Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/212c799b-5564-4771-8ae1-3ff3424a3cc0.roa
File: 212c799b-5564-4771-8ae1-3ff3424a3cc0.roa (raw, json)
Hash identifier: fh/3lN7EUNv7/EULVX9nKEZW6+kYg4BxldZaVPsJZYk=
Subject key identifier: BE:A8:35:E5:53:A1:B7:CF:7B:0A:30:14:0D:76:8E:10:E4:85:2D:23
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2C27519043EA312EEF5859D0064B5A39FFE415B1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/212c799b-5564-4771-8ae1-3ff3424a3cc0.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 130.24.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:27:51:90:43:ea:31:2e:ef:58:59:d0:06:4b:5a:39:ff:e4:15:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=fa6e64d0d67ff6d00281ff76ac084f3202adf53a348604c071421afc8747479b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:d7:98:8b:89:41:c9:04:2a:1a:fa:c6:9f:
d5:97:a5:50:20:ee:90:20:49:e2:cf:ca:3b:6c:73:
11:48:23:28:54:69:33:5d:93:71:7d:b6:32:3e:05:
9b:3a:5d:88:de:68:e3:ab:8a:f1:8d:45:d6:6c:ac:
c1:1e:2b:ac:cf:bd:69:3d:df:f3:ad:26:25:9d:c8:
3d:11:b1:ae:d7:c3:02:d4:4c:39:e0:71:df:9c:cd:
0a:0e:3d:ef:f6:85:b9:16:df:10:2e:00:61:c4:62:
09:28:7d:81:84:23:cd:1e:d7:c2:03:11:fc:21:ab:
68:2d:ef:e6:e1:da:96:74:64:12:93:a8:8d:c7:c1:
02:0e:42:f3:56:80:fd:e8:b4:55:43:83:49:32:b1:
f5:eb:de:0a:26:b8:ce:d0:43:8c:e9:68:0f:e5:53:
f3:34:82:07:10:d0:90:38:93:a1:39:d7:a6:f9:f5:
25:2f:dd:d7:5d:e0:2f:2c:24:70:fd:ae:9b:f1:e0:
00:42:2b:bf:a3:1f:6c:e5:3a:25:20:8b:30:bb:6c:
e2:31:a9:09:36:88:4f:74:c7:75:0f:56:1a:68:46:
49:00:fa:0e:80:d9:01:87:1f:74:0b:b5:55:da:97:
52:4e:67:07:79:79:3c:2e:2f:aa:f4:45:4a:11:d1:
dd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A8:35:E5:53:A1:B7:CF:7B:0A:30:14:0D:76:8E:10:E4:85:2D:23
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/212c799b-5564-4771-8ae1-3ff3424a3cc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.24.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:7e:47:ea:73:44:aa:09:67:14:8a:84:de:a3:94:f8:3d:5d:
8a:a2:6c:95:c6:22:7f:db:0e:56:1a:9d:e0:b6:1a:fa:38:cb:
e3:b3:c8:d0:89:69:c1:66:0b:5a:5b:0b:51:d2:f9:91:d2:1a:
2c:95:18:09:a3:38:8f:f0:9b:c0:4d:e3:8c:7c:23:51:91:bc:
57:9e:ba:53:8f:4e:8e:38:15:4f:97:37:90:ec:63:f1:37:ec:
3a:90:5d:06:64:a5:d8:47:f9:bc:ff:1e:2b:2d:73:ae:19:50:
99:5b:a6:28:57:51:d0:19:27:1b:30:ca:01:66:cd:d0:96:ce:
9e:82:1f:5d:62:5c:b5:24:98:fe:95:98:44:37:c9:c8:50:e4:
f7:d1:22:73:f3:26:5f:09:26:8f:f3:87:fa:00:29:67:ad:26:
50:26:b4:c9:46:26:ae:2a:ff:34:94:f6:40:19:0a:7f:47:76:
62:a3:eb:42:e2:36:db:b8:11:01:5e:89:d3:9f:51:a7:86:8e:
a0:df:45:89:f5:db:73:f8:e3:ec:61:57:14:ba:24:c1:0b:24:
a3:d0:dc:39:e2:74:e0:b1:7e:6f:61:de:96:25:0b:5c:85:4b:
a6:36:5a:a0:84:d4:34:e7:89:94:93:84:41:c2:f6:77:bc:22:
b0:b2:a2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net