Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a4f9b1d-c483-4904-8d04-be1592cba27d.roa
File: 9a4f9b1d-c483-4904-8d04-be1592cba27d.roa (raw, json)
Hash identifier: 06ob0QDOIQMRipYNMEOPI4PE88ebltYzm8pV3+PReV4=
Subject key identifier: 29:22:62:88:F4:D3:2C:AA:9F:E8:A9:94:0C:47:7D:A4:6F:8D:93:D4
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 798E98F5120A5289A1AB767075B92DACE5411BEE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a4f9b1d-c483-4904-8d04-be1592cba27d.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 200.224.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:8e:98:f5:12:0a:52:89:a1:ab:76:70:75:b9:2d:ac:e5:41:1b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=1a658ddb36bc4c105be9eaef3d005de3a1a054377d91958504fa0c920152def9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:0b:97:9a:6c:6c:72:10:e1:16:1d:42:2a:
96:c1:e7:c2:d7:c2:2c:54:25:eb:bd:b2:11:6a:68:
70:d6:14:ea:5f:b4:c3:ad:3c:49:6e:64:a9:c8:4b:
f9:34:a5:86:a1:bd:6a:87:d8:30:70:57:21:2b:86:
60:16:90:d0:0b:94:05:cb:15:f5:59:c9:2c:2f:76:
cc:93:d1:95:20:40:fd:f7:6f:73:2d:0e:ce:11:bc:
c8:0d:b1:21:1a:ba:f8:a2:13:1c:2b:27:15:e6:fa:
b5:20:42:9f:22:ed:e8:d4:c0:37:9b:60:02:19:a1:
60:25:b8:16:fa:d4:e3:12:92:0d:15:c2:04:e3:87:
36:8b:94:a2:b2:2b:e9:d0:43:76:1a:4d:04:ab:40:
b3:1e:a1:81:bc:56:94:78:b2:c0:06:7d:e7:a0:7d:
03:13:86:65:cb:cb:fb:8e:94:85:53:22:c5:47:fe:
f8:bc:67:27:da:7d:77:b5:23:24:9d:08:11:06:82:
d9:b6:91:9c:f2:da:25:d7:52:c5:47:d5:21:f6:8b:
75:0c:58:8e:70:9e:35:6f:e9:54:04:da:5d:fb:3e:
ec:a8:0a:c0:0a:8e:a3:5c:db:d2:91:55:3c:c5:f2:
93:39:2f:da:83:fb:ea:a7:82:ee:2e:52:3e:08:50:
ff:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:22:62:88:F4:D3:2C:AA:9F:E8:A9:94:0C:47:7D:A4:6F:8D:93:D4
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a4f9b1d-c483-4904-8d04-be1592cba27d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.224.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:37:ce:15:5c:4d:d2:03:a6:21:5a:f4:52:1b:2e:a8:43:cb:
05:8e:82:fc:a3:59:e0:2c:ec:18:11:4b:e3:c8:6f:25:5c:a2:
73:70:12:f2:14:da:bb:08:d2:a8:73:f2:93:65:fc:c4:e8:41:
42:3b:42:c8:ba:3e:ca:c7:cf:eb:6c:93:d4:4f:3e:74:d6:fa:
b2:f6:da:a8:da:b3:88:ca:ce:3b:b0:74:93:1a:17:65:66:a0:
69:81:8b:09:64:1d:8d:bf:9b:6d:a6:9e:ac:d6:7d:15:82:7b:
c5:c4:09:a2:88:80:5b:df:f8:cb:46:da:47:74:61:fb:13:fb:
98:02:5d:b7:be:3e:a8:3d:32:76:b6:c5:bc:f0:26:1d:41:30:
e3:1f:13:b9:50:c8:6b:91:e1:3a:09:5d:91:22:ce:cd:51:2c:
8c:3c:0c:21:d3:a0:70:64:91:34:35:be:74:86:46:48:c3:59:
cc:6f:56:4f:c9:e8:de:3f:fd:e8:4e:bf:db:88:09:a3:25:13:
e3:79:7e:fe:14:b3:49:46:e6:ed:8e:3d:ea:14:55:c5:66:f7:
8e:21:0a:6b:6e:11:69:69:ce:90:51:61:6a:72:13:f6:ea:42:
a6:12:2e:f7:29:99:b8:c0:b1:ad:da:95:a3:cd:10:bb:4a:74:
51:cc:47:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net