Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ab3c8eee-3c0b-43c3-912a-c318c46504aa.roa
File: ab3c8eee-3c0b-43c3-912a-c318c46504aa.roa (raw, json)
Hash identifier: PXsTbcjVAHSiMZNsRnGefDvLPIMEsdHwT8+aqF993zw=
Subject key identifier: E8:C8:76:3F:58:97:74:58:AE:57:DD:1C:74:09:87:5A:09:08:D8:3F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 79FDA6CBB4CD762440CA15248474E99976E4A50E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ab3c8eee-3c0b-43c3-912a-c318c46504aa.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 57.99.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:fd:a6:cb:b4:cd:76:24:40:ca:15:24:84:74:e9:99:76:e4:a5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=a8d8021e53f5655fc138b75ef12f0a4c98911d3a57b5411201bf4bef155c232a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:3f:5b:ec:67:40:84:ba:ed:c5:13:a1:6f:
47:d7:d6:6a:f2:26:d1:77:d4:ed:64:1c:fa:28:1c:
1d:55:f2:9b:3a:91:85:f5:57:b9:83:42:fe:ca:53:
25:80:3f:ae:30:49:af:bd:9c:48:4d:54:de:6e:e4:
f4:e1:08:f3:a7:02:15:30:44:ef:57:a9:8f:14:be:
cf:a0:98:42:ca:2e:d9:e9:b7:d8:11:97:04:1e:59:
09:15:05:76:1d:1d:df:3f:c0:68:86:5c:37:53:e5:
fd:19:b5:3b:9b:3e:d1:4f:b0:12:8d:70:c9:65:5c:
ce:2d:36:39:01:bc:7a:4c:10:4c:d1:19:46:2d:a3:
12:0c:1c:b0:e5:d0:ee:c1:19:83:a7:f7:68:f5:b3:
4d:b4:4b:7d:29:c5:e0:32:bf:d4:36:30:26:53:2f:
86:39:74:ec:44:3f:49:36:57:3b:ef:ae:7f:8f:87:
b2:7d:81:2d:b8:db:aa:a4:4d:9f:0a:29:31:d1:18:
38:7d:33:42:96:81:d7:2e:71:ea:43:5a:b7:6c:b1:
60:1c:8a:7c:3e:cd:46:16:e0:ce:f7:97:c9:de:ef:
4d:dc:f8:91:79:29:36:29:f2:05:9a:e0:a7:11:2b:
a5:d3:98:9e:c7:c4:26:ce:af:1b:62:02:0e:3e:8c:
d7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C8:76:3F:58:97:74:58:AE:57:DD:1C:74:09:87:5A:09:08:D8:3F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ab3c8eee-3c0b-43c3-912a-c318c46504aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.99.0.0/16
Signature Algorithm: sha256WithRSAEncryption
82:79:1f:8b:37:75:9e:a1:eb:b1:a4:79:63:8c:e8:38:01:37:
10:6e:a2:40:cf:24:2c:c9:32:9e:5f:88:5a:09:32:cf:95:97:
6e:0c:36:c4:b9:28:05:d4:53:bf:7b:cb:45:8d:e7:9e:5a:3c:
de:3d:0a:e8:da:f0:45:f8:1c:79:5f:39:ae:19:e3:e0:42:58:
97:17:cc:a3:16:06:82:a7:b5:a5:3c:ba:e7:c0:17:0a:45:0f:
8a:87:e7:a3:c4:b5:48:9a:1d:32:43:d9:6c:a1:43:a8:8c:89:
d5:9b:c8:a3:73:06:b6:ef:eb:83:93:c3:48:c1:fb:1c:2d:33:
7d:ee:42:48:c2:71:51:c1:4e:fb:7d:96:bf:e5:53:07:8d:35:
28:91:b9:86:34:13:1e:17:c7:b1:55:d6:82:0d:39:82:2c:20:
39:90:20:e8:48:30:c4:a8:b8:54:98:e8:33:af:a1:39:1b:8a:
06:2d:8f:b0:9d:08:5c:29:15:43:1b:1b:d1:13:8a:5f:64:f8:
98:7d:f6:2c:66:1a:7f:97:5e:89:0c:e6:ac:66:4b:04:ae:9b:
64:b4:45:6d:e1:48:d8:4e:43:a7:60:c9:89:6d:23:55:a0:65:
d1:0a:6b:61:9a:4b:95:c0:e8:8f:e4:58:5d:ba:57:7f:a2:e1:
58:c0:01:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net