Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d0b0abfa-80be-4dbb-917e-af17d5ed9db9.roa
File: d0b0abfa-80be-4dbb-917e-af17d5ed9db9.roa (raw, json)
Hash identifier: Xsww1Ro31MJRph2gj7zDEmcxKVaZIj44iP9RUhAygps=
Subject key identifier: CA:00:54:2F:8B:9C:C7:67:FD:50:DE:22:79:92:3A:6A:2C:29:D4:52
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 595853E6B16FB3A4001C2C2A79DBD8C3745C95D5
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d0b0abfa-80be-4dbb-917e-af17d5ed9db9.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 57.104.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:58:53:e6:b1:6f:b3:a4:00:1c:2c:2a:79:db:d8:c3:74:5c:95:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=b1f6cd2c4840bfcae504a096b547f9fcb5e548cfa6215884fb00d02da2a6b79d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:85:19:e1:1f:ae:a6:e4:19:5e:13:cf:97:dc:
9d:f7:2f:d2:16:a2:7a:03:f6:06:17:0f:7c:df:21:
be:b1:f2:73:f0:b9:5d:84:79:ef:8a:6a:19:11:11:
91:e0:be:69:d9:92:26:d7:4d:51:97:99:71:76:2d:
c4:3d:6a:49:36:5f:f1:76:61:e8:a1:0b:ff:61:7e:
0d:18:ac:d0:c3:cc:14:7a:56:d7:a9:3d:82:74:ed:
59:0c:9a:a1:30:71:d6:a1:84:56:45:e5:29:a1:66:
76:52:32:e4:33:3a:d6:3b:dd:81:bb:fd:ce:f9:6f:
fb:ef:da:42:55:82:6e:77:e5:6b:aa:6d:92:27:df:
93:a0:4d:a7:1d:d0:4d:00:4f:ed:8b:4c:0f:c1:b5:
2f:bb:7f:45:28:7b:8c:43:bc:31:ce:5b:44:93:99:
a4:3f:fa:23:aa:d7:02:70:de:75:50:99:3a:54:0b:
c7:da:a6:92:e3:34:0a:64:18:37:7b:11:46:88:93:
57:d1:20:2f:a2:aa:40:43:b6:4a:03:22:7f:44:df:
11:51:d8:cf:cc:83:e1:92:2c:72:36:74:06:40:35:
c4:e9:04:d0:ab:a4:b5:f9:80:bc:ca:bf:e9:4a:50:
42:e0:ff:92:23:b3:01:2a:94:37:7d:40:14:d1:1a:
09:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:00:54:2F:8B:9C:C7:67:FD:50:DE:22:79:92:3A:6A:2C:29:D4:52
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d0b0abfa-80be-4dbb-917e-af17d5ed9db9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.104.0.0/13
Signature Algorithm: sha256WithRSAEncryption
4e:6a:a8:0f:09:87:42:da:8f:78:6c:e1:4f:8f:88:f1:62:86:
ea:4f:9f:01:e1:bd:7c:15:28:6e:e2:85:b0:c2:04:b3:7e:6b:
38:ef:39:95:0b:63:d7:78:0f:f5:78:96:d7:e0:13:23:52:1d:
8a:84:45:9f:d5:6f:20:55:2a:03:f8:fc:00:1f:3a:74:93:ff:
f2:4e:1a:d2:a8:e3:10:44:e1:4b:78:c3:69:aa:fe:57:5e:d2:
9a:05:b4:ba:96:3a:d9:b8:82:da:66:ad:3d:ab:2a:2c:7f:ac:
88:96:5a:9d:7f:1e:96:81:87:1e:fd:9c:92:f5:d5:7c:ea:0f:
f0:73:12:9c:87:c6:af:3d:6d:5b:a7:89:cf:71:19:69:27:29:
d8:bf:19:01:4c:e8:04:ed:61:c5:ac:2c:e0:b8:4c:6e:bc:18:
e5:d3:6a:ae:95:78:4e:e4:4e:47:93:7c:56:e4:d7:e4:f4:a3:
46:ab:6c:3e:84:24:d3:60:68:28:fb:34:20:9b:6f:dc:88:38:
91:64:4e:5f:1a:54:cd:81:38:84:71:49:4b:2c:20:65:bd:5b:
c5:69:af:13:fd:b7:4f:22:a5:76:36:97:a1:31:15:bf:4c:e3:
0c:4e:d7:40:11:4c:0e:56:9c:3d:0d:9a:fa:31:95:d8:e4:05:
86:e0:13:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net