Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/61a46a0f-9dd7-44e2-afee-9bf568e2e018.roa
File: 61a46a0f-9dd7-44e2-afee-9bf568e2e018.roa (raw, json)
Hash identifier: siWbV4/vxufXi96EvZfQ8vxFHBar1v+bSNXd7Xkbmr4=
Subject key identifier: B8:EB:88:61:12:84:FA:75:F4:5B:1B:14:A9:95:B3:EA:51:AB:55:BE
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 43E193D400CF8394372824192ADC5826EBD35162
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/61a46a0f-9dd7-44e2-afee-9bf568e2e018.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 193.26.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:e1:93:d4:00:cf:83:94:37:28:24:19:2a:dc:58:26:eb:d3:51:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=fcb3a00fe200f3f9c6f466aab55f6c01f3454dee460f121ac50cc2039b0cc78b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:8e:d5:aa:41:42:be:a6:29:b0:9d:c7:1c:
ae:ad:85:3a:cc:15:de:bf:6b:61:a8:43:5c:54:3f:
3d:34:20:ef:81:3f:93:b5:72:0f:4b:16:84:ae:8f:
33:b4:9f:df:37:79:96:05:a4:db:45:16:56:99:23:
90:6d:b3:d2:8e:a6:56:27:d8:69:33:46:36:70:f8:
c2:81:df:96:4a:20:5d:99:54:f1:a2:72:8a:61:08:
2b:96:fd:4a:70:56:16:01:b6:9c:84:1a:38:30:fc:
07:a9:b2:b9:c4:86:3d:00:20:8b:99:f3:40:91:89:
1a:36:1e:09:fb:e6:70:e9:c9:6e:9f:fb:6e:dc:dd:
36:13:a2:f6:41:39:2c:b4:78:de:22:af:1e:61:ac:
56:5f:f2:3a:7a:76:54:e2:01:a9:da:0c:5c:0c:df:
93:ff:2d:d0:cf:99:c9:3c:1d:e6:a0:a1:f6:e2:1e:
ac:b9:61:38:7a:4d:12:a2:39:2f:63:50:54:47:ac:
3e:57:40:8f:05:02:e6:b2:96:8b:45:29:c8:c1:c6:
88:54:38:7d:c0:62:b4:08:45:ae:bb:31:6c:31:89:
7d:38:93:f7:4f:b6:a0:e4:1b:57:1a:59:94:77:e7:
a2:f3:6d:54:e3:b4:4b:b9:26:4e:0b:a3:d6:c3:60:
84:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EB:88:61:12:84:FA:75:F4:5B:1B:14:A9:95:B3:EA:51:AB:55:BE
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/61a46a0f-9dd7-44e2-afee-9bf568e2e018.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.64.0/19
Signature Algorithm: sha256WithRSAEncryption
83:28:6c:48:26:17:ab:d2:a6:97:43:96:29:37:f0:62:f9:7e:
83:a4:e4:77:07:4f:c9:48:e0:6f:73:43:eb:0c:23:d6:e0:1b:
53:83:27:84:cb:69:dd:90:62:be:94:07:92:48:2f:32:d5:63:
0c:9d:cc:3f:15:68:4f:86:87:a4:5b:08:59:f9:41:2d:20:86:
cc:b9:0a:96:57:c7:1f:76:f1:a4:de:b8:dd:ea:36:eb:db:16:
85:07:03:ce:11:d4:b9:04:d1:13:61:53:cb:5c:ae:c9:a9:07:
65:b5:f2:0e:84:16:c5:6b:3d:a9:40:74:39:4b:90:dd:a6:9d:
23:bf:a7:c1:6b:da:29:eb:27:ee:95:fa:c2:ff:70:03:e8:82:
54:a6:c6:68:a4:b7:9e:95:8c:72:79:fd:48:2f:5a:cf:08:99:
56:21:2f:24:8b:29:62:24:3d:08:91:a0:01:b1:6d:21:31:7d:
70:ec:70:93:32:94:4e:0a:24:2b:cb:9f:e5:f0:00:fb:db:3f:
b1:ba:17:07:48:df:47:a8:a5:5d:1a:7e:05:01:72:56:bb:39:
6d:0d:2b:37:c4:a6:fc:26:31:67:ba:5e:f1:57:ba:3c:9b:6d:
d4:5c:f6:08:ba:56:27:8b:49:f8:cf:0d:6c:84:2f:c6:3c:a7:
67:f2:d8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net