Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8184de91-4284-44f8-acc1-0d319b511ea5.roa
File: 8184de91-4284-44f8-acc1-0d319b511ea5.roa (raw, json)
Hash identifier: zvf9QgSauEi+wF0rnWDhxh2USHSM+bASmMN2HqbaXQc=
Subject key identifier: AD:8E:4B:2E:23:3E:33:C5:33:BA:07:27:4F:01:28:9E:34:1F:80:55
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 756CF7F32F314C620DD76B824907931DA385C437
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8184de91-4284-44f8-acc1-0d319b511ea5.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 193.186.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:6c:f7:f3:2f:31:4c:62:0d:d7:6b:82:49:07:93:1d:a3:85:c4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=41f137c2df236a58c93c4a389749dc2eb6de1f16c01ba2b92fd4726b39db5e1c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:ef:3f:d8:2e:06:40:87:ea:20:07:07:45:
81:f4:6b:71:bc:8e:44:b9:d4:95:3a:c6:c0:dc:9f:
28:c7:b8:02:48:ed:b4:99:d0:95:31:a4:d4:fd:ed:
bf:4a:9e:f6:a3:88:3a:a5:db:ee:f1:b0:0c:8c:3f:
bb:d9:57:b8:95:20:b3:33:36:08:13:d4:1c:e1:41:
d1:1e:61:1e:d2:7b:e0:d0:3f:09:4c:2f:fd:a4:b6:
3c:63:c4:31:47:9a:bc:3b:5b:e2:41:d4:f7:6a:61:
5e:fd:40:cc:85:0f:a1:0b:cf:9d:98:34:84:2c:14:
46:07:64:a6:73:55:1d:03:b3:97:81:63:c8:0e:b5:
8b:da:7e:5c:7d:cf:b8:29:ec:bb:13:c6:e5:99:42:
53:fe:85:b6:60:af:2c:70:41:46:5d:4c:36:25:af:
3f:de:9d:69:0b:53:f1:e5:f6:22:22:49:d3:b5:3f:
55:1c:33:a8:cd:16:0c:1c:73:1d:d8:e8:bd:00:d9:
b7:b2:6a:95:7f:b3:a2:5f:75:53:a9:35:f1:92:a6:
42:94:2d:26:f4:e2:9d:29:67:24:e7:26:83:53:4c:
0a:ba:4d:d3:f1:75:13:b1:9d:81:72:22:95:86:3f:
87:d5:eb:f9:98:e2:de:a9:ef:94:af:8c:c6:d4:47:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8E:4B:2E:23:3E:33:C5:33:BA:07:27:4F:01:28:9E:34:1F:80:55
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8184de91-4284-44f8-acc1-0d319b511ea5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.210.0/24
Signature Algorithm: sha256WithRSAEncryption
34:fa:9c:7d:ef:8b:1d:da:9b:f5:e9:a9:17:94:5d:6c:65:69:
fd:4a:65:02:e3:15:f8:ab:98:56:76:3d:50:ce:82:99:da:8c:
aa:c7:c6:52:3e:aa:09:7c:6d:b4:a3:30:e4:30:ae:00:25:ae:
da:48:22:f1:24:58:f0:3a:72:cc:7d:dc:3a:44:00:3b:1f:a9:
70:09:cc:b5:30:89:97:29:50:2c:c0:0c:e6:ed:fc:65:83:6c:
14:e0:9e:7a:d2:25:2f:fb:56:86:08:31:21:96:23:22:7d:c1:
01:f3:35:36:97:d6:93:3b:ee:9d:c6:05:11:6c:69:5f:9f:3f:
04:89:94:42:ee:78:4b:75:ec:9e:d8:6f:6d:9e:8d:70:b1:3e:
eb:d8:fe:0d:be:d4:0d:9d:f1:50:96:f8:b9:72:ef:f2:ee:27:
dd:12:e8:28:de:f6:6c:bb:b9:78:bd:a5:6d:18:aa:0d:ea:e1:
d8:22:eb:21:a6:dc:ce:11:9b:c0:1d:05:fa:bc:f6:b8:44:e7:
d1:58:ee:62:9f:2e:1e:0d:97:29:d0:42:c6:99:f9:ac:09:c7:
45:91:30:5c:a8:6e:e6:db:9f:6b:ac:31:bd:da:1c:a0:c2:30:
4d:e4:a4:73:37:81:fe:08:ea:64:65:36:a0:d9:84:4b:b8:e3:
fc:17:5c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net