Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8b14a0f9-8627-4e23-b9ab-fa8ddd835f1e.roa
File: 8b14a0f9-8627-4e23-b9ab-fa8ddd835f1e.roa (raw, json)
Hash identifier: 6jLgKnRcs239inTg8sbDKPwbVBkJowugPmDox2gbN4Y=
Subject key identifier: 33:CF:A5:79:85:9D:50:71:86:7C:CF:2D:2F:76:67:53:2D:D8:AD:7C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 31128A38A225CF3FA19F39A8ED27B51CAC228A71
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8b14a0f9-8627-4e23-b9ab-fa8ddd835f1e.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 57.99.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:12:8a:38:a2:25:cf:3f:a1:9f:39:a8:ed:27:b5:1c:ac:22:8a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=3eaa9810df934e6cdab5921d31efb50068328aa050f70b03387e7a571c615b63, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:38:78:63:7d:c2:be:34:a6:19:c1:8a:87:
bc:78:79:9b:a7:cb:40:f6:e5:e0:df:0f:99:45:f3:
74:28:eb:10:22:99:25:23:de:b3:40:89:c4:8a:2c:
95:f5:c2:e8:30:77:22:89:e1:d1:de:62:dd:de:d5:
ff:ea:b2:5b:13:b3:03:a8:b6:76:8c:21:39:5d:a9:
61:dd:98:d5:21:6a:2b:3d:01:6f:36:eb:cc:5a:fb:
4a:87:d8:a9:dc:cb:9f:7e:8b:ef:9f:bc:f0:b1:bb:
ca:89:88:08:e6:74:f1:02:7a:88:95:7a:54:3d:3e:
d9:1e:c8:df:6f:ba:96:4f:7b:40:1e:27:7c:5f:46:
a1:0f:9e:9e:37:18:6e:da:ab:4d:d4:fb:41:27:49:
1c:f4:17:7a:d3:12:f7:10:46:74:9a:c6:2f:a4:00:
a2:0f:08:46:54:6e:8c:d6:ea:97:fe:3a:ed:9a:10:
38:7f:16:e1:c3:1d:bb:2a:24:78:3b:c2:bc:45:f7:
57:69:80:6b:ac:97:44:57:d5:cd:93:6e:dd:31:37:
56:ce:2b:60:59:fc:70:24:80:d0:9f:a4:2e:51:b4:
23:3f:5c:ab:74:73:92:d5:be:04:02:97:62:9c:ee:
e6:ed:1d:e2:d9:a0:d2:f5:f5:af:b1:82:f9:f3:d4:
a3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CF:A5:79:85:9D:50:71:86:7C:CF:2D:2F:76:67:53:2D:D8:AD:7C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8b14a0f9-8627-4e23-b9ab-fa8ddd835f1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.99.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:42:e4:dd:bb:1a:dd:c3:6e:bb:20:d4:e9:48:03:50:b7:5c:
20:d3:38:54:e9:b5:ec:05:31:94:2b:2c:90:cf:cb:95:8b:34:
0d:fc:51:72:4d:44:e8:56:cb:c9:c0:ab:5e:5e:59:cf:42:55:
af:0c:00:64:32:ab:2d:c2:e2:23:f7:45:f3:d2:84:1c:fb:47:
24:75:2a:aa:43:7b:af:c7:ba:29:af:dd:9e:a9:94:43:85:51:
fa:45:e6:66:f0:c7:fb:6e:69:89:cb:4b:35:94:bd:1d:55:0a:
8f:14:a9:82:f6:66:ec:c3:fa:34:92:33:05:91:e7:93:c6:85:
b6:6f:e1:aa:40:87:fa:97:b6:28:01:fa:9e:71:f9:79:54:7b:
88:ff:37:b9:ba:a0:4e:89:86:e3:5f:64:45:e3:c6:62:16:6b:
5f:d9:2e:2a:4a:cb:f9:7a:75:b6:8a:15:9e:e3:4f:c8:e7:54:
b3:4f:02:82:e7:7a:b0:1c:44:9c:e4:c7:78:46:f9:da:35:a1:
e2:e2:90:ce:ea:af:4f:ec:17:ed:bc:bb:ec:47:12:a4:d1:e0:
d1:50:26:c0:ae:7b:c7:a4:bd:a7:fb:83:a5:11:18:a6:04:3c:
be:93:d8:4e:e6:20:08:66:e6:13:83:93:7b:ad:9c:33:c3:1e:
62:22:3b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net