Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9f77493f-a89e-41b4-9b06-e8928fedf80c.roa
File: 9f77493f-a89e-41b4-9b06-e8928fedf80c.roa (raw, json)
Hash identifier: eQJ5QKcdt42nNXTbvuEjxW1ym7kibW8Q+i/OYSIKDYM=
Subject key identifier: 71:8E:D2:01:2F:4D:64:A1:02:5D:EB:A5:90:F4:48:C0:D9:9D:04:75
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 486BCD1B6641FA230756AA849A983258A23AF948
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9f77493f-a89e-41b4-9b06-e8928fedf80c.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 85.213.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:6b:cd:1b:66:41:fa:23:07:56:aa:84:9a:98:32:58:a2:3a:f9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=20ef8266c7136c81260288a269e653d30bc983d0ffbb019d7c8e52287f899d56, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:9a:58:91:18:e6:10:53:15:88:7f:e6:cb:
b7:a5:26:a8:1b:10:99:0a:cc:63:51:fa:17:de:e2:
5d:fd:fd:e6:15:a8:da:50:c0:25:c1:92:5b:61:51:
75:21:59:e3:4d:18:4c:1d:ed:dd:2e:6f:1e:a6:d1:
e4:e0:09:df:10:da:31:f2:1e:32:d7:13:19:69:77:
0d:fc:50:02:d0:7d:ce:45:62:29:cc:c2:21:3e:9d:
3e:9c:99:a0:ff:51:e3:d1:63:f4:27:25:40:53:ed:
c1:bc:aa:7f:c9:1f:41:8d:58:dd:8c:4d:c4:30:25:
09:58:bf:35:6e:6c:ed:40:8c:49:74:35:7a:36:a8:
ff:66:88:32:af:dd:7e:7d:21:20:f1:97:a0:d9:03:
d6:e8:4f:e0:de:b3:21:20:94:e3:05:37:ce:af:a8:
12:8a:8b:34:41:58:02:0a:cc:d7:31:f6:fc:3c:89:
02:d4:a1:c0:c7:db:a3:62:23:b3:19:49:48:01:9a:
f5:70:a0:5d:49:38:dd:1c:04:d2:c6:71:07:b1:65:
dc:fe:d3:ab:72:bf:c2:ea:fa:31:91:7c:17:b1:89:
5d:01:cb:2f:d0:e7:58:92:81:17:24:f0:fb:fe:36:
04:7e:a3:63:79:85:68:9c:39:d3:e1:1e:2c:ff:f2:
8a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8E:D2:01:2F:4D:64:A1:02:5D:EB:A5:90:F4:48:C0:D9:9D:04:75
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9f77493f-a89e-41b4-9b06-e8928fedf80c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.213.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:ef:e3:f8:7c:5f:80:e8:1d:40:f1:e1:25:22:b3:8c:07:3f:
1e:38:fd:ea:ab:31:85:40:c7:03:b9:83:e6:5d:f2:ab:56:3e:
36:2f:40:78:c7:1d:0d:e5:f8:32:93:3c:18:24:2c:e0:e6:f7:
29:9d:7e:51:04:0a:92:3c:3b:18:f3:3a:fd:ad:9b:1a:b2:3d:
d3:b5:ff:ac:5f:a3:1f:a6:a0:ec:db:fe:94:91:d3:d4:ae:a1:
5d:dd:6c:eb:8a:0e:76:b7:2a:71:f8:b7:ab:11:74:0a:49:f6:
d4:46:b1:1b:60:7d:10:80:38:cb:5b:4a:04:14:de:94:35:2b:
f3:f0:c6:5c:8e:1f:a2:45:11:1e:ce:ca:fa:54:82:b5:71:3a:
4d:5f:40:e8:bb:c0:32:30:cb:4f:e6:8d:5d:a9:b4:bd:2f:bc:
66:7b:88:bc:54:97:a9:f1:64:e3:92:5d:03:39:42:9c:77:73:
13:06:34:db:cf:6a:22:87:c3:f0:d1:2b:4a:0d:f6:85:b5:f6:
71:ff:9a:18:db:70:a7:f3:9e:84:1d:5d:2f:a8:1a:f5:24:e2:
6e:03:2c:08:03:7a:ab:ac:a1:6c:e9:bf:0f:10:a5:ab:75:14:
5d:68:b5:bf:79:35:15:d4:85:5b:7f:4d:05:1a:1c:90:a1:88:
6b:47:53:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net