Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a8b61821-4c64-448c-91eb-241e2326e11e.roa
File: a8b61821-4c64-448c-91eb-241e2326e11e.roa (raw, json)
Hash identifier: 4074XPr4tbJ9z4bLplrnqBMDgoIebjeFR2mn1G5N9h4=
Subject key identifier: 29:E3:6C:06:23:1E:2E:BF:1E:E9:0E:CB:51:A2:84:44:7A:FD:AC:CF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5A73A3B661F9E67E584BDB8C43CAEBE0247569F5
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a8b61821-4c64-448c-91eb-241e2326e11e.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 14618
IP address blocks: 2a01:578:1400::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:73:a3:b6:61:f9:e6:7e:58:4b:db:8c:43:ca:eb:e0:24:75:69:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=54d095f1f11e5674ee79369c36eb71c0831506e99f27a281491d32c74ddff84f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6b:30:3c:04:5a:51:a1:83:5b:55:ef:dd:a4:
12:82:23:d9:96:d3:96:92:62:b0:ea:98:53:be:a7:
9e:04:d9:9e:d4:6c:bc:db:6b:92:fb:49:1d:ad:e0:
c2:1a:8b:26:5a:e5:e9:84:e9:a1:c1:b9:72:14:55:
da:4c:5c:e3:7d:82:f8:d9:9c:73:95:4c:27:47:66:
e1:92:0d:1a:8b:27:68:26:b6:d1:7f:94:bf:5d:81:
6a:c7:0b:63:3c:ef:b9:87:ca:db:40:64:d3:07:c0:
79:06:90:99:f9:8a:50:e3:cf:fa:ab:1c:80:3c:d2:
22:ec:65:87:75:61:bb:2b:e3:f2:fe:2f:5b:d6:01:
c3:ac:eb:4f:03:9a:9a:76:de:95:73:2a:75:12:7a:
c7:f4:5d:44:85:a9:de:fd:db:41:0e:a9:80:e1:35:
fb:90:d6:de:b2:61:9f:e2:ce:ce:18:ce:cd:f0:5f:
ea:fc:29:a7:0b:e7:51:ca:f2:13:85:58:4b:fa:6e:
a7:b5:b8:0c:4c:6e:fc:47:95:52:3e:3f:0a:06:91:
de:4e:0c:01:d9:3d:13:c1:0b:af:2d:85:2a:c4:7d:
98:7e:ad:1f:e7:8a:48:25:98:c3:99:f5:03:1e:cf:
ac:76:f7:99:d6:9d:95:1b:78:c4:86:8c:e3:f5:66:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E3:6C:06:23:1E:2E:BF:1E:E9:0E:CB:51:A2:84:44:7A:FD:AC:CF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a8b61821-4c64-448c-91eb-241e2326e11e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:1400::/38
Signature Algorithm: sha256WithRSAEncryption
8f:29:4d:d3:1f:c8:ce:d8:b9:c1:76:31:75:20:42:8b:ce:3d:
57:70:b8:72:94:02:d0:29:f6:ea:01:59:46:df:75:e2:d8:42:
50:03:b9:0c:36:ef:8c:8a:e1:82:a0:a6:08:79:8c:ff:35:68:
55:65:e7:8d:89:1a:d9:00:a5:fa:78:fd:ed:91:60:cd:3a:6b:
35:1f:9a:56:ed:2b:c5:13:ae:29:02:10:21:49:d2:a1:30:fb:
69:c3:0a:dc:19:c8:ed:ba:69:cd:be:e2:03:aa:7e:77:e6:c8:
d0:47:76:ea:bf:21:0a:d4:d2:cc:0e:63:f2:ce:31:27:d4:63:
71:c6:dd:b3:47:8b:da:33:fe:b4:f0:a9:d2:79:0c:ae:42:d1:
2f:6b:2b:24:51:5d:51:f0:c7:97:16:fa:12:72:60:af:0e:63:
9d:0f:e1:14:47:c1:21:04:c3:d1:a9:dc:29:5b:fd:43:e0:e2:
63:62:5a:cc:83:2b:e4:c5:d6:1d:45:c4:bd:89:22:67:4e:3a:
10:6d:51:56:a1:3d:27:c5:3a:7e:cd:76:b8:ad:bc:fb:1d:c4:
a4:47:c7:87:f6:54:2e:45:2a:27:46:b0:73:28:45:50:44:88:
4d:7e:da:78:14:16:2d:d1:d0:27:e7:0d:92:74:45:97:d4:7a:
a2:ad:1c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:39 2024 by rpki-client on console.sobornost.net