Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f77806ea-9955-4b0b-97f2-78a93d7f0c74.roa
File: f77806ea-9955-4b0b-97f2-78a93d7f0c74.roa (raw, json)
Hash identifier: /iGFEZRC/lTB84fSSCnxfDdG96gdxF3WzvYdg/lcqww=
Subject key identifier: F1:AF:6E:4B:76:7D:F8:5C:52:E7:8B:8E:52:D1:9F:8E:0F:D6:38:67
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 10C3184EF3853F4926C1800E438ECDCC6C35976E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f77806ea-9955-4b0b-97f2-78a93d7f0c74.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.172.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c3:18:4e:f3:85:3f:49:26:c1:80:0e:43:8e:cd:cc:6c:35:97:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=983aa737cdfd551b2c11f4a96f6ca8bf8a36be3084efb765496237ffe1e2a104, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:7b:de:69:ac:41:4b:b4:45:37:ac:08:db:
2a:9a:0a:cd:d7:ed:a4:2b:82:ff:d3:d6:81:08:21:
e4:b2:38:e3:81:e9:fa:d2:1a:62:81:26:3d:19:ab:
2f:ad:37:82:44:65:11:e3:03:62:0b:48:16:e1:4d:
b9:8d:ea:ba:77:bc:56:ec:7c:03:1a:40:5a:de:2d:
8d:76:f5:cd:9c:0a:88:55:24:90:9a:25:13:80:7a:
4e:ac:f3:e4:ef:4b:e4:d1:eb:a8:fa:8c:1f:5d:3d:
8e:80:30:14:4f:09:04:5c:e1:c1:ef:2f:91:de:78:
49:5e:78:67:04:96:0f:4d:73:21:3f:29:e8:3c:5c:
17:4b:1c:f3:fc:18:89:94:10:de:e6:f9:39:f1:63:
95:3e:dc:78:1a:7d:f9:b8:dd:24:11:0e:e1:3f:b6:
a3:37:c0:6a:af:27:d2:44:4e:d6:49:8c:42:13:6c:
f7:c5:64:a4:e9:26:94:e4:23:e5:90:4d:1d:9f:12:
51:12:c9:43:cd:7a:c8:e0:dc:34:9a:27:82:2d:09:
55:74:58:b1:6a:f4:9b:37:ce:b4:9e:79:dd:38:26:
5b:cb:04:2a:a9:f0:08:7a:4a:a7:8b:35:46:60:7f:
32:d6:7b:39:82:2b:bf:e9:c2:46:2d:ca:4f:26:cb:
62:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AF:6E:4B:76:7D:F8:5C:52:E7:8B:8E:52:D1:9F:8E:0F:D6:38:67
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f77806ea-9955-4b0b-97f2-78a93d7f0c74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.172.0.0/15
Signature Algorithm: sha256WithRSAEncryption
0a:96:c5:fd:df:14:8f:92:be:6b:f0:93:d8:ae:14:b2:79:01:
eb:c6:c7:fc:5a:51:cc:a0:0b:6d:9c:d2:d4:e8:ee:04:ba:4a:
a3:0b:d9:f5:1d:f1:e6:56:4b:11:02:37:07:d8:83:9b:7c:3e:
c3:fa:95:26:91:1b:06:2f:74:9d:6c:d2:d4:3c:29:af:35:ea:
fc:c2:ec:8a:63:bd:92:a0:95:95:b3:4a:be:5f:43:3c:e6:d4:
25:11:72:23:8e:f9:26:36:00:c4:45:32:20:15:b0:86:c6:35:
8c:38:02:15:2a:7d:65:1d:3e:f9:f4:44:94:77:3e:bc:67:d0:
75:66:73:6f:29:ee:0e:75:ba:df:f3:b7:ce:b4:6d:54:0e:20:
a8:ac:5b:29:3a:79:2a:3e:36:5e:45:98:a1:00:ee:83:12:fb:
6c:14:12:f5:05:e7:5c:6a:34:92:76:61:63:61:5d:3b:f4:ed:
79:46:48:ef:41:74:93:13:4c:b2:25:79:4b:ef:79:ed:6f:c9:
38:0e:2e:2d:66:3e:10:fe:6d:c2:71:75:80:1a:9d:0b:b2:7a:
34:e4:31:69:77:7c:fb:33:de:9c:89:ce:34:6f:8f:b0:4f:29:
f3:11:cc:bf:de:8a:10:ed:40:db:1d:f2:08:2c:6f:5f:07:72:
5a:bd:40:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net