Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0481d995-4a3d-4e25-8d0e-33271809f9a9.roa
File: 0481d995-4a3d-4e25-8d0e-33271809f9a9.roa (raw, json)
Hash identifier: jlDMoHNiHPK8ZnYO+NVV1CrQ3+YjCJStr2Yg9ojeF1M=
Subject key identifier: 26:DC:9D:0A:1F:24:11:B4:27:10:CD:90:8E:F4:99:06:77:9E:C6:51
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 284AE4E3D7D73FF390992049441CE8AC5FB7CC6E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0481d995-4a3d-4e25-8d0e-33271809f9a9.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 152.134.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:4a:e4:e3:d7:d7:3f:f3:90:99:20:49:44:1c:e8:ac:5f:b7:cc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=aa1fe3d79b5521f46d6954afdeb2006a3f701caff064b80df123ace49a0f9687, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:82:2b:9f:0f:26:4a:fd:f0:28:7b:08:31:
15:72:4e:26:bf:91:94:29:0e:75:32:5d:11:ff:47:
01:a7:57:f3:13:f2:38:a4:1b:be:66:8f:f5:5a:42:
95:cc:75:13:b0:e9:0c:6b:31:32:d9:59:39:34:63:
f7:95:fe:79:ff:f8:a1:d0:ea:16:9d:86:38:65:a0:
fa:bf:a0:d6:37:2d:5f:f7:46:8a:71:4c:c9:60:08:
8f:3c:28:07:70:f8:f7:01:0e:05:df:7a:e6:4c:9b:
89:a1:66:19:08:a5:4b:6c:dd:27:d3:91:f2:c8:37:
f9:85:64:3d:62:b4:fd:db:11:2a:80:8c:1c:71:3b:
92:ea:c6:f1:1a:a4:61:1b:c9:c0:85:34:d6:c6:29:
33:72:6c:1e:21:d0:6a:1b:5c:fb:06:2a:14:19:83:
3f:60:9c:11:84:b9:77:97:34:97:45:ab:ce:fb:1a:
f3:7b:23:a4:8f:da:85:60:29:ff:33:ce:14:e5:ec:
39:0e:86:cb:db:6c:64:8a:8f:22:dc:8f:d8:99:1a:
39:02:e6:9c:bb:47:39:32:78:19:fd:da:8c:ce:37:
5d:ed:0e:4e:7a:28:a1:24:a1:4b:6c:78:6d:e6:30:
d2:e7:53:b0:9e:5e:06:64:8e:3b:a3:e7:19:41:1d:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DC:9D:0A:1F:24:11:B4:27:10:CD:90:8E:F4:99:06:77:9E:C6:51
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0481d995-4a3d-4e25-8d0e-33271809f9a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.134.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:bb:c6:26:af:36:bf:f6:68:e8:4c:03:96:82:91:15:95:5a:
ae:96:ff:60:d2:e9:9c:21:a1:ae:a3:48:f0:3c:04:f9:94:f2:
24:34:2f:2b:50:72:90:05:8e:8b:72:c3:43:b2:ec:10:4b:e3:
c9:89:0b:cb:c4:74:fe:df:25:44:3a:03:26:e0:11:d4:21:a2:
c8:6f:45:04:3a:fa:c4:f9:42:45:dc:98:27:f5:24:50:d5:b3:
be:8b:d6:29:9c:80:f9:ec:dd:90:11:84:34:a1:3a:26:b8:ec:
8e:93:c3:9e:8f:42:a5:24:70:88:6b:ac:12:14:36:80:2b:2a:
be:df:91:ad:f3:a5:db:b6:c2:1f:da:68:fa:cb:63:cb:ac:cc:
3a:41:61:d7:43:da:48:7c:e2:cf:a8:94:3a:29:ed:65:08:c3:
90:ba:4a:9a:06:57:85:88:cc:0d:ba:79:55:6b:f5:7d:33:b4:
d1:fb:3a:26:51:a0:a2:6a:3d:2e:ba:12:00:40:f9:2f:7b:85:
a9:c8:b7:74:5f:9a:c2:b3:d6:14:66:4f:9c:a5:58:3c:75:7f:
ea:c3:ce:d6:a4:9c:43:b6:7c:2a:cb:14:f9:7e:87:16:c6:fd:
98:77:e7:ff:d6:6b:76:a5:fc:6c:5a:03:de:4a:5c:0b:bc:a3:
91:4e:20:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net