Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1b4aeeaa-d6a8-481f-b6aa-bee14f4e80be.roa
File: 1b4aeeaa-d6a8-481f-b6aa-bee14f4e80be.roa (raw, json)
Hash identifier: R4U59LiizfPW6HH8dOTqM9LyFBOWaZG5ALKowzki/4U=
Subject key identifier: 70:97:BF:5D:4D:FB:AB:A1:D7:00:FE:37:32:2C:A0:45:51:2D:B4:AE
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6BE755C060EFE2333E9D10F877C6E7FD421BB7AA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1b4aeeaa-d6a8-481f-b6aa-bee14f4e80be.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 85.213.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e7:55:c0:60:ef:e2:33:3e:9d:10:f8:77:c6:e7:fd:42:1b:b7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=81d60822142625114814d9da0352108431c3a8da55c74f9912419ff008693691, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:15:f9:5d:4d:ae:25:3d:aa:3f:9a:94:06:
31:f5:60:e1:f5:17:76:80:76:cc:6f:33:85:70:07:
32:fc:67:30:20:3d:68:a0:36:d6:36:4f:a1:b9:26:
a9:64:19:e7:3a:59:67:c7:d2:01:7c:68:f9:37:ad:
53:7a:f3:aa:61:c3:33:bd:b5:e0:8f:d5:8b:12:60:
66:ea:4a:b0:4c:e5:1f:ac:d1:fe:e9:42:77:01:31:
0c:a8:c9:ab:28:c8:31:b8:66:f0:a9:66:d5:e9:ee:
38:07:c5:1b:f9:db:97:89:f5:dc:cd:42:c4:ac:08:
5f:83:67:94:a5:89:02:02:6f:3a:54:05:0e:bb:a3:
a5:f2:22:fd:62:6c:0a:99:9a:02:37:21:4f:bf:61:
be:5d:a4:87:e0:bd:17:c4:09:f1:a6:61:91:ba:29:
87:03:52:6b:0a:42:b4:44:f6:5c:38:41:4c:67:76:
fa:5d:5e:fd:d6:25:66:0c:e0:6c:da:e8:6e:99:a7:
f5:c6:04:cb:1e:6b:3e:f2:7b:8f:e7:b6:0d:61:99:
31:5c:1a:56:10:b0:b6:b3:c8:fa:a5:d6:c7:df:33:
07:33:90:ba:ae:c5:a5:76:db:4c:cd:3f:63:14:85:
a7:40:64:0a:26:d1:45:2e:d9:ae:56:5c:e2:03:83:
23:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:97:BF:5D:4D:FB:AB:A1:D7:00:FE:37:32:2C:A0:45:51:2D:B4:AE
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1b4aeeaa-d6a8-481f-b6aa-bee14f4e80be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.213.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c0:b5:e5:be:d9:93:07:ac:a3:61:9c:47:24:bb:83:72:29:0c:
15:dc:cd:b4:3a:47:51:55:a2:30:b8:e2:e2:d0:83:ea:d2:3d:
59:80:57:3b:ac:19:53:29:b7:b0:ef:74:25:b2:24:38:a2:72:
ca:6f:db:03:64:a8:7a:7f:e5:8e:fa:d3:59:d0:7b:44:5e:65:
3e:84:9a:82:fc:c6:3f:dc:3a:84:e7:c2:b7:55:a2:5c:cd:53:
37:c4:48:d4:73:24:df:26:67:7a:97:3e:53:1b:8b:40:1c:18:
89:96:36:c2:f6:eb:81:73:ac:61:bd:f2:81:08:70:a1:b8:e8:
2c:ee:77:a1:45:63:56:3a:48:87:82:4c:57:65:96:89:4a:72:
36:d3:12:54:c1:c5:7b:2f:61:c0:67:92:74:07:b2:c9:f1:ba:
6d:47:86:91:98:c7:6e:54:a1:f6:20:c7:a7:45:d0:e9:3c:ae:
2f:f3:27:a1:28:ac:83:12:82:e3:cf:67:61:45:15:d7:65:6a:
f9:ce:33:55:16:a8:56:f9:79:3b:0b:7b:a6:e1:18:a4:b2:34:
a3:46:55:dc:57:7f:5a:50:79:1c:4f:f1:87:16:c3:f5:7c:a7:
f6:c0:59:94:27:88:69:e2:f8:b1:7d:1a:57:a6:29:dd:19:18:
06:29:a4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net