Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ae8b3a5c-eb14-4f76-92b9-a9b43a7b8aa3.roa
File: ae8b3a5c-eb14-4f76-92b9-a9b43a7b8aa3.roa (raw, json)
Hash identifier: WGnp4k2GBWg/EhjBn399imX2CR+RsdvyRbsdbTQNUFc=
Subject key identifier: 97:2F:C8:41:A8:51:BE:82:03:DF:9C:9A:67:A3:4E:74:36:D8:9C:26
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 24085149C843BCEE2894C7E825D86F8879955BEC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ae8b3a5c-eb14-4f76-92b9-a9b43a7b8aa3.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 57.104.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:08:51:49:c8:43:bc:ee:28:94:c7:e8:25:d8:6f:88:79:95:5b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=3c450123cc71abb2dd896bf77bd7000ab7a36b55a206cec5d48ba8bfbd24003c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:03:90:9c:3d:01:60:93:b7:af:73:fa:a3:
be:0e:1b:8a:6f:ca:97:e6:bc:2f:1f:87:f4:78:c6:
46:7b:99:55:49:c0:54:4b:dd:a4:f3:c0:45:ef:1b:
0b:31:8b:10:ba:9a:6f:33:fd:08:58:25:f4:d0:c1:
5f:60:76:46:28:81:ae:9b:a3:e7:bc:66:3a:6e:8f:
59:ab:03:b1:79:d0:50:23:8e:16:ee:63:9d:52:03:
ab:d8:48:fe:ba:42:ae:22:93:b4:0a:2e:23:f1:97:
fa:ef:e9:37:83:b1:c2:68:2a:d8:50:a1:02:1f:19:
0d:0a:c1:7a:40:97:f9:3d:b7:37:2e:49:6b:77:e9:
cd:13:e0:ab:58:0e:fe:4c:02:59:1f:10:c7:65:7f:
54:09:df:90:cf:12:29:9d:f3:9f:25:32:ea:97:10:
0c:b3:ea:74:0d:29:87:3b:7e:4c:bf:1b:84:cb:5f:
32:46:32:df:5d:65:3e:f4:39:93:19:ce:f4:c8:e9:
49:d7:97:1f:08:5f:e7:f2:d4:67:d0:ec:e6:bc:77:
f8:95:ea:66:33:9c:45:36:4a:f7:f6:5a:00:63:05:
94:11:20:9a:1f:df:27:4f:b1:09:ee:1d:a1:94:c3:
6b:70:08:99:a8:6d:5b:ce:7b:90:fb:f0:16:16:65:
65:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2F:C8:41:A8:51:BE:82:03:DF:9C:9A:67:A3:4E:74:36:D8:9C:26
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ae8b3a5c-eb14-4f76-92b9-a9b43a7b8aa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.104.0.0/13
Signature Algorithm: sha256WithRSAEncryption
5e:de:dd:08:59:72:6c:55:88:fb:a3:e2:33:a2:4e:8d:14:0d:
77:de:4e:44:1d:c4:49:d3:15:44:8d:d5:e5:39:c0:6e:76:f4:
b6:13:00:ad:30:99:51:ca:73:67:3e:f7:f5:24:cf:18:5c:a8:
15:e2:31:f2:b0:cb:d3:34:59:6a:43:2e:70:08:34:a1:bf:b9:
ad:aa:e4:8e:81:76:73:27:ee:34:27:9f:43:25:30:0d:05:0d:
b3:58:89:53:c1:d4:b7:cc:08:f3:29:d6:b8:46:19:8b:be:7e:
99:56:42:64:5e:7e:06:3a:b7:09:3e:2a:fd:53:7b:8a:3b:34:
a0:6f:88:69:13:96:34:fd:e2:7c:38:89:3e:81:cf:d4:a6:88:
2f:ad:e1:68:ed:3b:68:47:c9:00:0c:f8:10:d4:46:df:0b:ac:
dd:4d:80:18:f9:5b:cd:d0:5f:7a:8e:db:57:2a:3a:3b:49:fd:
88:ae:b2:a7:6c:20:46:93:3b:06:61:dd:db:7a:76:f1:d7:8c:
3c:4c:e8:30:db:9c:7a:cd:f6:f0:46:b6:ef:8a:b9:60:61:59:
29:2d:de:55:18:a1:f4:a2:75:47:7f:c3:cd:44:0b:7d:0a:83:
a9:77:e0:54:bc:e7:d4:e3:50:75:71:21:48:c4:22:71:dc:e4:
91:a8:67:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net