Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/73023bb1-a443-4047-a9f2-64a1905f67ac.roa
File: 73023bb1-a443-4047-a9f2-64a1905f67ac.roa (raw, json)
Hash identifier: rPG52vXTYbW4hMTC7tQzUA+qc0u0uc/yHq1435D3wKY=
Subject key identifier: 51:BA:D2:AE:B1:A9:ED:7E:80:35:6D:05:1A:B7:0E:E8:B5:DC:31:EE
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 72135F506BF9642CF52305B492C03B08112ECDF0
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/73023bb1-a443-4047-a9f2-64a1905f67ac.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 195.247.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:13:5f:50:6b:f9:64:2c:f5:23:05:b4:92:c0:3b:08:11:2e:cd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=df5e1876de25effa997d44bf4ef43d05f01c8cbe1b470adbe20469ac88701a68, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1c:21:d6:6d:02:94:98:04:d3:a6:b8:70:55:
5d:ea:50:e8:5a:30:fe:68:73:4d:2e:c6:87:72:86:
e5:4a:28:43:bc:1b:ab:25:3b:8c:b8:3d:e0:b2:36:
6d:59:e1:20:c1:36:24:9b:38:0a:b2:40:09:45:c4:
91:88:2e:5c:e8:3e:54:29:45:e8:84:44:8b:80:88:
2b:6a:50:33:7f:b9:39:cd:8d:08:4a:0f:89:1d:5c:
3b:fe:8f:4a:32:9c:45:63:20:8e:42:39:6a:5c:93:
5c:7f:c7:78:ec:92:00:41:18:a5:eb:0a:07:34:fc:
d4:2c:45:27:e1:66:ad:a3:d6:a5:25:de:79:07:44:
4e:fa:3e:03:b5:ce:26:af:f6:78:22:24:27:a4:43:
33:66:e5:66:21:3f:66:3a:da:af:ba:d4:f7:c0:8a:
81:44:e1:9c:7c:63:66:59:f3:14:cd:89:0f:82:f7:
21:dd:70:87:78:0e:46:6f:6a:b5:03:85:1c:fb:b2:
c7:20:4f:58:73:97:7f:ba:40:e6:0b:3a:dd:2c:59:
15:d5:a1:9e:f6:ab:17:54:97:1c:25:cb:48:ae:b6:
76:ce:87:cb:de:f5:f7:02:6a:03:26:5f:a1:da:80:
9b:40:16:ac:ee:57:73:27:86:34:b2:11:26:24:f9:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BA:D2:AE:B1:A9:ED:7E:80:35:6D:05:1A:B7:0E:E8:B5:DC:31:EE
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/73023bb1-a443-4047-a9f2-64a1905f67ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.247.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:28:86:fd:d3:88:1c:dd:7d:a4:5c:8f:c9:dc:35:a4:70:d3:
c7:07:a4:f4:be:56:c7:3e:c1:28:8a:18:08:51:66:41:b9:c1:
e4:60:4b:60:60:7f:9c:e3:9c:59:07:2f:0e:50:e8:51:72:27:
2e:1c:19:48:c8:44:58:46:c6:5e:30:d6:22:72:ff:97:c7:75:
d3:78:b9:a6:72:d7:5d:e9:92:c7:6d:8a:38:ab:f7:38:0e:62:
d3:a6:33:2f:b0:14:52:89:f3:0e:a1:f6:b1:81:24:31:47:a1:
ad:53:9a:c0:3f:d1:b3:a0:9e:45:57:c0:85:d3:b5:7d:61:c1:
a7:05:df:db:87:50:5c:8a:3c:5a:24:b9:f7:48:10:67:4d:2b:
ec:33:7c:69:16:b3:73:05:2e:56:42:f9:fe:81:71:80:28:b0:
26:a5:71:14:27:49:87:89:a7:b7:db:74:e6:27:0c:d7:42:e6:
2c:39:5e:50:98:55:11:af:d0:f5:70:43:76:00:12:98:af:25:
71:f3:c2:c7:e2:e2:c8:91:ae:ee:42:b8:5f:1b:24:98:7f:76:
3d:2e:eb:d0:9b:36:91:09:5a:85:2b:8f:a6:f2:ad:d1:72:1d:
43:ad:a1:8d:0d:21:5d:a7:72:c5:dd:9f:8e:56:63:85:08:e8:
04:18:64:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net