Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4bca83db-5d32-4ce3-8caa-b8a7b1d238d3.roa
File: 4bca83db-5d32-4ce3-8caa-b8a7b1d238d3.roa (raw, json)
Hash identifier: MeFbKJwp+UjqM1sQz4DTbYCH1I1nFjCHkloBcDtS1Nk=
Subject key identifier: DC:E2:B0:39:FB:5C:59:2E:87:9F:CF:0C:B9:79:FA:45:08:9A:C9:1E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2F4664DEA317BBD9F6F19E53FFCA32168BBE3C8D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4bca83db-5d32-4ce3-8caa-b8a7b1d238d3.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 193.57.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:46:64:de:a3:17:bb:d9:f6:f1:9e:53:ff:ca:32:16:8b:be:3c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=995c9dca67d96dde310d720f5b590e1a2de83f8130def833a4218d2d6cfe917d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:41:e2:c4:35:9c:87:04:e4:a2:84:45:ca:
7f:58:a3:66:70:0b:d5:4e:5a:a2:0e:c5:93:39:36:
c4:f2:16:c4:09:b8:ab:ee:dd:42:51:e9:d3:d7:81:
4b:72:fa:09:66:a4:5c:42:81:53:84:49:02:14:62:
95:4d:5d:63:d9:22:18:ac:b5:d9:83:32:1e:c1:86:
4e:f2:33:c6:85:6e:a3:98:e5:d8:77:ce:1d:c1:da:
0a:5a:b0:af:66:ee:f3:d5:6b:77:91:87:e4:47:55:
07:52:5e:3b:22:49:8e:2b:90:63:a0:b3:9f:2c:ef:
1f:df:51:71:e9:62:62:83:5f:41:1f:64:a1:67:0a:
bb:d9:df:ba:0f:b7:2f:af:05:7c:a9:85:84:6f:ba:
c6:76:6b:8f:03:b3:0a:5e:88:06:d0:74:8d:ab:76:
6e:03:b4:de:a2:8d:4f:a0:f3:0d:37:1f:50:c9:4c:
ab:44:b9:5c:01:70:12:dd:20:65:1c:b0:46:9a:cb:
7a:2c:e2:1d:2e:be:a3:23:03:d6:a2:6a:7f:d2:30:
da:81:00:ea:36:03:ce:e5:aa:e0:c9:08:1d:c7:33:
76:b5:b3:2c:1e:a8:f3:d6:8b:23:19:a5:eb:0e:93:
b2:ef:06:a2:47:a3:57:8c:46:a9:83:d3:d3:09:67:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E2:B0:39:FB:5C:59:2E:87:9F:CF:0C:B9:79:FA:45:08:9A:C9:1E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4bca83db-5d32-4ce3-8caa-b8a7b1d238d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.169.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:8c:54:ed:40:6f:cc:d6:1a:92:5e:5c:b1:46:1a:78:8a:79:
f9:7a:ba:bc:c3:d3:88:59:cd:15:9f:78:01:22:c3:91:46:09:
c8:72:29:65:c8:7a:0c:67:37:10:19:77:5f:44:b1:af:cc:a0:
a4:25:c2:fd:1d:bd:d7:4b:b4:02:18:e2:17:7a:7d:a1:ea:74:
cc:eb:de:cc:05:be:81:7f:b9:97:df:e2:23:aa:48:1c:3c:e0:
f3:08:49:80:ea:56:23:95:7b:d7:1c:ae:38:cf:03:a1:a6:61:
6f:b3:4e:61:65:34:89:8e:aa:97:ed:7d:6a:df:e7:ea:33:f4:
b8:99:45:85:20:11:56:f6:4b:bb:98:d3:8e:7d:01:fc:32:d4:
9c:ff:26:27:25:8c:e8:af:ca:2b:fd:59:93:59:dd:0d:e6:d7:
31:1b:06:74:54:2d:f0:a2:6f:0f:6d:f5:f1:ab:30:50:1b:1f:
2a:6e:eb:cd:b5:18:25:37:d6:87:bf:fb:a6:18:ad:09:24:c9:
1c:53:ed:4e:21:f9:5a:cf:14:ac:04:ee:89:f8:09:60:7e:3f:
6a:e1:c6:13:76:31:88:96:cd:25:5d:6e:01:31:b3:ac:f7:76:
61:fb:91:28:df:ac:22:47:9d:8e:7e:c9:c1:8c:b2:49:ef:9f:
e2:f5:85:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:15 2024 by rpki-client on console.sobornost.net