Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9792ad79-8b80-43b9-8574-bf0d7945ed45.roa
File: 9792ad79-8b80-43b9-8574-bf0d7945ed45.roa (raw, json)
Hash identifier: roxeIk9GR1+7oyovkO+acq8RW2EAW3OjMMrZlAYNxss=
Subject key identifier: 6E:45:41:AD:4E:D8:65:AE:DF:62:EF:B5:4A:F5:6C:4C:86:7B:96:27
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6BF3D9D2B68E218B56713BA3ABFA68F41ACFC512
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9792ad79-8b80-43b9-8574-bf0d7945ed45.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 62.230.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:f3:d9:d2:b6:8e:21:8b:56:71:3b:a3:ab:fa:68:f4:1a:cf:c5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=283ced3d34285c7b65c4341dee0274469b6403545c16b2b1dfcc3c635dfec3ec, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:55:ed:b3:09:d1:c2:95:50:44:cb:e1:91:5f:
68:04:42:85:f1:03:a5:fe:89:c9:48:10:c8:66:cb:
b0:0a:8b:79:db:69:91:3e:aa:41:3d:56:2f:e5:c2:
c3:46:70:fe:97:e4:de:b7:77:de:8a:79:17:8c:db:
b4:f0:80:b2:e4:8f:ca:d3:29:ec:99:4b:f3:55:f4:
65:a0:82:53:98:39:06:2b:13:c2:b9:8f:b2:a4:7b:
79:60:9a:2c:d5:d9:a2:e7:29:bd:fe:0c:af:63:4f:
5e:a6:da:aa:70:80:9e:d3:b1:c5:1a:83:ce:d9:a8:
cc:60:97:f3:a4:00:be:b8:76:01:ba:aa:c6:a9:7a:
1d:27:8b:b5:bd:7e:ad:e3:17:ee:d5:dc:f8:12:a6:
98:34:9d:d4:6c:01:8f:99:ca:d3:9b:03:af:92:3f:
38:f8:88:2c:bd:13:fa:b2:89:d7:79:f5:95:6b:5e:
ed:58:37:e8:7d:32:f2:f2:db:93:69:ca:8d:56:b8:
e4:3d:f9:93:9b:04:36:cd:55:c3:e7:8f:d9:cb:e2:
c0:71:37:8f:af:f3:14:1f:ae:21:ec:0c:07:4f:ea:
9e:80:b0:26:19:8a:91:81:1d:5c:c9:4a:08:f5:4d:
e9:a1:ee:db:25:0c:30:c1:92:d9:b2:1c:5e:4f:c2:
6a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:45:41:AD:4E:D8:65:AE:DF:62:EF:B5:4A:F5:6C:4C:86:7B:96:27
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9792ad79-8b80-43b9-8574-bf0d7945ed45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.230.0.0/16
Signature Algorithm: sha256WithRSAEncryption
57:3a:e3:f9:48:09:57:38:39:6b:94:d5:b7:49:f4:9f:ec:09:
df:8a:7e:6f:8f:6d:f5:d0:ff:fa:dd:10:25:13:95:81:a0:b9:
b3:51:ed:42:9c:20:62:25:ef:fe:d3:be:be:48:86:2c:e7:f3:
dd:5e:a9:71:5c:56:e7:7d:84:f6:3a:c8:cf:2c:ff:ad:cd:3c:
7b:cd:73:f7:5d:68:47:b9:0d:43:e7:16:ca:e6:04:d4:88:c5:
64:6d:06:06:18:06:95:dc:3f:a9:79:90:3a:a6:f3:7e:d0:75:
b3:f4:04:3e:45:e4:b8:76:b8:87:f9:8a:3b:8d:2d:04:ae:45:
71:8a:ae:4c:ce:38:35:09:7f:ac:8d:5b:f3:a6:e5:2a:67:be:
d3:28:cf:95:df:92:4a:c1:12:f4:91:eb:18:a4:54:60:26:c4:
5a:9e:17:3d:c3:80:cc:b8:99:08:3b:7a:03:51:94:42:56:61:
e1:c1:aa:13:a2:a5:a0:61:61:f9:1b:06:d2:15:b2:ce:ba:35:
93:a8:06:d6:b8:8a:f3:29:27:70:d4:96:3b:bd:c1:36:2e:ce:
29:05:c2:24:68:c1:19:de:19:eb:27:a1:d9:04:a7:e2:8a:76:
18:6c:6d:cb:ef:9b:7a:13:7d:65:e1:a7:ee:9b:8a:dd:d7:5c:
24:ff:e1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net