Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f09232b8-719a-44e7-87fb-14733ec6c6e8.roa
File: f09232b8-719a-44e7-87fb-14733ec6c6e8.roa (raw, json)
Hash identifier: WkAgd2rorG/JVlvXCYWnIp/XeV1bO4jInxdkXHQJpF0=
Subject key identifier: B8:D5:D9:6F:23:CB:7D:47:C3:B1:1D:C4:E9:B2:EB:4E:07:15:F3:D0
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5959207BF6FDF6E3CCFE07880D2FECE5D6ADEC70
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f09232b8-719a-44e7-87fb-14733ec6c6e8.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.34.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:59:20:7b:f6:fd:f6:e3:cc:fe:07:88:0d:2f:ec:e5:d6:ad:ec:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=ab22b4cdbd1011d6c38abdd5d952cac5b3088f646c2559c3529a3f8acfc5c190, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:ea:06:c5:d3:17:bd:96:3f:b8:03:c2:f5:
ce:f8:1c:ae:8b:a3:eb:6e:fb:21:5e:98:3a:c5:d7:
87:38:8f:cb:5e:c4:35:db:13:80:fd:70:cd:c2:7c:
90:17:82:9c:d7:1b:be:15:e8:68:ae:24:d0:bc:8b:
c1:86:09:dd:59:bf:89:25:ab:5b:1a:70:d9:a4:e8:
5f:7c:76:f2:30:51:40:4c:88:09:54:8c:43:33:51:
da:a9:08:d3:82:d7:74:49:17:ac:cb:eb:25:7d:8d:
62:ed:7b:4d:f9:c7:74:be:a2:4f:71:8d:6c:61:ef:
8e:61:9b:fd:cd:da:82:bc:75:c6:89:5a:82:33:91:
62:cb:30:53:af:2f:58:69:5d:99:3a:6c:df:4c:27:
9e:01:e1:8c:b9:7e:7c:e0:07:46:df:29:f7:70:7d:
ce:5b:8f:af:b4:0e:29:1c:9d:f5:6c:1c:06:46:bf:
3b:a0:ef:9c:59:45:b3:d1:29:9a:8f:c8:ac:ce:4f:
41:47:32:f5:dc:4b:e2:5f:f3:a2:4b:ff:f7:7b:08:
a7:5d:b6:15:90:80:ab:51:52:ba:13:df:0d:bf:fe:
de:d3:0a:71:4e:6b:28:47:b7:57:82:fc:b9:79:ae:
72:a9:90:58:c8:b6:05:03:6d:97:e9:75:d3:c6:a0:
75:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D5:D9:6F:23:CB:7D:47:C3:B1:1D:C4:E9:B2:EB:4E:07:15:F3:D0
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f09232b8-719a-44e7-87fb-14733ec6c6e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.34.0.0/15
Signature Algorithm: sha256WithRSAEncryption
64:e9:73:c1:36:b5:28:77:76:bf:37:7c:00:5c:f8:07:51:c9:
a9:7a:f2:d2:1e:93:4b:1e:38:9c:89:f0:90:f3:37:4f:4d:6d:
81:d9:9d:4d:5c:cd:3d:5d:ed:05:96:18:29:5d:2e:01:d1:7c:
bb:1b:4e:ff:7b:f0:3c:c7:ef:2f:c0:72:e6:39:6e:ed:0f:06:
c6:f1:a0:2a:0e:e6:6d:6f:fe:77:b7:c6:4a:54:0d:c6:da:a6:
17:0b:07:77:89:3c:6c:57:9a:1d:b2:7f:ca:8f:0e:62:35:1c:
ab:f8:f4:de:f6:ee:9c:b6:b2:18:73:e4:8c:18:8c:b7:b9:59:
3b:91:d4:20:10:05:14:df:57:db:96:da:e5:65:0f:57:24:ff:
e1:0f:1d:31:de:b7:4b:ba:2b:51:90:fb:09:55:5c:a6:de:b8:
9c:43:a1:62:32:fa:db:79:cb:3a:c6:cb:99:e6:b3:60:04:7c:
8b:c8:28:76:ed:04:78:0e:9c:67:fc:9c:55:6d:20:93:e4:87:
9e:ff:e1:2a:ae:e7:f0:00:86:a8:3c:56:c7:72:b6:0f:d8:53:
87:47:5a:1e:1b:15:a2:aa:94:97:09:cc:80:32:2b:a5:75:7b:
88:36:f6:9c:05:cf:4e:fd:b7:fd:79:e8:84:93:57:d4:10:d5:
4f:2e:11:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net