Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc21f5a9-b6e5-453c-a66b-c9eee5d06588.roa
File: fc21f5a9-b6e5-453c-a66b-c9eee5d06588.roa (raw, json)
Hash identifier: tIisCDCgnaJCP5o3/HDZp8LX8qhcDOPKHQ+Ae68HBaU=
Subject key identifier: 5F:43:9A:E2:A6:FC:6B:14:3D:03:52:64:F7:D2:D3:2B:A3:78:BC:A9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 45AC614FB7772D15D7B243582185F8FBB39C7124
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc21f5a9-b6e5-453c-a66b-c9eee5d06588.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.131.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ac:61:4f:b7:77:2d:15:d7:b2:43:58:21:85:f8:fb:b3:9c:71:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=9409a4ccfdbfd954881dc09b71f4c7f678a914fe38141c3234279aea055bb8d1, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:d0:1d:8c:80:4c:e1:b2:b1:8c:b0:35:84:
32:ba:70:0d:69:06:00:e9:6e:1a:a9:79:b0:cc:73:
f8:2f:98:ce:fa:53:58:2a:40:bd:67:1f:de:29:90:
90:75:7c:8c:e0:92:36:df:3c:a8:ca:25:35:41:b5:
f1:d8:5e:2c:0f:bc:ea:19:e4:74:fe:92:2e:e4:e4:
84:02:70:34:8f:61:69:9e:1d:36:e6:d8:a3:96:ce:
cf:14:6b:f3:31:bd:5b:13:61:b7:0c:80:35:88:47:
fb:9e:85:98:35:3a:0b:7b:e5:84:27:19:dc:e0:f3:
a8:54:83:2f:e6:bf:55:1b:d0:3c:6a:ef:e2:8f:c8:
48:49:47:25:c4:a3:52:01:12:04:55:17:5d:1b:86:
a7:a9:e3:d2:0b:c4:7f:51:24:1b:e8:31:17:d7:b4:
6d:3f:1b:8e:b1:b2:7b:4a:44:ed:cc:fe:ba:da:e3:
18:cb:a1:8b:49:74:3f:a5:5f:86:07:86:e8:57:36:
77:d3:a7:17:de:b9:51:27:97:d4:9b:e1:11:c1:29:
d7:53:2e:21:f0:68:7d:a7:4d:a2:e8:83:0b:95:61:
28:d2:44:a8:13:c6:e2:63:be:8e:20:8c:07:9b:ba:
3f:79:c4:f7:85:a1:94:2d:3f:e8:d8:53:56:a3:cc:
ea:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:43:9A:E2:A6:FC:6B:14:3D:03:52:64:F7:D2:D3:2B:A3:78:BC:A9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc21f5a9-b6e5-453c-a66b-c9eee5d06588.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.131.0.0/16
Signature Algorithm: sha256WithRSAEncryption
99:ac:40:fe:8d:b7:ac:65:c0:c0:18:9a:db:ca:69:cb:aa:6d:
8b:bd:90:f1:ed:0b:11:21:ad:c7:5f:94:93:84:35:74:7b:a6:
a0:08:51:1e:6a:0c:83:a6:4e:03:a1:b6:eb:85:59:c5:4d:ad:
54:27:5d:78:b6:a1:1d:a9:35:c7:14:6e:e6:ad:27:65:b9:b3:
54:57:c8:27:d6:62:db:0c:bc:68:7c:16:4c:ca:d1:03:d3:32:
55:ec:cc:fb:b9:06:c5:31:d1:9d:c8:d4:12:12:38:aa:0a:c6:
ca:b6:3a:ee:d0:60:ec:28:75:42:db:bd:b9:41:47:28:d0:23:
a4:60:8e:3b:c1:ef:81:43:e9:e7:0f:e6:56:71:6c:e3:2d:c4:
58:57:ac:0b:00:2e:0b:72:25:e2:71:8d:8f:bf:dd:aa:73:42:
66:e6:08:dd:75:5a:b5:90:a6:b1:d7:06:a4:91:97:fe:02:75:
a7:ea:4a:05:3b:ce:f1:e2:fa:fb:7e:05:37:df:77:4d:8b:14:
de:c9:64:e9:d8:fa:62:70:c4:4c:44:1e:e7:c9:39:9a:b1:d0:
9c:cd:64:ff:2b:fd:81:55:ee:d3:33:66:7b:2e:f7:0c:6f:c1:
57:6c:6a:b0:61:1f:2b:9e:3e:8c:2a:f1:81:30:d3:66:f6:02:
c3:d1:1e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net