Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/90e43ec0-92f9-420a-8158-7b97f7f32b51.roa
File: 90e43ec0-92f9-420a-8158-7b97f7f32b51.roa (raw, json)
Hash identifier: 8L00rHx8dpSB0AQj7fkP8twKdKb3A343dHgbl3AP2p8=
Subject key identifier: 2D:96:51:86:66:41:D7:4A:4D:74:C3:FF:87:B9:DB:8B:6F:39:75:DF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 128569030776DECB965C4C9B6599496FBC5F539A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/90e43ec0-92f9-420a-8158-7b97f7f32b51.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 143.65.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:85:69:03:07:76:de:cb:96:5c:4c:9b:65:99:49:6f:bc:5f:53:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=cc5cd5b20fe34a84f5dbe9c99c3bb451ad8d0e33b306389659004cd59137f71d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2a:82:66:e2:b7:90:1b:86:47:1b:d8:8e:c7:
51:cc:e7:02:de:5e:5b:68:16:b3:0a:75:e8:2b:e6:
f5:b3:c8:0c:d9:4a:e9:97:42:34:3f:99:b1:62:d7:
43:12:10:9c:78:56:49:1d:f1:d3:9f:e8:76:b5:49:
41:80:01:15:28:03:14:b2:43:31:4e:8b:1e:f8:cc:
4d:3a:fb:e5:ab:1d:db:50:81:69:1c:d8:87:54:cf:
19:b1:78:71:51:b7:07:0f:51:61:86:04:96:a5:50:
e7:68:12:fa:08:ef:b2:da:ba:30:80:80:cf:49:cc:
9b:d0:ef:67:3f:f6:11:37:8c:da:21:40:30:a2:f8:
48:05:5b:78:75:ab:3d:2b:12:d6:c3:8c:16:60:28:
fb:18:40:1e:fb:48:be:c5:d9:31:32:80:1e:97:69:
30:24:39:58:85:a3:16:43:86:6f:11:15:7c:51:2b:
6f:69:04:42:ec:3c:00:b3:5c:68:30:5b:01:da:5e:
f6:08:a6:21:67:82:31:8f:a2:5e:e7:4a:47:11:ec:
81:b3:6c:a5:a9:5c:a9:a5:b3:de:b6:f8:61:6a:38:
da:85:b0:9e:5f:af:cd:c4:d7:82:b5:df:5d:17:84:
e7:fa:dc:6b:94:1d:dd:1e:99:30:cf:cd:d0:b0:d5:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:96:51:86:66:41:D7:4A:4D:74:C3:FF:87:B9:DB:8B:6F:39:75:DF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/90e43ec0-92f9-420a-8158-7b97f7f32b51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.65.128.0/18
Signature Algorithm: sha256WithRSAEncryption
35:ab:ea:c5:f8:07:8c:10:c5:08:97:dc:27:43:d9:5a:f6:8e:
8d:d5:2a:7a:49:b0:0d:e9:1e:53:10:2c:8c:ee:1f:89:1d:c5:
26:36:bb:80:67:b0:9e:3b:1b:ef:d0:81:3a:5d:28:10:04:40:
1c:ed:b9:6e:46:64:e0:55:2f:45:5b:35:7d:be:e6:6d:b0:f6:
d8:60:49:f4:e3:28:67:64:03:e6:fc:7e:20:e4:6c:6c:67:83:
49:4d:ba:5d:cd:c7:ea:a6:3a:11:1d:b4:7b:46:c9:b3:4a:c8:
48:55:95:51:10:5a:02:b7:9d:f4:fa:b4:c9:dd:31:47:39:be:
a0:76:a4:02:a3:d5:73:37:4e:f6:e1:6c:20:34:a2:eb:38:ed:
f9:47:ad:ef:f6:18:dd:fd:f2:df:1b:77:e0:a6:84:e9:50:84:
4c:f2:2b:2d:f1:e4:18:a9:9c:ce:2c:7d:8b:7a:21:01:17:c3:
e6:ae:d6:ed:f1:bb:7d:91:e7:12:46:d8:11:13:df:c1:62:9a:
ae:2c:7d:ef:f8:45:d9:dd:c4:e8:df:7d:d9:0e:31:14:b0:dc:
da:f5:5a:25:3a:54:a5:22:5e:8e:0a:9c:d9:d8:f0:5c:e4:76:
88:04:cb:b4:cf:24:e8:40:b8:eb:3e:49:4c:cd:fa:60:b3:85:
d6:e2:23:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net