Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2150330d-575d-4841-9216-26672be29637.roa
File: 2150330d-575d-4841-9216-26672be29637.roa (raw, json)
Hash identifier: o+wah9gFOxbeT3rhtCO79ghcGo1wZqrhJ88UEc7Qz7I=
Subject key identifier: 3D:B1:D3:F9:66:4B:47:88:17:75:1E:23:79:F1:88:7F:2D:17:52:3C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 079BA3CC4470E5A6BE24882F7D14DBD783718952
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2150330d-575d-4841-9216-26672be29637.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 83.119.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:9b:a3:cc:44:70:e5:a6:be:24:88:2f:7d:14:db:d7:83:71:89:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=6a195bf86a57f4839da2569e813802136e955e312c3a2f8c78155517b556753a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:26:dc:8c:03:fd:e4:f7:cb:34:4b:07:59:4a:
21:8a:74:be:ea:74:ec:16:33:44:62:f0:f1:40:83:
bf:28:0d:5f:f5:a6:cd:d4:84:56:0c:74:f1:d3:8a:
a8:d9:ed:06:b7:5c:64:9a:98:45:1c:9f:99:0c:c0:
04:c7:54:05:8c:b2:2a:17:8a:02:55:9b:71:c3:f3:
e1:1d:94:06:42:ac:6a:1b:c8:91:82:80:20:f7:2f:
76:3c:d2:ae:93:1e:ab:f1:29:12:14:b1:a8:ac:9e:
1e:20:fb:c0:f5:c5:b1:79:3a:ca:5a:84:e2:3b:60:
cb:cc:1e:8f:28:eb:da:eb:51:de:ce:2a:90:0d:b5:
22:dc:bf:5b:16:20:7c:7b:5c:87:7b:34:37:ae:49:
b7:b4:40:19:2b:7b:d2:57:75:2b:1d:6e:88:2b:c8:
e6:aa:04:33:29:8c:27:74:7d:13:eb:08:5a:37:ca:
15:0a:cb:34:d6:9a:2a:b4:e7:81:8b:69:98:86:f7:
70:86:fa:d2:25:76:8d:b2:1e:b2:80:49:e1:ad:f4:
5e:44:9a:96:ad:cd:99:ac:c3:ef:ee:22:d6:8b:f0:
79:f4:19:56:2f:7e:20:c2:e5:03:de:e9:ac:6e:a1:
cc:7b:0c:6a:0d:49:2b:2a:66:bb:ba:dc:6e:8e:ab:
af:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B1:D3:F9:66:4B:47:88:17:75:1E:23:79:F1:88:7F:2D:17:52:3C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2150330d-575d-4841-9216-26672be29637.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a1:36:f4:2e:24:a7:15:4b:2e:24:4b:b3:52:fa:eb:04:a7:85:
9d:98:36:d1:73:25:8e:90:da:b6:ec:b8:ff:d4:80:a1:ab:c5:
39:7a:9e:df:b6:cd:89:8e:b4:0b:78:c8:3a:3f:f1:e9:8b:eb:
03:9a:3b:3a:ef:54:0a:75:6b:b4:10:eb:f7:00:98:29:4a:67:
a8:0d:c4:d5:b9:67:99:9c:a8:a1:3e:42:6d:cb:3a:70:d3:ef:
ba:10:51:af:48:0b:1b:a9:53:2a:c2:e2:02:9f:bd:48:35:eb:
2c:66:45:0d:11:a7:52:26:d9:81:72:88:3a:cd:a8:51:52:4b:
58:1e:18:86:4a:df:e1:08:f0:09:0e:fa:b8:23:4c:b2:6b:55:
f8:49:29:9e:99:0b:08:37:a2:e7:81:72:58:6e:b4:94:79:e6:
e6:fa:d0:0b:7e:99:04:ea:2a:80:cf:d7:48:6d:fb:2e:6d:10:
1a:d5:5b:9b:1a:ff:10:ad:03:a3:34:ea:cd:89:60:75:6a:c5:
cf:04:67:2d:60:64:e1:b8:ea:4c:0d:6b:16:e8:90:65:12:de:
c3:28:64:e4:52:a6:7c:44:d2:d5:a5:f8:95:b7:69:0f:e1:fb:
0a:7e:83:31:a3:f8:f9:e2:c5:b9:f2:c1:c6:1d:67:3a:40:39:
b5:fb:fd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:38 2024 by rpki-client on console.sobornost.net