Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8e48e4fe-a697-44b0-bab2-1b54935a50f3.roa
File: 8e48e4fe-a697-44b0-bab2-1b54935a50f3.roa (raw, json)
Hash identifier: g3hgM2mvYAcrNF8rWUMG18DXH0WIBoIbKNkISpLdo3M=
Subject key identifier: 7F:17:25:4C:7C:CC:E0:03:BB:69:74:D6:5D:6A:C9:86:B0:8F:80:7B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0E376370E4B14F42F5FCEEE8A897B8C9C2DD27D8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8e48e4fe-a697-44b0-bab2-1b54935a50f3.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 212.255.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:37:63:70:e4:b1:4f:42:f5:fc:ee:e8:a8:97:b8:c9:c2:dd:27:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=723fb6a24d98442fffe83eae1f7d324022ab48297d9f870151607e787df4748a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:33:01:e5:ba:c5:74:a1:b5:19:0a:1c:00:
b8:09:ec:d2:28:d0:3f:08:d5:9b:fd:95:7c:19:fc:
00:3d:53:16:42:ac:fd:4c:98:c4:4c:70:68:a4:e0:
1d:c8:95:ed:29:90:12:73:47:d4:92:56:93:c5:73:
b8:9d:ca:cd:01:e1:94:af:c1:4a:76:9a:dc:dd:0e:
40:8f:c4:fa:44:4f:97:96:2a:0b:f6:8b:60:66:a2:
b2:c0:e6:78:ef:17:a8:9c:19:73:f5:5a:17:f1:6c:
03:e4:a4:2d:0b:57:46:ec:48:44:37:9c:bf:74:43:
84:45:55:56:31:59:9e:8e:c6:58:2c:d5:fc:04:1e:
67:91:4f:6a:ad:1c:dd:01:d6:1d:c7:fd:aa:e7:32:
a3:d2:a9:56:cd:1a:9f:f9:5c:19:c4:b4:fe:95:6d:
78:ad:2b:03:f7:dd:20:03:f7:02:a4:6d:99:69:f5:
92:83:ee:3c:fd:17:0d:45:df:82:41:06:b4:2e:de:
26:a9:4e:13:e4:e7:fa:e0:25:74:6f:ef:c8:91:c7:
e2:2a:86:80:4f:0c:f3:54:98:dd:70:ef:80:ae:82:
96:01:73:e2:6f:77:2b:cd:26:ea:c3:98:d9:06:c8:
0e:48:2d:64:13:0a:38:5e:f9:a4:14:c7:10:a1:cd:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:17:25:4C:7C:CC:E0:03:BB:69:74:D6:5D:6A:C9:86:B0:8F:80:7B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8e48e4fe-a697-44b0-bab2-1b54935a50f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.255.0.0/16
Signature Algorithm: sha256WithRSAEncryption
79:fd:54:63:38:1a:72:0f:86:6f:8b:9f:93:29:e0:f0:cd:2f:
c1:c9:a8:f7:48:c9:e7:c4:1c:bc:8e:65:bf:06:0c:7d:33:25:
e9:c7:5b:80:01:76:47:65:b3:39:64:8a:93:23:54:ac:a8:aa:
e5:01:b2:5d:f2:d7:ca:1f:29:10:f2:e1:d7:38:68:4b:70:b3:
45:14:84:cf:ac:60:d7:89:ca:d8:8e:20:58:fe:8f:d0:71:23:
35:32:9f:eb:b8:03:6e:49:09:64:0c:aa:9f:89:a4:9b:e3:fb:
8f:56:ff:db:af:c8:98:84:b3:c0:f0:5c:41:bd:b1:5f:01:2c:
64:77:30:6e:0e:2d:f6:53:21:f9:5c:fd:97:63:c0:47:1e:1e:
9c:bc:c2:bd:ac:a6:2e:52:c9:b0:80:96:1c:cd:eb:65:af:61:
7e:0c:2a:7f:c5:1f:ed:d4:4c:3b:f3:a1:37:c6:56:68:e0:4a:
df:51:ad:84:0a:90:e8:95:ed:92:ca:33:d0:7d:e1:15:a9:d0:
03:88:e0:b8:38:ae:c4:8e:2c:f8:b7:06:b0:eb:46:03:2a:ee:
32:5f:0f:b0:38:e4:08:8c:1b:0b:f7:3c:16:74:af:f4:71:48:
f1:e3:a7:ab:0e:4d:46:93:ad:9e:71:18:22:49:49:9c:c1:8e:
f3:a9:96:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net