Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a2b57228-1239-489b-a0ad-c926f19f72f0.roa
File: a2b57228-1239-489b-a0ad-c926f19f72f0.roa (raw, json)
Hash identifier: yusYXHJWrJdrr/NTrvaQQNV7CyOovACflA/M+JKoGcI=
Subject key identifier: 98:6E:F7:D1:52:1A:92:50:EA:90:CB:29:0E:EC:A8:CB:0B:86:00:13
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7B62B63060F5249CBD9F8568DD854861D9B52C30
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a2b57228-1239-489b-a0ad-c926f19f72f0.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 194.52.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:62:b6:30:60:f5:24:9c:bd:9f:85:68:dd:85:48:61:d9:b5:2c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=83ecf389198fe4cf06ad2fc454abd3f7e13637dcb9a452e0e3a338829dd47737, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:32:73:1f:85:44:6c:8b:69:dc:7b:d9:b2:
c8:74:6f:c2:3a:74:5d:72:be:8e:3d:01:db:e6:f7:
78:5e:29:1b:0c:35:cb:18:c8:c7:ac:ff:dd:f8:4b:
94:e7:7b:86:73:96:7e:d7:e0:a5:2f:99:50:28:e3:
02:24:78:78:b9:e7:b3:cb:0f:83:a3:69:d3:07:9c:
92:fd:ff:87:49:79:4b:27:87:58:2b:c9:fb:bb:87:
0b:21:a1:fa:b9:a8:92:0b:19:5e:6b:84:15:ca:8a:
c4:8d:7f:75:12:b6:1a:34:b3:01:a0:71:90:17:7a:
0a:1c:f1:fc:92:11:5b:54:a3:a0:37:98:73:36:3d:
ab:ca:38:3c:18:89:54:cd:f6:c8:ca:54:04:7d:f2:
48:14:d6:95:ad:54:f4:62:0e:e3:21:8c:c4:bc:fe:
9c:5a:6b:ab:71:30:32:60:62:13:62:b6:14:23:21:
41:1e:8f:54:b6:01:67:21:29:7c:6f:18:58:2d:24:
ae:11:5f:06:da:55:8b:11:83:c8:d1:09:0a:19:4f:
e9:11:67:e2:69:91:ba:cf:fa:55:87:88:dd:6a:c8:
f1:22:f7:9e:11:bc:58:50:b7:ef:0f:25:61:5f:b9:
7d:02:34:e2:a6:f6:07:ab:d9:e7:9a:9f:61:43:73:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6E:F7:D1:52:1A:92:50:EA:90:CB:29:0E:EC:A8:CB:0B:86:00:13
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a2b57228-1239-489b-a0ad-c926f19f72f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.52.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:77:84:58:b1:52:16:2c:5b:d3:c4:67:ea:99:d1:09:c0:46:
da:9b:ea:5a:03:c5:15:ba:29:b2:d5:8c:6e:7c:00:cb:08:e8:
d3:30:8d:78:a1:0e:07:22:86:82:b2:53:10:d8:25:f4:3a:35:
dd:d6:72:b1:6d:fe:52:96:73:16:09:8d:b7:a8:1d:af:0a:60:
d5:63:78:06:0e:8a:0e:00:be:0a:51:59:d5:ec:86:85:dc:14:
6a:6e:ad:db:c0:1c:fc:02:f0:6a:fa:19:15:a7:28:94:b1:49:
14:5f:14:8c:5f:e0:bc:04:68:50:82:8c:8f:14:d4:70:ca:73:
b2:a4:c1:d8:e6:18:e9:74:a5:17:61:e2:cd:43:03:e8:da:62:
b8:91:1b:3a:dd:7a:91:8d:c2:aa:a0:10:b2:cf:61:5f:23:ff:
f3:d8:0f:5f:ea:f2:05:dc:b1:43:1e:f7:29:13:c0:ef:a6:b5:
03:7d:50:03:fa:84:8d:b1:66:5c:c9:d6:59:6c:e0:25:b2:25:
37:39:6c:79:14:99:d8:11:76:92:01:d1:eb:91:1a:a7:85:ba:
0b:a2:e8:31:76:95:f7:c8:d2:64:f6:e3:a2:87:64:0f:ab:5d:
52:1d:da:00:07:8c:ad:48:7c:ca:65:73:3f:71:3c:e6:06:76:
de:aa:cd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net