Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/760b79cf-4b6a-441d-8cec-518fe8e653f9.roa
File: 760b79cf-4b6a-441d-8cec-518fe8e653f9.roa (raw, json)
Hash identifier: eL8LenGgLsOIn2BtHdKgU9AQ/L38SoeZfJjYw14m4Yk=
Subject key identifier: 3C:C1:33:24:4F:37:FD:A7:82:78:47:90:16:0F:6E:2D:A3:BE:7D:4B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 18FB5062D5AE424DBE00DBCF21EB279FD0223A69
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/760b79cf-4b6a-441d-8cec-518fe8e653f9.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 57.101.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:fb:50:62:d5:ae:42:4d:be:00:db:cf:21:eb:27:9f:d0:22:3a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=441dca4d364daa32f9ffac4ee2402c651205ca173d97f123fb98734f90692416, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dd:73:f1:d8:bd:b7:e3:64:3a:1e:1f:b9:74:
ae:01:85:01:d8:90:ef:db:29:0b:9e:0e:b4:5d:a2:
e9:5e:47:fd:0f:12:c7:27:71:21:af:7c:5a:ce:c7:
09:b6:93:53:32:53:cd:36:8c:d2:3b:b6:71:13:cf:
2f:08:dc:9c:c1:58:7d:c6:8f:1c:55:80:50:3f:d6:
9e:5a:41:07:f5:e1:51:dd:70:a9:8d:03:e1:4c:8c:
f5:d0:53:56:92:80:54:70:2a:e4:e5:e7:78:c8:48:
26:7b:69:34:7e:d0:86:f5:1f:d0:49:81:76:3f:0c:
fb:9e:e7:48:c8:85:d5:12:d2:3e:8a:78:c2:da:f4:
ea:e2:65:6f:61:83:e3:d3:99:28:25:88:98:16:2c:
aa:8c:35:37:70:46:0d:31:c6:2f:14:cf:e5:56:50:
c7:ed:80:cc:a1:2e:39:5a:25:89:3f:fe:69:46:7b:
b7:a6:32:cd:b2:7c:43:41:6b:29:f2:6c:d1:b4:11:
0f:06:25:22:52:64:bf:a5:95:ab:6f:e5:93:c9:cb:
dc:7c:24:e4:20:cf:15:6d:31:f1:56:d2:29:8e:4f:
3e:b3:3e:cb:5d:a7:bd:85:85:5e:49:39:c1:f7:85:
a8:8b:15:f2:4b:40:a2:c2:99:d5:19:7d:f9:f6:d6:
93:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C1:33:24:4F:37:FD:A7:82:78:47:90:16:0F:6E:2D:A3:BE:7D:4B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/760b79cf-4b6a-441d-8cec-518fe8e653f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.101.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:5c:e2:2a:f4:18:db:61:3a:78:1b:7f:c5:6d:d3:6d:00:11:
61:86:24:36:37:72:12:12:8d:f7:53:6d:e7:82:d8:02:08:33:
fb:0b:b7:39:b5:03:29:3b:7f:17:64:4d:4c:1a:05:73:93:70:
2d:70:20:34:ee:8e:4c:dd:14:1a:e3:78:48:7b:9f:a7:f6:0b:
df:96:2f:77:2a:31:21:67:32:f3:27:d8:53:82:f7:1a:31:d1:
76:c7:87:c4:1a:b6:3b:8d:02:ea:08:bb:5b:2f:63:97:cf:fb:
bc:c2:b9:6a:9b:c9:20:10:3d:a6:71:15:8a:dd:97:01:09:3f:
26:0b:c7:69:f8:40:09:0e:d4:75:86:b3:54:0d:33:7d:ab:cd:
3f:63:b2:60:9f:b4:77:93:c4:5a:51:26:d9:3f:28:7e:41:1c:
4e:a6:a9:ea:a5:5b:9c:d9:e9:be:0b:cd:92:98:d3:dc:79:3b:
8c:e1:7b:c1:87:3e:24:94:94:b6:21:bb:b7:12:03:fb:d2:1e:
ae:d9:ce:65:2e:ba:0a:d3:2f:f8:b9:b5:b3:de:df:d0:41:b6:
ff:84:95:d4:be:ec:ed:d5:00:17:51:77:10:4e:55:b6:c2:fe:
86:4f:5e:e7:56:c5:a3:8f:10:3c:00:b1:7d:0e:a9:cd:da:13:
66:9a:fd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net