Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5f4a66bb-3bbf-4f2d-81a1-89005f1bb7bd.roa
File: 5f4a66bb-3bbf-4f2d-81a1-89005f1bb7bd.roa (raw, json)
Hash identifier: J9GSKMYmFMwwiJ/CWq12A2MR47f+2XZz7AJiK7bUm2I=
Subject key identifier: F2:F3:5F:23:10:5A:9B:F6:8A:FC:20:02:D0:53:B5:B3:73:CE:51:A5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 24E7FC13D721669355CC58F259B7A374B6882A16
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5f4a66bb-3bbf-4f2d-81a1-89005f1bb7bd.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a01:578:1020::/43 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e7:fc:13:d7:21:66:93:55:cc:58:f2:59:b7:a3:74:b6:88:2a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=82c5f008d6e69c57ef709b4508390d3ab6a07805565012c7387fb596705fcfdc, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:79:b4:cf:ed:91:19:35:07:9a:93:06:b2:
98:06:c0:57:a4:78:44:49:d6:95:c3:8b:b3:f0:79:
d9:f9:92:72:36:bd:9f:44:77:7f:65:f6:e4:71:f1:
96:88:88:50:35:04:e1:93:78:74:b4:5f:ab:5f:0a:
4b:52:4b:38:c2:3f:d4:fd:28:78:bc:8c:aa:07:cd:
01:84:cc:86:f8:25:f7:16:1d:ae:9b:97:58:ca:7c:
3d:29:c5:da:5d:e1:3e:bb:09:7d:75:0a:2a:35:4f:
2b:3a:6c:9d:21:21:a0:7d:dc:1a:33:6e:8a:03:3c:
91:0c:7e:6d:0a:57:37:9c:ac:ba:fe:31:8a:7c:61:
c2:64:f2:68:20:e5:e1:58:3c:9a:ab:7a:76:ee:1f:
a8:36:5a:85:98:1f:62:e9:da:cf:34:01:ec:9d:45:
62:de:62:3d:20:9c:6b:6f:10:e3:89:1c:d6:a1:c2:
28:12:b3:06:73:ce:b5:ef:f6:aa:82:0f:6c:cd:ef:
f0:60:85:ca:90:41:2e:cc:ff:4b:3c:13:a3:75:0c:
c3:b6:89:8a:2c:c8:07:72:00:2d:c4:59:94:ae:5e:
31:d0:ac:3b:4a:5c:78:86:e7:1f:80:bb:0b:02:c3:
d8:c1:94:e4:9e:1b:f4:67:1a:32:97:2e:90:90:51:
0b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F3:5F:23:10:5A:9B:F6:8A:FC:20:02:D0:53:B5:B3:73:CE:51:A5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5f4a66bb-3bbf-4f2d-81a1-89005f1bb7bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:1020::/43
Signature Algorithm: sha256WithRSAEncryption
86:4a:88:98:95:32:f8:eb:ef:6b:43:4e:37:ca:1f:09:3a:2a:
2e:78:0a:94:bf:be:31:2e:43:35:36:33:65:31:ec:1a:41:02:
0d:dd:c9:23:cf:d8:5e:cd:b2:81:8a:74:da:c6:44:51:ca:e6:
ee:74:32:3f:0f:f4:0a:f2:9b:61:e0:06:8b:cd:d2:5d:ea:19:
66:da:04:09:ff:d8:0d:5b:fc:69:61:ee:e8:8d:a9:45:21:0b:
86:5b:fb:b4:57:1d:ac:a3:a6:8b:24:b8:34:48:7b:f2:9d:f7:
45:c8:90:a9:0b:79:0d:f1:e2:58:fa:fa:0c:1b:97:55:c3:6b:
3f:19:20:a4:a6:40:a4:af:dd:52:ba:56:4a:97:72:10:34:9c:
bb:f9:73:56:a6:50:0d:cb:72:ef:94:23:75:7e:92:3e:31:10:
96:36:76:c8:db:17:1b:66:6d:59:3e:4e:f6:1d:c1:37:86:72:
42:03:f2:98:d2:5e:5e:0b:5e:23:68:38:22:e7:e0:f9:65:13:
cc:ed:de:6c:7d:a6:86:6b:09:0c:00:d3:f2:3a:a8:cd:07:d9:
30:ef:a1:63:ae:6c:d3:34:9a:52:d4:d5:eb:8e:db:41:c7:71:
1f:70:2e:7d:7e:db:97:91:cc:77:b5:eb:51:bd:36:18:21:17:
d5:4d:53:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:39 2024 by rpki-client on console.sobornost.net