Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/248ab1a8-8e19-4ad4-a29a-d5b8971a2792.roa
File: 248ab1a8-8e19-4ad4-a29a-d5b8971a2792.roa (raw, json)
Hash identifier: MXmH19gmXcIQIUn0zQ1ckagNxew6zvgHtHsnIlgJ37w=
Subject key identifier: 0C:C8:8B:7F:73:D4:40:04:5D:20:09:7D:58:77:7F:65:9F:86:36:10
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 611B76472679189B59E94EE540B2E50AEF6449A7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/248ab1a8-8e19-4ad4-a29a-d5b8971a2792.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 83.116.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:1b:76:47:26:79:18:9b:59:e9:4e:e5:40:b2:e5:0a:ef:64:49:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=102735cbf81f04729e449bd8796a26ae777e1ae40f500c321f63b4d6042b19ec, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4f:65:a4:9d:a3:b0:82:8b:66:cd:72:c1:95:
62:ad:51:56:5a:21:b0:8b:12:8e:95:47:80:df:77:
37:5e:b3:b4:97:35:ac:f2:c0:d9:12:43:b3:cd:ef:
d5:de:d3:0d:ec:9f:ac:ed:85:7c:b5:d5:39:02:88:
e3:b5:ae:4c:c3:f1:f1:e8:62:52:85:2a:c7:4a:95:
b8:3d:71:eb:03:65:a1:8a:27:df:1f:12:5f:48:91:
a2:be:bc:3b:a9:62:63:c5:9d:f8:79:b7:9c:ce:1e:
39:11:7c:23:0f:3d:1e:22:81:21:c9:00:ac:79:fa:
34:3b:63:ed:7d:34:74:91:25:14:c6:7e:a8:e3:93:
46:00:8f:05:8f:27:3a:d5:0c:cb:54:9a:2b:9c:c5:
db:73:6c:f0:69:8f:38:6d:aa:d6:90:59:f5:b2:2f:
3e:4a:db:a0:cb:08:17:24:80:69:87:75:db:3a:bc:
e8:28:dd:e3:94:7b:a7:48:46:44:a1:6f:bb:74:95:
0f:4d:0b:68:2c:7e:63:0b:df:fe:12:e3:a1:af:4d:
9b:d9:02:59:d4:e1:fd:d4:01:e9:c7:46:29:82:da:
04:f1:3a:1b:24:d0:b5:01:1b:3c:24:3f:d2:a6:ab:
aa:ad:44:e4:87:38:3b:a0:5b:5e:d1:88:72:d8:35:
89:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C8:8B:7F:73:D4:40:04:5D:20:09:7D:58:77:7F:65:9F:86:36:10
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/248ab1a8-8e19-4ad4-a29a-d5b8971a2792.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.116.0.0/15
Signature Algorithm: sha256WithRSAEncryption
0c:cf:7a:65:c8:5e:f4:8a:04:fb:29:4c:81:d8:a8:38:ea:e1:
f2:e4:69:2c:d0:07:9b:32:92:f0:83:e7:52:79:67:3d:ee:b0:
ba:1d:11:70:5c:8a:18:1e:12:0a:33:45:23:42:fc:92:d8:56:
76:a6:3e:54:fa:ef:29:49:41:ff:49:14:8d:55:84:8a:4a:17:
f3:b9:21:bf:69:6e:4b:3e:9c:80:9e:f0:7c:77:78:61:0c:3d:
82:1f:19:79:96:8f:35:82:43:4b:48:44:64:6d:f8:de:55:6a:
13:6e:3e:58:8a:95:52:3f:02:20:7a:3c:4a:e9:16:f9:dc:f2:
37:20:bd:d9:63:1d:41:93:39:f8:35:9f:c0:7a:55:07:21:54:
1b:ff:c8:bf:51:fc:e2:23:d8:76:92:99:43:15:93:e9:fa:d4:
2e:01:b1:f5:44:a4:b9:df:35:e4:aa:a9:4a:a5:5f:7d:3c:bb:
31:22:c6:58:f4:14:a1:60:38:cd:52:30:d3:85:ab:b1:69:47:
45:7b:0a:eb:fc:47:b6:df:7e:30:98:3d:b1:86:54:92:ea:77:
8a:eb:94:dd:22:02:30:24:31:03:e6:5e:b7:97:3b:00:cc:a2:
1a:e5:4d:44:59:fe:0c:84:48:86:cc:30:4c:9d:47:34:ee:94:
46:72:26:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net