Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/28d63060-33be-4a3e-88dd-24f87af67dd4.roa
File: 28d63060-33be-4a3e-88dd-24f87af67dd4.roa (raw, json)
Hash identifier: QvtnRuP/aYhVu7NIvwnKKO5yTiRnOfRzcpEtTa9c8gk=
Subject key identifier: 6A:47:4F:00:1D:D5:76:C0:32:48:B6:C2:7D:6A:28:8F:9F:67:D0:71
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2983A52DFE0B67380173167FEEFC7A46FF99EB48
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/28d63060-33be-4a3e-88dd-24f87af67dd4.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 84.48.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:83:a5:2d:fe:0b:67:38:01:73:16:7f:ee:fc:7a:46:ff:99:eb:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=cb1def1a20af7637ee8e5f599486676213ff7456ff701dc5413c0e7ee415f08c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:e0:6c:d6:d6:b4:a4:a0:a5:3d:54:3e:9e:
42:1c:64:4f:9c:5a:3e:4d:70:c2:77:8c:64:d6:01:
3f:ef:b6:80:d8:b6:f9:82:66:4f:79:07:20:bb:35:
4f:64:c8:fa:9e:6f:04:d6:0a:76:f2:2a:fa:13:6c:
65:84:db:57:e1:bf:dd:e4:c6:5f:dc:89:0e:29:52:
a0:be:1b:a9:b1:04:b8:9c:4f:75:91:a2:eb:82:98:
52:ba:b5:f8:2e:76:49:91:52:32:f9:4d:d1:79:96:
35:07:6a:36:ff:a4:b0:df:40:20:fa:f9:35:9a:5f:
fa:70:a4:23:41:0e:b9:56:ea:21:fd:45:37:ff:c8:
14:66:aa:49:c3:85:44:3b:1e:39:30:66:6a:32:7e:
3f:30:d1:11:b3:39:5f:f1:37:3f:09:5a:94:03:2e:
ce:4e:51:44:e2:55:3e:1d:aa:8a:f9:f6:38:cb:da:
bb:4f:1b:69:11:ba:34:ce:91:f0:54:77:64:d2:86:
60:73:a3:cf:a2:7d:a6:94:3c:14:eb:7f:1b:b7:65:
64:6a:00:70:ae:fa:33:8a:15:5e:5b:eb:63:f2:aa:
52:86:c7:80:b7:c1:bc:1b:4f:fd:04:4a:81:e0:be:
70:5f:90:c4:87:09:a2:e9:f2:53:98:aa:76:ce:a9:
4a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:47:4F:00:1D:D5:76:C0:32:48:B6:C2:7D:6A:28:8F:9F:67:D0:71
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/28d63060-33be-4a3e-88dd-24f87af67dd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.48.128.0/17
Signature Algorithm: sha256WithRSAEncryption
67:ba:78:20:d6:b8:3b:68:24:7e:28:d6:25:4b:6e:8e:00:07:
b9:90:d2:37:c5:a6:06:2e:9a:cd:56:c7:c1:3f:5e:07:6b:a4:
c2:08:ac:90:40:6f:7d:33:e6:93:33:05:92:b5:53:83:f2:38:
b0:99:4b:e9:19:5e:65:5f:dd:03:0f:4e:73:3b:62:00:6e:1d:
a4:83:ff:98:25:4c:27:6c:98:1d:f6:0e:47:25:07:d1:44:41:
f0:2f:0c:c3:0e:de:5c:3a:01:29:25:4c:51:c7:36:c6:9a:c3:
eb:b1:19:05:88:fc:ca:41:e5:b9:1c:8c:a4:e0:19:7d:9e:ee:
1a:44:67:97:8f:b3:d7:98:2b:18:92:fd:54:e4:22:14:b4:7e:
91:19:77:10:df:db:10:aa:9d:1e:58:20:9c:fb:fd:8e:44:35:
e9:64:17:79:4c:c8:35:ce:26:fa:5d:9d:ac:84:b5:98:aa:fe:
d2:96:c6:28:3e:cf:d2:85:b6:2c:12:29:93:4a:72:75:b3:12:
97:0c:90:73:1d:21:ee:3b:90:63:a6:47:48:61:64:05:d4:60:
4b:38:b9:b4:eb:2e:0b:8c:1e:db:e1:95:90:15:49:44:3a:0c:
25:f3:ff:37:5a:10:23:99:84:3e:fd:cc:c5:d6:c5:1b:b4:90:
06:34:5d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net