Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b55a7d70-dcb0-4ff4-8efc-7edac63a74f3.roa
File: b55a7d70-dcb0-4ff4-8efc-7edac63a74f3.roa (raw, json)
Hash identifier: quZFKxGq/POcg/o5cYLKVzlxd7JiQ4vVoJM7WfFLCco=
Subject key identifier: 34:9A:42:A7:99:B1:B3:F5:EF:9B:57:2C:01:9C:60:06:6A:9E:E2:09
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0C8257C706A2FF3BE3FF5C078431B8A5BA546A91
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b55a7d70-dcb0-4ff4-8efc-7edac63a74f3.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 139.79.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:82:57:c7:06:a2:ff:3b:e3:ff:5c:07:84:31:b8:a5:ba:54:6a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: serialNumber=73afb91db0b1352b608e9ff5163c0edc01b920a96d0e788c5612e23ac3f1aca9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:46:02:cb:83:88:3f:5c:f3:82:95:22:76:
f5:b1:8c:5a:b0:54:1e:b8:2a:95:10:f2:7f:62:c0:
fe:d5:6c:8a:fb:85:ae:27:7f:29:c3:84:34:48:78:
a5:13:b8:07:3d:0f:42:c8:0b:cb:c6:9c:86:57:d3:
bc:0f:9e:b0:43:c4:19:50:2d:66:5c:28:ea:d2:2a:
67:21:99:0a:7d:15:10:62:ad:50:8f:8a:e2:db:6b:
81:f4:c0:4d:06:5d:08:d2:67:73:e8:0c:f1:03:a3:
9d:a8:6e:6e:1c:f6:23:a3:53:f7:c3:82:19:11:b3:
3b:71:83:5c:9a:13:a5:6e:d7:1d:85:7f:2e:2d:e8:
75:d9:87:c3:64:47:fa:b7:69:56:b9:19:06:62:bb:
7a:42:33:d7:04:59:77:86:08:00:54:6a:5e:80:15:
aa:be:c0:4b:84:26:7a:d8:79:75:c3:39:89:80:60:
2f:8d:de:b7:d3:96:41:cd:1c:8e:34:d4:94:6b:5f:
89:68:11:f2:24:a7:66:29:fb:c3:53:61:38:09:cd:
77:b4:90:6e:38:e4:6b:4f:95:f8:47:67:95:d9:42:
60:58:bd:40:68:e9:d4:c4:4b:f9:29:7b:57:d4:47:
35:a6:54:aa:cf:0b:82:e9:d1:0b:41:77:6a:ec:fa:
bc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9A:42:A7:99:B1:B3:F5:EF:9B:57:2C:01:9C:60:06:6A:9E:E2:09
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b55a7d70-dcb0-4ff4-8efc-7edac63a74f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.79.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:bb:cf:d3:ce:62:83:5b:f4:34:24:6c:2f:f5:05:e1:7e:1b:
9e:df:77:c1:97:4b:f0:97:d0:88:db:10:55:57:57:39:5f:ca:
a2:34:3e:97:10:82:1d:27:c5:0f:45:41:3d:5b:28:9c:2c:e9:
06:a1:b8:ce:00:dc:90:b3:d9:41:b3:b3:32:a9:21:14:53:5b:
25:b7:5c:88:cc:13:9b:bd:61:b7:d0:4b:59:31:75:f8:69:71:
ec:80:8d:b6:25:bd:65:50:06:e9:04:69:af:1c:25:96:d1:09:
eb:63:20:4a:0c:0f:d4:0b:8e:91:87:23:20:03:af:69:77:c5:
11:87:53:99:b5:ec:23:68:68:46:07:9d:40:73:07:d5:05:1b:
e8:8b:85:4d:b8:b0:ad:17:ac:13:e5:e3:f0:11:84:dd:76:a5:
31:ca:05:d9:ea:0a:c1:1d:59:bb:53:d7:41:2d:a9:89:e2:6b:
c3:72:df:dd:80:29:76:a7:ca:3b:a0:34:de:48:65:19:d0:c9:
0b:85:0f:d2:ee:c5:be:9d:30:5f:2b:11:fc:7e:85:33:5b:e3:
bd:34:f9:af:f0:12:03:cb:ea:0c:50:71:3e:63:b2:56:ec:0c:
0c:ce:26:33:09:ba:64:98:d9:a4:88:2d:f9:73:6b:5f:b8:96:
6d:01:71:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net