Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0405df2-d412-488a-b5ee-d265912dd3cc.roa
File: c0405df2-d412-488a-b5ee-d265912dd3cc.roa (raw, json)
Hash identifier: /RItfxu5RjvaPbfzdmbfo/sZyit31Pm3OlWn5gf4HwE=
Subject key identifier: AB:8A:B1:38:AE:2E:BA:B2:1B:D5:1A:D5:E5:CF:55:3C:68:C5:41:10
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 46DCAAC7DFE1E452256F078A76134203C8C79CF7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0405df2-d412-488a-b5ee-d265912dd3cc.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 83.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:dc:aa:c7:df:e1:e4:52:25:6f:07:8a:76:13:42:03:c8:c7:9c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=5b5afc84e25d62a6ef5ce86931af36574640cee6f3149c8122e7c8233c8ced6d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:27:4d:1f:0b:72:03:76:bf:81:9d:f4:ba:
e0:52:74:39:4b:23:e0:cf:d8:e8:c5:08:33:bf:06:
4f:1d:dc:50:96:fb:aa:1c:16:49:28:ea:14:2e:e2:
df:ea:fb:c1:0f:ca:74:5a:8b:b2:37:ac:4f:aa:94:
db:ca:38:dc:a5:0c:19:33:9b:70:2f:e4:b4:f7:ed:
38:2f:4d:bf:db:6a:f6:bd:67:e1:1b:d6:eb:34:d2:
11:5c:de:a5:4e:d3:5c:cf:44:0a:dc:bc:2f:8c:05:
cc:01:fe:66:8b:1d:e7:92:33:cd:65:33:c9:3f:65:
5d:2c:bc:22:0f:76:59:69:7e:2c:3f:65:21:20:7c:
68:fc:ff:32:d2:db:3c:b8:f3:dd:46:d3:8c:b0:da:
f2:c6:16:a6:bd:1b:42:a9:40:07:5e:08:2e:a1:b0:
c7:6f:84:d2:32:79:c4:a0:2d:10:da:ac:84:a1:21:
c2:a1:3f:82:48:a7:02:ce:04:cf:c8:6c:21:13:0a:
b7:05:8b:64:44:55:fe:07:a9:d7:88:c1:8e:9f:3a:
b6:67:c5:0b:1a:12:5d:10:84:96:2d:64:3d:4e:bb:
d4:d9:70:a5:26:c6:f5:54:39:56:53:71:0e:ce:ce:
08:2b:2b:12:5d:1b:fb:7a:9d:08:e1:20:41:b9:87:
d4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8A:B1:38:AE:2E:BA:B2:1B:D5:1A:D5:E5:CF:55:3C:68:C5:41:10
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0405df2-d412-488a-b5ee-d265912dd3cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:5c:ea:e8:bc:cc:77:ae:15:8a:d8:76:83:49:09:f9:52:f8:
2a:54:19:3d:f9:17:61:bb:aa:d0:44:3e:83:3f:d4:b7:64:68:
9c:b4:8a:52:75:9e:61:1f:d0:4b:9f:67:c4:72:07:a6:c8:c0:
ec:cf:ad:d1:18:c9:75:43:e7:94:a3:3d:60:52:73:c4:36:31:
01:3a:b6:77:37:1e:32:fb:74:71:d8:08:c9:2b:89:d9:6c:15:
5f:a5:e3:33:a1:85:a4:72:72:4d:68:11:9d:1a:d1:9c:94:f8:
0a:90:f0:ba:3f:b4:37:dd:90:9f:55:07:e2:ca:54:4c:92:22:
14:a8:79:f0:cd:c7:e0:01:76:cc:6d:ea:2c:a6:de:48:31:3f:
6c:6a:fd:82:c3:06:d6:2e:f9:6e:7f:07:61:f0:c3:b4:e3:f6:
9d:80:6c:08:02:2a:82:34:c5:62:39:c1:43:47:15:5b:74:ab:
77:8c:9c:30:5a:74:19:f7:34:43:93:82:14:78:1d:be:27:5c:
0f:c2:52:3b:31:a2:08:c6:a8:1d:6f:f3:0c:53:6a:01:90:5c:
c8:e0:32:af:ec:06:d5:cd:b5:d1:05:c5:bd:b6:b7:83:3c:ba:
63:42:29:1c:b7:71:8c:59:1c:e6:10:90:39:7b:50:f1:19:b3:
a7:ab:d2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net