Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac8a54e6-9c65-4ad5-abd4-d82ba3a54ef2.roa
File: ac8a54e6-9c65-4ad5-abd4-d82ba3a54ef2.roa (raw, json)
Hash identifier: R0InS7KyMhzPlYg2d/UtN5/IfXre7VSggnSnnrFKBGQ=
Subject key identifier: F9:9F:C3:6D:16:8C:5D:30:2B:D5:83:C4:42:8B:C4:D8:58:49:50:4F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0B7B8A005D38B6ACA91B69B8853E59DD8A983073
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac8a54e6-9c65-4ad5-abd4-d82ba3a54ef2.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 194.234.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:7b:8a:00:5d:38:b6:ac:a9:1b:69:b8:85:3e:59:dd:8a:98:30:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=fdfea808b5d0d4adacfde26f40e94e516f07dcb9ffc5a7c4b42730bf0949e1dc, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:c9:b4:95:4a:cf:d2:e8:10:00:6a:6f:74:
f9:2b:e7:85:b8:2b:1c:02:a3:b9:11:72:34:72:54:
ea:bd:b3:62:06:91:be:dd:37:44:e2:63:cb:8d:d5:
75:c3:c4:0e:2c:2a:7a:c3:9b:0d:27:20:e6:c9:89:
e3:5a:19:01:48:13:8f:04:43:72:4e:e5:f3:a6:15:
3f:34:80:be:c9:f7:b2:0b:dd:ea:29:9c:72:5b:d8:
85:d5:36:db:2d:2d:2d:77:bd:63:ad:3c:0e:28:2a:
48:2d:3c:49:f2:e8:0c:25:86:6a:d5:85:37:b5:ff:
65:b9:41:9e:98:16:3e:86:d4:3b:27:0d:81:80:2e:
d8:9a:60:64:58:20:2c:ff:90:93:ca:6c:af:59:de:
c0:c6:1b:16:23:15:cb:cd:10:7b:1d:40:92:f1:0b:
49:e1:33:71:8d:76:dc:9f:00:0e:7e:78:8f:54:97:
ba:84:2b:f3:ae:0d:bf:b5:02:54:05:d4:e4:4c:cc:
a0:bf:97:6b:d5:7b:50:f9:91:67:e9:73:2d:d3:60:
d4:6b:8a:df:09:c5:eb:5b:6d:1d:40:f2:28:ca:73:
b1:5d:98:c7:54:35:c8:82:cb:d3:7a:1f:5c:ba:76:
6f:5c:f3:1d:d4:4c:03:a3:fa:bc:47:38:f0:16:5b:
1d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9F:C3:6D:16:8C:5D:30:2B:D5:83:C4:42:8B:C4:D8:58:49:50:4F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac8a54e6-9c65-4ad5-abd4-d82ba3a54ef2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.234.0.0/15
Signature Algorithm: sha256WithRSAEncryption
75:83:63:af:55:64:93:30:f8:7f:27:49:0b:b2:79:e0:9a:c4:
6a:4f:d6:e6:8e:db:70:04:28:aa:04:76:8d:ba:ea:d3:1f:0e:
05:d7:06:18:93:03:ef:7d:e4:e5:6a:fc:9c:d8:29:1c:c7:07:
ce:3a:8c:64:0a:76:06:74:bd:2c:d7:a3:5e:22:c0:7c:4b:4d:
02:ab:38:ec:8d:b3:10:5b:b0:53:01:b5:14:b4:1d:23:d0:54:
f6:8e:93:33:01:eb:7c:87:5c:2e:ba:6f:a9:6c:ed:e7:0c:45:
e0:73:5a:57:e0:93:b8:54:af:c8:ca:11:5f:47:89:1f:3d:f1:
19:70:fe:d3:7a:d7:9c:8e:2b:ca:71:db:10:0a:2c:8b:dc:ff:
e2:50:67:72:35:eb:5a:ee:2c:3a:d9:12:f9:3e:5f:a5:51:fd:
78:12:98:13:73:c9:9a:cb:42:2d:f4:6e:c2:4c:70:5e:de:79:
51:8c:13:c7:c6:41:b1:52:1b:18:14:52:26:fe:ea:0f:b7:a0:
ee:fd:3d:e8:ce:e1:9e:20:2f:23:54:52:ca:59:06:3f:1b:d4:
20:84:ec:e4:84:6d:f7:31:d8:29:7c:7e:df:19:c0:2a:d1:f9:
11:94:45:cb:da:0b:8b:a3:9a:a9:dc:89:99:1a:50:0e:ff:f3:
c6:51:8d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net