Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b1171dc0-a8bf-436d-9808-e316391b2b94.roa
File: b1171dc0-a8bf-436d-9808-e316391b2b94.roa (raw, json)
Hash identifier: ELgqeIp1L5yNhfRebURwxWi38bGOIk5FgvhATn5u2pg=
Subject key identifier: 2E:6E:22:D2:78:25:0F:4E:F1:FF:FD:17:81:CB:52:AF:06:3D:BC:CF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5BB7461F56124B1CA19E1CB904B0B981FA8ACD97
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b1171dc0-a8bf-436d-9808-e316391b2b94.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 195.61.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:b7:46:1f:56:12:4b:1c:a1:9e:1c:b9:04:b0:b9:81:fa:8a:cd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=9170c15392ebd368e1db28f26635aaca5b61256283c34d036d403b5318e5e704, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:98:a9:ff:c8:51:7d:fe:99:49:41:5a:22:dc:
8b:e9:dd:05:48:5e:4b:9f:55:db:d3:d9:fd:99:f1:
78:c9:73:23:d1:b5:06:43:ad:64:10:85:24:b4:41:
a6:b1:79:c0:4f:98:80:03:bd:88:d6:a2:76:86:0f:
e0:fe:c5:98:9f:5d:d4:9b:c3:e1:f6:94:e2:85:6f:
25:5c:13:d1:8f:55:cd:9b:cd:02:89:6d:3b:6e:42:
67:15:f9:fb:0b:18:15:d6:bb:b3:21:c3:29:c5:dc:
0a:fe:9b:fa:48:79:70:9e:b4:ae:5d:4c:93:94:1f:
39:4b:e4:a9:ed:58:27:ce:ff:ec:69:6c:55:6f:28:
49:88:72:4e:10:25:ef:51:43:e3:f3:4f:d0:b3:0e:
81:1c:11:c2:e6:e7:d5:4e:8a:6b:51:03:87:a9:24:
83:ec:49:c2:a4:06:a3:e3:e4:83:7f:11:d5:99:bb:
f2:56:47:c5:9c:aa:71:25:26:80:b5:3a:d9:e4:2f:
d3:94:16:c9:8c:89:0b:e7:9e:b4:cb:9d:41:82:56:
e7:63:b5:7e:50:54:ae:d6:3e:9f:8a:bc:2d:f3:b9:
1a:7d:2d:a9:03:f7:02:78:3b:0b:fd:83:06:f1:6c:
01:78:73:9f:be:1c:01:b0:66:cb:15:99:e7:16:86:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6E:22:D2:78:25:0F:4E:F1:FF:FD:17:81:CB:52:AF:06:3D:BC:CF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b1171dc0-a8bf-436d-9808-e316391b2b94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.61.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cd:ab:fd:f9:71:30:67:44:6f:1e:80:0b:e9:ce:67:80:78:a1:
31:1b:2b:11:dd:a3:53:33:da:85:c1:55:c6:7b:4b:ce:7c:34:
4c:ec:da:20:e8:7d:93:ea:3c:40:f1:83:56:ba:59:3f:3e:e9:
37:5c:48:90:dc:b6:6e:97:35:fd:30:8d:d3:7b:d4:74:43:9e:
04:bb:d8:c0:8e:14:f4:c3:af:49:69:dc:a8:ed:c2:21:8f:cd:
9a:cd:6a:f3:8a:d7:77:e6:e4:e4:ae:20:64:bc:a0:33:14:bb:
8e:a5:08:e8:46:44:45:c1:76:d4:b8:d1:4c:88:81:43:66:2b:
bf:19:5b:df:0c:04:45:83:65:a4:f8:e0:92:8a:e7:1c:f4:53:
09:97:9f:de:c8:b5:24:3f:b7:2c:9f:43:38:1d:c9:45:83:60:
7f:e6:2e:cd:4d:25:22:12:4a:e1:dd:c8:f6:57:55:b1:15:db:
aa:b3:97:ef:c4:83:d8:55:24:50:70:8a:da:b9:c3:ed:a2:3b:
60:65:1f:4a:dd:d2:10:ff:c3:22:c7:1b:26:6d:a1:8a:5d:8a:
be:c5:9e:d7:14:f8:92:da:96:83:ba:e3:e4:67:f4:49:fa:dd:
a8:76:d3:fe:7a:dd:c1:a0:5f:19:0b:05:e4:ad:a0:a6:bd:f7:
a2:d5:ad:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net