Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/518441c4-1683-4c03-b507-4d306d16662c.roa
File: 518441c4-1683-4c03-b507-4d306d16662c.roa (raw, json)
Hash identifier: Aro8TQpBU+AeNOX/9SgB6tQW7JcOe1Bkyk1B6RFPxic=
Subject key identifier: 87:C7:EA:A0:C1:29:97:41:37:24:10:4F:E5:EE:ED:7A:39:14:21:0C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 455C47A71EBC474124B97F69E5031FFFDB8672D3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/518441c4-1683-4c03-b507-4d306d16662c.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 46.51.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:5c:47:a7:1e:bc:47:41:24:b9:7f:69:e5:03:1f:ff:db:86:72:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: serialNumber=1d5dc1d562cb733d79aa8b11b300df4b8a9aee217e3851e6e2e31f9b6209501f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:99:25:49:cd:86:85:62:0c:5c:57:56:b6:
2e:0e:1c:97:1c:93:e8:e3:df:98:51:b0:2f:e0:c3:
a3:2f:e2:5f:c8:bd:11:1e:24:f9:01:82:49:36:49:
c1:3f:58:50:90:2d:6a:f1:25:92:90:ff:a8:ee:37:
7d:a6:5d:d3:0b:2b:8b:b1:96:19:6a:09:2e:bf:89:
22:65:17:89:9d:9b:36:ea:cc:09:3e:3a:3b:3f:8e:
76:05:57:a2:98:f1:da:0e:a6:5c:85:ec:b3:93:21:
56:83:c7:ac:a6:47:77:02:92:cb:4a:3c:59:93:4e:
b6:de:d5:cf:fa:98:c7:6f:b8:74:4f:be:bd:f8:14:
38:7b:3b:9d:11:fa:b5:64:f0:1e:9f:29:b8:d6:4a:
60:1c:f9:58:7d:8b:8f:c2:6f:7c:72:4f:b6:d9:8c:
a5:df:77:4d:2c:01:c3:88:31:42:a9:0e:48:6e:e8:
4a:c7:10:1a:ec:1f:fe:6e:7a:a1:cf:bc:e4:c7:ab:
fa:24:b3:cc:10:e2:97:7a:31:6c:32:64:23:53:3c:
63:28:6a:41:20:32:8e:9c:e6:f8:d4:be:80:8b:0f:
75:11:1d:ce:2c:e3:ff:84:45:4b:c1:7a:4d:bd:de:
6c:81:0a:e3:84:c4:14:8c:f2:f1:4a:dc:94:e5:32:
40:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C7:EA:A0:C1:29:97:41:37:24:10:4F:E5:EE:ED:7A:39:14:21:0C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/518441c4-1683-4c03-b507-4d306d16662c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/17
Signature Algorithm: sha256WithRSAEncryption
c3:5b:60:f0:45:35:26:28:eb:59:3a:3c:da:9f:91:c5:c9:f2:
d6:96:69:e1:70:d1:e1:43:99:9c:ce:d1:5f:59:18:9c:8e:f7:
43:1f:bf:b4:81:47:a5:77:fa:8b:14:23:e4:57:57:e4:91:ed:
27:0f:8a:45:33:b6:24:0f:ec:7c:43:42:b8:26:11:b5:fc:6f:
b4:82:5b:16:87:18:9f:21:bf:c6:0d:23:f9:e2:45:71:40:7b:
f4:d9:67:55:54:9e:c3:4c:4e:b3:1b:46:ca:19:e4:3b:b0:08:
b1:0e:55:07:ab:6a:a0:d6:9c:c2:c2:a7:c5:8f:c4:ce:b0:1b:
34:f5:34:46:04:ff:64:67:93:d9:8e:67:5a:ff:d9:b5:31:c8:
03:1b:b3:63:a5:26:54:78:36:ba:e8:c2:ed:6d:df:66:21:dc:
30:0f:28:06:46:c5:7e:fb:f0:5f:24:dd:2c:9a:af:92:f8:9a:
29:78:01:2f:07:96:93:04:36:32:7d:42:30:9f:01:a3:f9:cb:
03:a8:6d:b8:60:c1:9f:79:13:4e:44:65:e5:56:cc:f2:1a:40:
24:0b:69:45:cf:fb:9e:4c:1d:5a:a4:db:e9:a1:e2:e6:b7:a6:
71:60:13:c8:2d:9c:60:6d:c8:57:14:c4:92:cc:68:05:fb:dc:
64:8e:f9:bc
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIURVxHpx68R0EkuX9p5QMf/9uGctMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDEyMTYwMDAwMDBaFw0yNTAxMjAyMzU5NTlaMHoxSTBHBgNV
BAUTQDFkNWRjMWQ1NjJjYjczM2Q3OWFhOGIxMWIzMDBkZjRiOGE5YWVlMjE3ZTM4
NTFlNmUyZTMxZjliNjIwOTUwMWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALvNmSVJzYaFYgxcV1a2Lg4clxyT6OPfmFGwL+DDoy/iX8i9ER4k+QGCSTZJ
wT9YUJAtavElkpD/qO43faZd0wsri7GWGWoJLr+JImUXiZ2bNurMCT46Oz+OdgVX
opjx2g6mXIXss5MhVoPHrKZHdwKSy0o8WZNOtt7Vz/qYx2+4dE++vfgUOHs7nRH6
tWTwHp8puNZKYBz5WH2Lj8JvfHJPttmMpd93TSwBw4gxQqkOSG7oSscQGuwf/m56
oc+85Mer+iSzzBDil3oxbDJkI1M8YyhqQSAyjpzm+NS+gIsPdREdzizj/4RFS8F6
Tb3ebIEK44TEFIzy8UrclOUyQN0CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSHx+qg
wSmXQTckEE/l7u16ORQhDDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTE4NDQxYzQtMTY4My00YzAzLWI1MDctNGQzMDZkMTY2NjJjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBy4zgDAN
BgkqhkiG9w0BAQsFAAOCAQEAw1tg8EU1JijrWTo82p+Rxcny1pZp4XDR4UOZnM7R
X1kYnI73Qx+/tIFHpXf6ixQj5FdX5JHtJw+KRTO2JA/sfENCuCYRtfxvtIJbFocY
nyG/xg0j+eJFcUB79NlnVVSew0xOsxtGyhnkO7AIsQ5VB6tqoNacwsKnxY/EzrAb
NPU0RgT/ZGeT2Y5nWv/ZtTHIAxuzY6UmVHg2uujC7W3fZiHcMA8oBkbFfvvwXyTd
LJqvkviaKXgBLweWkwQ2Mn1CMJ8Bo/nLA6htuGDBn3kTTkRl5VbM8hpAJAtpRc/7
nkwdWqTb6aHi5remcWATyC2cYG3IVxTEksxoBfvcZI75vA==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net