Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1bc4930f-9a4b-43f1-82b8-562990ca472e.roa
File: 1bc4930f-9a4b-43f1-82b8-562990ca472e.roa (raw, json)
Hash identifier: b+j1a+vGz3QXVj4Blk3JbX1QjOXtB9bfebeO7ymtFbI=
Subject key identifier: 70:3B:3E:44:A5:BA:AC:C8:37:B4:87:C7:A5:2A:72:AD:06:7F:D0:63
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 15EF286BB5C712333DAA35A56A46D8527EBBAD84
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1bc4930f-9a4b-43f1-82b8-562990ca472e.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 200.197.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ef:28:6b:b5:c7:12:33:3d:aa:35:a5:6a:46:d8:52:7e:bb:ad:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=0f2a9381f472af87a2006d60c851e6ee83931bd45d968f3a79ed1fb42d56444f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ef:f2:42:fb:34:53:4d:ff:93:4c:35:99:68:
e0:a5:9d:50:ed:d2:cf:1f:21:3d:c0:10:ed:d1:f0:
d4:16:41:6b:9a:39:35:1e:6a:49:fd:ff:cf:27:07:
8c:18:5d:ae:44:42:49:57:bb:e9:5f:a8:21:b6:6e:
12:a4:62:33:97:d7:62:a7:f3:28:7e:af:35:1d:e1:
35:7d:76:ba:b8:09:54:cb:c8:46:4c:5e:ae:bb:90:
7f:78:18:77:11:80:0c:b4:75:1c:41:53:61:10:5c:
5e:37:df:39:90:e2:a2:de:d9:a1:5a:91:4f:44:1f:
ef:bb:e4:f2:c9:a7:8f:64:f3:71:a6:61:e1:a8:14:
48:0f:0f:b0:05:35:55:4d:5a:f3:8b:3d:3a:85:47:
a8:6c:45:87:cf:3c:b9:9c:13:cb:8f:15:5b:69:b5:
a9:70:5b:c7:03:6a:0d:6e:e1:32:11:a5:bf:24:10:
5c:f6:43:96:87:10:8c:88:6d:bf:b1:64:8f:d9:38:
49:fb:e9:e9:23:13:b3:ea:7b:4b:79:93:ed:59:95:
46:66:d7:35:1f:2a:8e:75:c0:46:b6:7c:06:da:d6:
b2:0e:58:d2:59:b7:cf:7a:23:3f:fb:4d:6f:48:2d:
ed:f7:f8:cc:db:43:83:0c:7a:e4:9b:aa:f5:10:0a:
65:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3B:3E:44:A5:BA:AC:C8:37:B4:87:C7:A5:2A:72:AD:06:7F:D0:63
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1bc4930f-9a4b-43f1-82b8-562990ca472e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.197.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:64:7d:a2:a2:5c:5a:d5:d7:ae:fe:8d:36:38:f3:8c:26:b4:
01:2d:a7:17:93:54:bd:73:54:04:7e:bb:cf:50:8a:0e:c8:b3:
cd:70:37:4b:23:84:2e:53:d8:91:76:ba:07:99:56:65:97:6b:
0d:30:4a:8b:a2:fb:80:04:4a:09:f1:ea:04:cc:c0:bc:dc:55:
a1:69:eb:12:98:2c:ed:8d:6f:02:3f:89:84:8a:44:5e:d6:47:
d3:54:e1:be:a6:02:2b:42:af:c7:46:88:ef:79:19:ef:2d:17:
35:8a:3f:9e:2a:26:5e:a4:b9:84:9a:a8:8c:1e:f7:a0:cf:68:
45:fa:33:61:36:0c:bb:19:b7:a6:c6:28:45:14:9b:0a:dd:f5:
46:83:02:ab:f4:88:33:62:a9:c7:15:2e:18:7d:75:70:03:5b:
60:d6:2b:cf:20:70:25:ac:87:6d:cc:ac:03:61:53:c8:12:cf:
75:56:df:45:04:3e:13:b0:4f:6d:ce:4a:11:f4:07:4a:0a:a0:
16:bc:53:06:6d:4b:27:03:d6:bf:3b:37:77:12:97:a0:d6:ca:
d8:b6:86:cb:37:c4:ba:ba:4e:61:a2:b3:b6:54:d4:33:e4:b5:
9c:69:cb:5c:c7:62:60:b6:f5:43:3d:ba:f0:f7:f1:a3:b8:d1:
3e:e6:f1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net