Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1171c547-ddc2-479f-91b8-52cc9e170312.roa
File: 1171c547-ddc2-479f-91b8-52cc9e170312.roa (raw, json)
Hash identifier: CL/bIHvl2JtrD0fApCjRQ9vUATt+HBpUpyFOwWhjaJE=
Subject key identifier: 9B:47:DE:69:25:DA:D4:60:F6:53:72:F4:A0:68:CA:C3:79:A3:68:CE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 59149A51F4FC93882DC6C3FA9934B7B50BEE04B0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1171c547-ddc2-479f-91b8-52cc9e170312.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:14:9a:51:f4:fc:93:88:2d:c6:c3:fa:99:34:b7:b5:0b:ee:04:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: serialNumber=91086e6e859cd18ee937487373b7bec90bb6463767283bac8020bb8a43c7eca3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:fc:50:29:2a:39:48:a8:58:6e:d1:18:fe:
19:11:15:84:c1:b9:2b:c3:92:07:ea:b7:4e:b2:f5:
07:25:5f:ce:e3:a1:10:d6:7c:44:2b:6a:51:81:8b:
d1:62:17:3b:41:d5:74:b9:4a:10:01:0f:c5:45:91:
a2:c3:a9:48:45:50:2e:e2:1e:0a:da:6b:e1:7d:7e:
63:0a:b5:49:83:a1:2f:cc:e3:35:6d:03:f6:d3:04:
d4:0d:4d:0f:72:da:c1:7b:6f:52:fc:a3:73:13:3a:
22:fb:c1:31:7f:44:1a:89:6e:29:79:e9:61:98:38:
bf:43:2c:a0:69:a0:4c:6b:9a:5b:2d:22:e4:ca:e0:
1a:41:f2:34:9b:b6:b3:2e:49:72:90:00:69:ba:12:
9a:c7:d4:96:c7:dd:6d:e3:d6:38:bc:38:1d:a0:3f:
f8:ab:0a:a8:48:8c:88:7e:11:51:a8:03:f0:12:8d:
a0:34:3b:2c:30:1c:76:fe:60:3c:3a:54:eb:d7:e3:
55:28:ea:bf:c3:9a:68:1b:1c:72:ce:51:14:28:a4:
9e:14:7b:73:60:4f:1a:33:26:c8:4f:72:a7:9b:00:
4d:25:bf:46:c0:05:5c:cf:e4:7c:23:bc:7c:e7:3e:
0a:70:4a:43:02:0d:d7:26:53:79:29:b1:b4:83:0a:
85:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:47:DE:69:25:DA:D4:60:F6:53:72:F4:A0:68:CA:C3:79:A3:68:CE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1171c547-ddc2-479f-91b8-52cc9e170312.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/17
Signature Algorithm: sha256WithRSAEncryption
43:3f:86:18:a0:47:13:08:a0:a9:c5:67:1f:45:df:b6:be:e3:
e0:81:4e:99:87:7f:4a:83:51:3a:b9:e8:69:73:d9:53:29:b2:
0b:50:61:e8:2a:7c:78:d0:0b:5e:11:90:ab:5a:39:2a:4c:e6:
78:fc:85:89:28:b3:ad:0c:04:1d:cc:b1:b9:d6:79:2d:c9:2e:
38:dd:ce:3f:e2:b6:e5:e8:a9:d2:c0:0e:29:a9:19:99:d0:38:
df:cd:d5:fb:b3:8f:62:35:75:f9:78:92:f3:f7:c6:79:a0:c1:
df:0d:08:03:5e:2f:27:40:db:1e:8e:78:1e:4f:34:4f:20:89:
ed:15:48:f8:fa:c6:0b:e8:60:cb:8f:6c:aa:98:53:66:e1:3e:
d8:71:32:75:b9:fb:15:9c:3e:91:62:f7:91:f6:7f:7f:bc:34:
94:ae:c1:c8:c9:03:e6:5a:7f:2e:1b:66:70:7c:1e:a2:06:76:
e1:27:39:ae:8a:4d:4c:d7:7d:fe:69:ce:85:b0:c1:8f:0f:ad:
2d:7b:c5:6e:28:a7:70:41:bc:b4:68:1c:80:5a:50:b4:97:f1:
5e:6c:23:a1:0e:f3:4f:4f:7a:89:b4:c8:a3:71:16:88:c8:d4:
7f:29:91:fe:e4:66:be:72:d2:4c:33:24:3a:30:fe:8d:88:00:
c0:3e:4f:aa
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUWRSaUfT8k4gtxsP6mTS3tQvuBLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDEyMTYwMDAwMDBaFw0yNTAxMjAyMzU5NTlaMHoxSTBHBgNV
BAUTQDkxMDg2ZTZlODU5Y2QxOGVlOTM3NDg3MzczYjdiZWM5MGJiNjQ2Mzc2NzI4
M2JhYzgwMjBiYjhhNDNjN2VjYTMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJXD/FApKjlIqFhu0Rj+GREVhMG5K8OSB+q3TrL1ByVfzuOhENZ8RCtqUYGL
0WIXO0HVdLlKEAEPxUWRosOpSEVQLuIeCtpr4X1+Ywq1SYOhL8zjNW0D9tME1A1N
D3LawXtvUvyjcxM6IvvBMX9EGoluKXnpYZg4v0MsoGmgTGuaWy0i5MrgGkHyNJu2
sy5JcpAAaboSmsfUlsfdbePWOLw4HaA/+KsKqEiMiH4RUagD8BKNoDQ7LDAcdv5g
PDpU69fjVSjqv8OaaBsccs5RFCiknhR7c2BPGjMmyE9yp5sATSW/RsAFXM/kfCO8
fOc+CnBKQwIN1yZTeSmxtIMKhfECAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSbR95p
JdrUYPZTcvSgaMrDeaNozjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTE3MWM1NDctZGRjMi00NzlmLTkxYjgtNTJjYzllMTcwMzEyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBy4zgDAN
BgkqhkiG9w0BAQsFAAOCAQEAQz+GGKBHEwigqcVnH0Xftr7j4IFOmYd/SoNROrno
aXPZUymyC1Bh6Cp8eNALXhGQq1o5KkzmePyFiSizrQwEHcyxudZ5LckuON3OP+K2
5eip0sAOKakZmdA4383V+7OPYjV1+XiS8/fGeaDB3w0IA14vJ0DbHo54Hk80TyCJ
7RVI+PrGC+hgy49sqphTZuE+2HEydbn7FZw+kWL3kfZ/f7w0lK7ByMkD5lp/Lhtm
cHweogZ24Sc5ropNTNd9/mnOhbDBjw+tLXvFbiincEG8tGgcgFpQtJfxXmwjoQ7z
T096ibTIo3EWiMjUfymR/uRmvnLSTDMkOjD+jYgAwD5Pqg==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net