Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f4d4070b-fb20-4536-8c71-53420a83e347.roa
File: f4d4070b-fb20-4536-8c71-53420a83e347.roa (raw, json)
Hash identifier: nUB7Myx99MlS4Uc6sKT60OYMk76mpa+DsaPmqZXiwus=
Subject key identifier: A2:C4:14:97:93:05:5E:CF:8D:DD:6F:72:8D:47:B6:C9:90:06:2C:43
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 024FEA4814DCC2F69B3B459A8E10DC2C96F0550E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f4d4070b-fb20-4536-8c71-53420a83e347.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 57.95.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:4f:ea:48:14:dc:c2:f6:9b:3b:45:9a:8e:10:dc:2c:96:f0:55:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=f4a5b0daa882e0fd72606889ff9e2ee0a1320a1710242e256929e00765c82520, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2b:f1:63:7e:13:e6:c8:90:56:c8:38:2a:82:
c5:5a:80:1e:b6:65:dc:82:d3:bc:d8:d9:f2:ac:33:
b8:90:8f:3d:18:55:f4:02:c0:75:df:c7:8d:21:93:
00:a7:ec:c2:e2:61:b2:94:74:27:b6:63:a7:c4:d5:
3e:e9:b5:90:bc:4f:b3:e7:d4:ac:31:7e:eb:b1:8a:
34:e4:2c:90:6b:b4:e4:2e:72:37:8b:d0:a6:8c:6b:
9f:85:9b:7c:0f:47:2a:be:96:89:8e:3c:44:e2:a7:
6c:7b:71:ae:7d:33:f2:7c:fc:a8:51:ad:c2:3e:f7:
7f:fc:57:8c:29:da:e9:05:48:ef:5e:bc:44:59:76:
dd:e7:1a:6e:f5:9b:47:ee:35:d4:13:da:e2:52:ca:
63:73:33:b3:65:59:8f:f0:38:e9:75:67:6c:cd:18:
55:85:9f:a5:9a:8f:98:db:2a:dd:c6:c9:1b:c0:a5:
6b:45:93:92:82:7d:68:09:ab:49:1d:27:85:3f:b0:
f3:0e:9a:85:3d:b7:33:7d:5d:79:04:50:ff:6b:fd:
09:6d:ea:51:17:d4:a1:3b:ce:7f:4f:69:8f:ac:bd:
6d:b1:84:00:c3:b0:9f:dd:29:c4:f7:c6:5b:9c:06:
9c:81:0a:9b:43:cf:b1:cb:ea:15:10:4e:d0:ee:c4:
df:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C4:14:97:93:05:5E:CF:8D:DD:6F:72:8D:47:B6:C9:90:06:2C:43
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f4d4070b-fb20-4536-8c71-53420a83e347.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.95.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:7d:54:3b:af:7f:d8:85:54:82:66:25:05:a4:9d:2e:ae:cf:
f8:2c:e0:87:93:23:f2:0b:22:18:d1:7b:81:ef:c8:05:da:62:
5e:67:68:02:96:48:c7:f3:33:b8:2b:27:ce:e0:22:59:ce:10:
5a:a9:1e:ba:15:57:41:a2:4c:c9:f5:49:d9:b8:c1:20:02:5d:
b0:1d:dc:f5:29:dc:82:7c:99:96:2a:3d:fe:55:6a:59:e0:6b:
53:0a:78:d1:70:63:45:96:6f:00:70:d5:76:7a:2d:fa:b7:d9:
17:f8:c9:30:5c:0d:0f:8f:f2:15:4a:f4:ed:c3:81:df:42:ed:
df:29:0c:cc:c6:f6:48:05:1f:30:be:5d:ec:c2:99:a5:e6:70:
d8:4d:ba:31:b0:87:f5:a5:15:8a:fb:57:07:f8:e7:e3:86:79:
c5:cd:9b:a4:7a:bf:3e:52:19:db:02:39:3e:36:d0:6a:2d:48:
da:8d:49:8d:5f:0e:54:f9:2b:cc:20:19:bf:99:c9:7b:c8:4c:
5e:b1:9c:dd:80:54:df:43:4f:ed:15:d3:48:26:6d:a0:aa:fc:
24:ff:b9:37:3c:47:1d:f9:3d:99:6a:02:e4:5e:e5:2b:76:8d:
59:3f:4d:08:25:ef:65:9b:2e:a2:c8:7f:77:a9:2f:03:0e:72:
bd:8b:27:a8
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUAk/qSBTcwvabO0WajhDcLJbwVQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGY0YTViMGRhYTg4MmUwZmQ3MjYwNjg4OWZmOWUyZWUwYTEzMjBhMTcxMDI0
MmUyNTY5MjllMDA3NjVjODI1MjAxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJkr8WN+E+bIkFbIOCqCxVqAHrZl3ILTvNjZ8qwzuJCPPRhV9ALAdd/HjSGT
AKfswuJhspR0J7Zjp8TVPum1kLxPs+fUrDF+67GKNOQskGu05C5yN4vQpoxrn4Wb
fA9HKr6WiY48ROKnbHtxrn0z8nz8qFGtwj73f/xXjCna6QVI7168RFl23ecabvWb
R+411BPa4lLKY3Mzs2VZj/A46XVnbM0YVYWfpZqPmNsq3cbJG8Cla0WTkoJ9aAmr
SR0nhT+w8w6ahT23M31deQRQ/2v9CW3qURfUoTvOf09pj6y9bbGEAMOwn90pxPfG
W5wGnIEKm0PPscvqFRBO0O7E3/MCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSixBSX
kwVez43db3KNR7bJkAYsQzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZjRkNDA3MGItZmIyMC00NTM2LThjNzEtNTM0MjBhODNlMzQ3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADlfMA0G
CSqGSIb3DQEBCwUAA4IBAQBrfVQ7r3/YhVSCZiUFpJ0urs/4LOCHkyPyCyIY0XuB
78gF2mJeZ2gClkjH8zO4KyfO4CJZzhBaqR66FVdBokzJ9UnZuMEgAl2wHdz1KdyC
fJmWKj3+VWpZ4GtTCnjRcGNFlm8AcNV2ei36t9kX+MkwXA0Pj/IVSvTtw4HfQu3f
KQzMxvZIBR8wvl3swpml5nDYTboxsIf1pRWK+1cH+OfjhnnFzZuker8+UhnbAjk+
NtBqLUjajUmNXw5U+SvMIBm/mcl7yExesZzdgFTfQ0/tFdNIJm2gqvwk/7k3PEcd
+T2ZagLkXuUrdo1ZP00IJe9lmy6iyH93qS8DDnK9iyeo
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net