Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/169b9704-81cc-41e4-bd90-8654798de7b1.roa
File: 169b9704-81cc-41e4-bd90-8654798de7b1.roa (raw, json)
Hash identifier: fiP66VIhkyo9ho9orKbVdy/J7Rg8AjPba6CeLdGXAKE=
Subject key identifier: 08:54:27:CD:95:DC:D0:FB:1F:C4:92:C3:AC:26:79:50:95:10:CB:04
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4B5A066FDD1A7C79CBBA313A69709656B4BD2E5D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/169b9704-81cc-41e4-bd90-8654798de7b1.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 200.224.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:5a:06:6f:dd:1a:7c:79:cb:ba:31:3a:69:70:96:56:b4:bd:2e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=b0ed7f6f7f3c2f2780cb0490111fcc0e8c2ad0748945c5051639f875b919667c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3f:37:d4:b2:34:b2:e5:d0:4f:df:1c:8a:6c:
ca:90:ab:84:5a:1f:ac:32:54:21:3c:26:81:95:38:
e1:00:d3:14:ce:bb:b9:92:59:e8:74:51:19:91:9d:
de:ab:a1:ce:34:f0:36:4b:64:13:49:2c:64:c9:dd:
50:39:07:94:ce:06:73:df:c8:ac:2b:6d:e0:99:f6:
f6:db:b4:cb:e7:72:80:af:89:f2:0a:01:0d:58:a9:
c2:e2:e7:86:d5:9f:34:dc:2e:f2:59:1b:1a:3c:16:
32:36:7c:9b:05:87:7a:7b:c0:a5:14:e1:0d:0e:00:
be:d6:b1:02:85:b3:11:cd:be:c4:37:f6:a7:cd:37:
e0:c7:b6:07:06:88:c0:51:25:d0:af:d5:c2:e3:4c:
9a:39:52:b8:56:32:ae:a2:e3:70:9e:cf:42:01:4e:
fb:9d:24:c5:29:4c:a3:c7:ca:09:a2:49:24:ed:30:
55:e8:3a:d3:76:a9:16:f8:3f:5e:ef:a0:95:a3:bc:
c7:30:4d:46:51:00:71:b2:f7:ff:25:0c:8e:f3:ac:
36:49:bf:4d:41:82:7f:32:26:cb:88:89:f2:fe:c5:
76:37:9e:6c:2a:40:dd:b1:b1:2b:1a:f7:55:f0:c6:
3b:3c:ac:e1:57:34:3b:3f:a4:2d:a5:b5:6e:12:d3:
ef:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:54:27:CD:95:DC:D0:FB:1F:C4:92:C3:AC:26:79:50:95:10:CB:04
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/169b9704-81cc-41e4-bd90-8654798de7b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.224.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:94:9f:03:37:be:9c:4a:20:e0:7b:a0:73:48:2f:48:dc:11:
10:80:c7:a1:3f:23:ce:ab:88:2e:74:70:af:78:cb:fc:c4:d9:
49:02:ac:16:20:82:84:7d:49:8f:34:a6:bd:cc:51:88:90:40:
bd:86:27:15:b8:82:f8:8b:36:15:d0:12:b3:ad:d4:ed:81:a4:
15:5f:e8:f2:1b:1a:64:d0:2f:1e:ca:b6:17:de:0e:46:09:95:
66:b6:cd:33:fc:59:dd:e8:66:ae:cd:a3:1e:c3:05:2d:ab:3b:
51:44:05:43:94:ac:a1:d8:d6:05:51:35:8c:39:ab:53:d3:e3:
b7:2a:e2:7d:50:d3:02:2e:09:e6:b7:20:39:23:13:66:ee:e9:
54:86:a4:c1:0d:2b:2a:46:01:5c:db:1f:36:d5:98:aa:63:25:
4b:be:a8:78:03:93:b6:d5:89:2c:2a:bf:4b:f9:6a:ef:13:ec:
c8:83:5d:98:9a:f2:49:1b:59:ee:37:02:f7:64:56:6a:af:59:
c0:87:f8:10:79:1e:70:79:57:6f:4a:8a:a1:dc:f9:1d:01:d4:
5a:cf:0a:be:7d:a3:53:48:d6:a5:ce:23:3b:41:29:10:04:d6:
23:42:a0:15:36:68:b4:9e:ec:26:3d:16:8d:19:87:00:17:8a:
2e:3c:d4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net