Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/adc1220c-3515-4928-b808-ab48f97a186c.roa
File: adc1220c-3515-4928-b808-ab48f97a186c.roa (raw, json)
Hash identifier: yBnvTCqS4qpUgEtXMBsimEZxwlLqj3/huHrI6c/QWNM=
Subject key identifier: FB:3A:67:A8:79:0F:8E:11:14:DD:ED:7D:12:97:AF:3B:CE:A8:FA:95
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3382FA210B7E0A8D7315A940C0FCC614E3428627
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/adc1220c-3515-4928-b808-ab48f97a186c.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 193.57.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:82:fa:21:0b:7e:0a:8d:73:15:a9:40:c0:fc:c6:14:e3:42:86:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=6e2ece18f13cdbde42224108bb7a94853efc885e045026d858a2c84e085f030e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:e2:25:20:01:8c:bf:89:2a:c4:68:c1:24:
38:9b:73:30:e3:ae:bb:62:30:4f:c3:7f:0e:2f:f6:
24:ad:98:3d:66:93:28:4c:ba:e2:d9:7e:e0:be:ac:
f3:89:98:f3:2b:20:f4:41:9f:b1:54:ea:41:20:c2:
02:47:96:8d:d0:8a:c3:ff:39:e1:ba:70:fa:da:13:
9c:85:cd:90:87:9c:a0:cc:62:ff:ae:8b:5b:33:7e:
64:f2:a9:df:92:94:93:ec:24:ca:e4:08:3b:f6:db:
b0:0f:05:3f:93:e6:ce:84:ba:0e:b1:c5:60:9f:ef:
35:c3:02:88:3e:d1:39:bd:48:56:2a:4a:2f:61:d0:
a8:5c:53:39:52:3f:a9:13:f5:c2:f0:2b:11:25:c7:
f2:db:cc:96:bd:a9:9b:d3:0e:4d:b2:ba:c1:cf:09:
86:2a:06:51:a4:60:37:cf:ff:bf:ec:f8:23:84:59:
79:b8:ae:60:c8:52:1b:55:be:84:bf:29:3c:a4:4c:
81:91:9b:cf:24:6a:2b:59:22:3d:44:98:05:16:be:
39:58:90:75:1c:b1:13:03:cf:66:53:2f:cc:d0:9f:
06:69:65:4a:a9:dd:01:41:fe:eb:63:a5:00:60:5a:
2f:65:a8:e5:5d:7e:97:93:7a:a5:af:09:c3:1b:5e:
a4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3A:67:A8:79:0F:8E:11:14:DD:ED:7D:12:97:AF:3B:CE:A8:FA:95
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/adc1220c-3515-4928-b808-ab48f97a186c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.181.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:2a:4f:ef:89:13:12:47:21:81:f0:eb:27:8e:17:5c:33:54:
4d:61:29:7e:50:62:3f:05:2d:60:37:83:79:98:a5:87:ab:92:
33:e1:88:82:65:71:8b:29:0a:7d:31:04:96:85:0c:f6:71:09:
f7:88:e7:49:87:47:23:1a:76:8e:0e:98:e7:4b:60:bc:7b:ef:
26:e3:98:15:89:e6:f1:f0:e2:85:56:b7:bf:7e:55:30:88:91:
db:d0:dd:af:21:b5:88:8b:24:72:58:af:5c:68:dc:a5:00:79:
67:d7:f5:62:e0:c5:98:ee:56:cb:94:3d:84:89:71:b5:d0:f0:
2a:cd:2c:0b:ff:92:62:ef:32:34:34:0b:a7:a6:a7:f9:06:89:
ec:c8:6a:ea:64:24:2f:34:0b:6e:d1:3c:44:4c:61:eb:54:61:
18:32:d8:5b:34:a4:61:97:d5:59:4e:a4:c7:f4:36:8c:15:3d:
9e:5a:7f:b0:49:61:29:89:c2:26:62:7f:b3:9d:fa:34:54:69:
6f:26:42:b3:19:81:8a:44:21:0a:ee:ce:35:8f:a5:9d:f1:d6:
d8:c5:0e:bd:2a:25:e9:32:0f:9e:0e:f9:8e:e2:69:a2:5a:f0:
71:29:4c:25:4a:8d:a9:b2:f0:f2:f8:c7:2e:62:1c:71:b7:d6:
71:1d:0b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net