFKo20v92
iLLP5De/Sdri1txFqkp9plIYREsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQaZohT
nrD3P+Du2ZM81HuGiQprczAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZTE4YmE3NGQtZTQ2Yi00YmRjLWFkYTktZTlhOTA3MmUwNjI1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAVN0MA0G
CSqGSIb3DQEBCwUAA4IBAQAaNiPKphIioUKizeZP01d4d7Ux00IP+3IB8YgaP117
LwoQYcBH3/CgsMsK3tzFHF0M4wwb9PL1nRZtITlqAH7hLLsqlG5vm9fxtv8amQeX
DyZGpTKejKCVcZnOVvzAqN8S+ozXOKi1UijCPjXstg/XV5PuISgm7UPXOlObJ6gG
gv+ehaBUN6wJ7mfbmDI9BTRnmmT24sycGhH+2OBVFz1aMy6LaztlkchCM22DBanB
V0MzZ+lcG6TAdbZv7v2LNIEdBHMadBaj3WnN0FmjkuaXpkuDYUj9GMiXvslg6y5H
6cjXly7L5kHmGA/WNZU4Z2l5S0XZGikzS5A2PIu/zh0Z
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net