Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e604171a-9903-4e3b-a4cb-a0ae0a21f49a.roa
File: e604171a-9903-4e3b-a4cb-a0ae0a21f49a.roa (raw, json)
Hash identifier: Dfc/nhLBM9snt9lcDWGWW+e4h+1cjzeuVWLhLl3ZirU=
Subject key identifier: 7D:0D:41:8C:DF:94:2C:10:20:3F:42:27:51:6A:D3:68:93:4C:88:1C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 377EF195223421907081036A88EE88CC85084EA1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e604171a-9903-4e3b-a4cb-a0ae0a21f49a.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.102.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:7e:f1:95:22:34:21:90:70:81:03:6a:88:ee:88:cc:85:08:4e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=cefab5ff4133e13ff40b7845fae6320a971f0f42c5f5785c976b680f861388df, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:8f:0b:ab:32:7a:14:8b:f5:db:de:51:d0:
93:83:7c:94:de:0f:e9:9d:fc:bf:c8:67:ce:a3:61:
a0:dc:2b:7d:24:17:1d:82:34:d0:fe:a2:45:5f:6b:
a2:26:c6:b7:a9:77:ff:a7:54:c2:f4:e4:b2:92:56:
b2:64:aa:6f:d4:06:e9:8b:65:69:4c:d8:90:c5:78:
72:b6:96:a7:30:39:42:61:f1:e2:07:71:a7:c3:7b:
b1:61:3f:25:7b:aa:e6:e1:85:4d:fc:4f:f8:e7:69:
9d:70:25:ca:2f:18:8d:73:21:32:38:90:8f:62:9d:
98:58:4e:0e:c2:bf:a3:55:87:19:2a:8a:ed:bf:f9:
09:27:7d:12:94:5e:47:55:a4:dd:66:38:e4:06:47:
06:c6:b8:aa:e3:42:05:53:14:6c:4d:d6:08:21:f7:
c9:57:e4:fe:51:1f:29:6e:c6:cb:36:c2:6c:8e:a2:
1e:49:04:f4:c2:df:7b:25:86:bd:4c:74:88:2c:ac:
68:54:82:48:71:f6:b5:e9:10:55:01:c2:aa:cc:55:
71:51:b5:7c:dc:1f:11:e2:84:5a:c9:8f:b2:0a:d5:
d6:2b:37:a1:5b:2f:0d:b1:b2:1f:b2:58:b4:42:d6:
09:f5:4e:21:82:ef:2c:1f:85:d9:f3:3c:d6:20:f3:
09:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0D:41:8C:DF:94:2C:10:20:3F:42:27:51:6A:D3:68:93:4C:88:1C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e604171a-9903-4e3b-a4cb-a0ae0a21f49a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d5:21:b0:bb:2b:bd:ea:7e:44:92:f6:5b:2d:38:a6:a4:5c:d9:
e4:01:3e:c7:4d:b6:6c:aa:07:af:5c:1d:25:b9:17:a2:7e:3d:
fc:ba:dc:c3:ef:a8:66:44:d4:3b:65:cb:0c:15:d9:62:04:c1:
ef:7a:05:80:ff:b0:83:22:51:93:4e:48:cb:cd:ba:51:07:2c:
2f:ad:e1:b3:69:a6:de:61:86:7b:87:24:ac:8f:ad:a5:b3:05:
1b:7c:ac:01:30:83:02:5b:d8:6c:80:69:6e:9a:a1:db:89:53:
9d:d4:8a:6b:d8:30:8a:98:11:c2:fd:dd:a7:1b:bd:39:b2:f2:
a3:d3:ab:01:ee:62:76:8f:91:7d:a9:ee:d0:92:85:0e:ea:c7:
15:32:b6:9b:f8:fe:e8:73:4d:95:98:ae:9b:d6:3a:e9:c9:5a:
e1:ae:c1:41:f2:04:cd:c5:a6:c0:ff:75:2e:7d:2b:bf:9c:15:
38:07:73:3a:79:86:17:65:fd:93:77:29:ab:21:19:99:eb:28:
9f:d3:2a:96:2f:e0:51:2b:2d:0a:b4:c3:f1:10:57:65:2a:cd:
05:6a:c6:46:21:50:74:f9:4e:60:d3:8a:3d:a1:b7:d2:90:eb:
06:f2:91:e2:4d:64:85:07:40:4c:58:81:db:f2:7e:d8:10:b2:
a4:97:2f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net