Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f71d7429-ef0b-424d-9e36-741d62d1968a.roa
File: f71d7429-ef0b-424d-9e36-741d62d1968a.roa (raw, json)
Hash identifier: K7gE/yDioCQ3LvvSV68nlXTWvDQTwvsE7yeTO4/FgnQ=
Subject key identifier: 69:80:4E:6B:D2:F1:85:35:A8:65:40:ED:B1:BB:22:54:A8:E5:95:7A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 257108F761CAAB76EBF9DB4398CCE5A0BD000663
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f71d7429-ef0b-424d-9e36-741d62d1968a.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.208.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:71:08:f7:61:ca:ab:76:eb:f9:db:43:98:cc:e5:a0:bd:00:06:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=46a236e755adfc341a366cc8eaeb3e3b60c7be31e8649e0aac0c4c562bea8baa, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:38:d7:52:7f:3e:58:ac:14:18:0b:b5:d2:55:
e4:50:7a:e8:e7:42:75:3c:ce:d5:e3:6d:8b:60:de:
ec:99:fc:3e:ac:cf:b6:db:d6:69:2c:dd:94:31:aa:
09:ea:77:2e:4f:4c:85:a4:41:c4:1c:5d:ea:02:cb:
3a:56:a7:72:58:e1:01:38:49:f8:df:57:9a:5a:8c:
0c:88:29:06:2b:7a:9a:eb:a6:94:61:a9:42:61:19:
0e:94:4d:44:07:8f:47:6a:8a:c7:d1:63:06:f3:bf:
a2:8a:22:85:e0:f7:18:36:61:7b:42:d6:ff:ff:b5:
b6:f4:68:38:3a:dc:19:eb:69:72:99:31:be:9e:b3:
25:60:b9:be:7c:b5:bb:11:9a:14:5d:b7:c4:3f:af:
c6:a7:61:2e:93:57:07:79:5d:e0:3a:ae:b1:3a:dc:
ab:52:94:eb:38:1c:84:0d:4d:24:8d:6c:09:4b:28:
da:ac:be:44:14:63:bf:8d:98:36:f9:46:45:03:a8:
41:66:80:c4:c1:3d:a4:83:2b:ff:6d:a8:d7:1f:aa:
61:55:37:dc:39:4b:06:35:aa:e3:ed:65:b0:b9:6b:
6e:b7:c1:e8:9c:6c:61:9e:e1:9f:4c:2d:11:57:62:
cf:24:09:a4:d3:07:24:d4:94:82:8b:ea:df:51:21:
5f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:80:4E:6B:D2:F1:85:35:A8:65:40:ED:B1:BB:22:54:A8:E5:95:7A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f71d7429-ef0b-424d-9e36-741d62d1968a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.208.0.0/15
Signature Algorithm: sha256WithRSAEncryption
6b:35:96:bb:42:02:ae:89:04:e2:43:f3:70:01:0f:37:cf:d6:
ea:e4:b9:1f:35:18:0d:cc:a7:3e:41:d8:1b:79:43:56:4d:5a:
86:54:01:a8:ac:79:f4:68:e3:ab:44:db:23:88:82:db:36:02:
8a:fc:75:4a:cd:2b:0e:34:e6:71:21:56:85:96:e7:15:50:49:
d4:c6:ae:16:b7:41:49:87:a5:30:32:13:a0:cf:6b:ea:80:17:
f7:83:48:0c:d6:0b:21:f5:4a:8f:7b:31:31:af:6b:9b:cb:e1:
47:a8:b3:b0:40:44:b6:44:e2:2c:7d:b3:70:73:fc:6f:20:7e:
62:ca:32:7e:de:60:ff:88:c7:66:d2:84:fe:ea:5f:5d:a7:89:
bc:54:9b:1c:63:d5:7d:cc:14:ff:95:b2:46:d8:20:33:8b:15:
62:72:30:8c:47:3a:9d:b6:5a:30:65:58:09:f3:90:26:54:a6:
9c:67:19:f9:ab:a5:5e:88:74:27:28:bd:2a:94:67:3b:45:e7:
22:7a:ff:8b:b4:6f:15:2c:40:68:00:58:b2:61:9d:95:ae:be:
ad:0c:0d:e9:59:ff:b4:ae:1b:25:7d:84:a1:b9:a5:2f:cd:2f:
57:9e:fa:77:3b:24:12:c9:3d:c0:58:a3:09:7f:3f:b5:13:39:
6b:f1:22:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net