Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ab1e8156-1e29-44e7-a78d-0697ecae5b91.roa
File: ab1e8156-1e29-44e7-a78d-0697ecae5b91.roa (raw, json)
Hash identifier: dnFyTb4FWppBB52uda/apyY4Xn0cFOkJFZ4hMiQQlLE=
Subject key identifier: FC:1E:F1:E3:A2:01:E1:D7:45:3B:EF:AF:18:60:4D:94:59:D4:1F:0D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1F531C1FF338370842A445C57456ABA4307FB1B7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ab1e8156-1e29-44e7-a78d-0697ecae5b91.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 193.186.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:53:1c:1f:f3:38:37:08:42:a4:45:c5:74:56:ab:a4:30:7f:b1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=4d54aec1055d6338c69db6813aeaae033264a07296ba32e3adc3d0bc1c75cee5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:0e:a4:92:1a:33:ea:89:fd:9c:c9:7d:33:
d2:55:33:9e:7c:4b:de:56:d3:3c:29:ef:40:bb:94:
0d:45:4a:5a:01:d9:5a:6d:77:ed:f0:f8:a0:a8:03:
f6:2f:ca:2c:f1:26:0e:34:6a:29:5e:28:64:c2:f1:
7c:d4:9a:66:c0:fe:36:c4:12:fb:53:2c:ae:e5:c3:
67:89:c4:ec:6e:4a:59:51:4d:aa:08:c7:9d:02:26:
86:42:7a:e6:5d:c0:24:22:45:b8:d7:57:ae:1b:5b:
a1:74:3e:ae:be:fd:48:84:4e:25:0e:24:f0:8d:a0:
a6:42:4b:18:84:55:94:ff:e2:3e:63:05:fd:f9:68:
b7:21:bf:4d:03:03:19:e3:ac:4c:ae:4e:3d:48:d4:
38:7e:4d:2c:a4:9f:da:39:ac:88:8c:ee:91:90:fd:
8b:5b:2d:42:83:9a:26:a5:b1:fd:2b:33:a5:44:ca:
3e:ed:0f:db:26:bd:ef:2f:65:2e:d8:d0:5d:2f:38:
3e:c0:75:9b:c1:2f:b5:d7:34:e4:af:48:8a:e0:0a:
77:b3:82:34:58:03:94:6e:1f:34:bc:37:52:30:e7:
31:ed:38:0c:2b:83:b6:e5:c4:0a:1c:12:9b:89:1d:
90:fa:de:23:9e:55:7f:30:78:25:f7:b8:35:1b:bd:
81:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1E:F1:E3:A2:01:E1:D7:45:3B:EF:AF:18:60:4D:94:59:D4:1F:0D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ab1e8156-1e29-44e7-a78d-0697ecae5b91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.210.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d7:bc:b7:5c:df:7a:b5:91:c8:32:a7:4c:4c:59:cf:02:70:
d7:7c:4f:df:40:8c:85:48:74:8d:64:fe:64:1c:df:3f:3a:09:
48:de:53:ef:65:29:92:7d:a7:71:5c:33:a8:cf:d9:ff:c9:da:
32:5b:d7:8b:fb:3e:d2:f5:8c:2c:c0:a4:59:4f:c4:0e:9e:3b:
b0:02:d0:8d:00:e6:51:e6:93:99:5a:24:2a:50:1d:1f:d0:fa:
35:2c:20:3e:3a:9b:a5:e4:be:6f:e9:15:0b:93:79:e6:68:5a:
8f:db:fa:3b:45:97:3a:11:ab:94:86:33:16:95:3c:d7:fd:f9:
40:a6:c7:54:aa:19:f0:0e:78:21:e4:7a:db:59:f9:b1:ab:c7:
df:d7:86:f6:ed:f8:b9:aa:cf:2c:90:e9:47:9c:39:34:6e:95:
fe:06:6c:77:07:6e:77:4f:2d:41:9c:5d:b9:11:85:10:04:69:
1f:3e:24:8b:44:64:14:1a:69:69:dd:e6:1a:b0:72:75:30:c0:
09:90:cd:eb:ca:e6:1c:c4:47:a3:2c:60:1a:ea:cb:89:9a:b2:
d4:02:1a:74:41:f4:0f:85:00:b5:bb:25:8a:12:92:4e:ef:fc:
da:bc:b2:82:b3:2d:4b:a1:a8:52:86:c6:fc:30:3b:95:c0:47:
a1:b0:da:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net