Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6983da84-161e-42b3-9b20-728d967cf78a.roa
File: 6983da84-161e-42b3-9b20-728d967cf78a.roa (raw, json)
Hash identifier: FpVSA97VOqSvTMrHKEPt4tL2ZWVmUCPsj6ebEH/Sqmw=
Subject key identifier: 9C:9A:BA:1D:98:DC:B1:98:B5:1C:E8:3D:75:32:63:88:6C:60:9E:E7
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 31C76E9E2CD8024F8EC1997FD87EBC9A50C6717F
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6983da84-161e-42b3-9b20-728d967cf78a.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 194.198.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:c7:6e:9e:2c:d8:02:4f:8e:c1:99:7f:d8:7e:bc:9a:50:c6:71:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=d6ce3bb93dd795a4c24fcad4f466da95c4f411a77b57ae06a0af39d65bfdc02c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0e:8e:69:b2:3a:b5:d9:34:13:24:7e:cf:68:
ad:fa:d4:c1:08:d7:ec:5e:60:4e:7d:d0:7d:84:da:
90:3a:5d:20:09:6d:6a:1f:88:f2:67:f8:28:17:34:
7e:ed:62:06:5e:d3:ec:ec:c4:30:8f:78:f5:64:6b:
d0:03:45:d8:a6:2d:d8:93:0b:39:f5:b8:5f:34:e2:
a9:a7:97:ab:be:2e:04:0d:98:55:f5:dd:f8:8b:1f:
59:45:45:d7:89:6f:55:f4:a1:49:06:d6:a7:f4:ad:
be:77:37:3a:f5:93:25:ac:75:bb:e5:2d:5b:5c:ac:
37:c8:90:58:ab:92:16:0c:1b:4a:11:79:5e:54:8a:
45:1f:29:32:bd:23:29:80:81:bb:9d:48:cd:40:e9:
8b:71:16:35:af:84:8d:41:9a:95:c9:4d:8f:94:7f:
0e:92:c1:60:00:ec:d9:b3:c5:f2:76:96:45:10:8f:
d3:6e:f0:b9:13:7a:b8:01:18:e4:a5:09:31:9a:1c:
e6:db:dc:68:3b:b2:6e:c2:0f:6f:5a:fb:60:8e:58:
f7:0f:bf:d3:a4:ba:3f:2e:6e:80:08:a8:77:f6:49:
37:c4:30:d5:78:ea:51:7f:e8:82:89:53:41:1e:01:
c9:01:ae:98:27:4a:e5:d4:b9:ae:cc:ee:05:22:99:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9A:BA:1D:98:DC:B1:98:B5:1C:E8:3D:75:32:63:88:6C:60:9E:E7
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6983da84-161e-42b3-9b20-728d967cf78a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.198.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:a0:29:c4:df:e2:bd:63:9a:bc:94:7d:e2:29:0c:f0:40:23:
d0:01:fd:49:74:36:41:e0:1f:a7:0a:6f:a1:8f:12:87:7b:dc:
e9:fd:d0:3e:61:75:ee:5d:4a:5c:df:de:45:44:f2:26:ac:2d:
9e:7f:80:f4:86:e2:99:d0:59:4a:d3:92:e1:e9:ad:6f:fb:f5:
ff:a2:03:85:22:a8:7e:00:85:48:48:a2:d0:03:da:3e:c4:c4:
d8:64:a8:bf:03:ff:72:c6:3d:ac:1f:76:0e:f6:d8:2e:d2:72:
e9:ac:23:3e:6e:71:6e:86:03:81:1e:3d:ca:11:fd:7b:17:2e:
27:98:2a:01:70:84:28:9f:1e:c2:f8:9a:db:4f:2b:00:e7:53:
ad:70:9e:42:6d:4e:74:ac:be:7c:9d:5c:e6:90:4a:cd:57:96:
ff:7d:b9:de:8c:6d:0d:41:c6:99:cb:ef:0e:8f:09:37:f5:a4:
af:bf:0c:e7:91:7a:4b:54:de:30:96:ae:dd:5d:e2:c3:9f:b4:
28:2b:c7:8e:3f:34:e0:67:29:ba:bd:1f:a1:ae:b7:5e:9b:6f:
92:8f:07:c8:1e:05:1f:70:56:4b:e9:39:ec:71:51:8c:68:29:
ea:ef:66:c6:b0:e2:09:bb:55:25:1a:6c:9c:cf:ab:3a:c9:ea:
d3:d0:6c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net