Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d28f1fe0-a546-4bc4-b487-38dfedc0c67a.roa
File: d28f1fe0-a546-4bc4-b487-38dfedc0c67a.roa (raw, json)
Hash identifier: +fO8Tl1HCX1Xu6XeTaxRkiGEyvAzFXTK52PxGdOmaB8=
Subject key identifier: 23:AE:86:10:72:B9:69:DA:4B:17:79:DA:F0:78:E7:46:C1:42:26:C5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5F38ADF01E254F759B9DD058B64C9AED3C2D6372
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d28f1fe0-a546-4bc4-b487-38dfedc0c67a.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 80.203.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:38:ad:f0:1e:25:4f:75:9b:9d:d0:58:b6:4c:9a:ed:3c:2d:63:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=1ed372a1e1277288c60c7a6f089e618bae2dad2cbffc0ddf232620f7e690c83b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d4:f5:30:e2:87:9d:ec:8f:40:b5:3c:59:a4:
b7:0c:b5:ef:c9:48:b1:96:f5:aa:68:de:8b:8a:42:
c4:07:11:4d:02:7a:6f:19:ca:96:5b:5e:79:70:21:
00:41:0f:d1:62:2c:d6:8e:37:e2:49:cb:35:12:2c:
35:3d:c2:46:e4:d0:65:79:ca:c6:35:58:a4:9a:a5:
46:9f:74:10:b5:0c:a6:7f:da:09:69:64:dd:33:51:
8c:78:32:dc:1d:89:8d:17:05:4c:78:54:51:da:4a:
d8:a8:b4:87:ab:f1:90:93:d7:01:d3:c1:3f:00:83:
1a:96:a0:5c:85:6d:89:06:b1:c1:27:33:3a:8e:54:
fd:1f:b4:7d:32:f2:31:54:66:6f:6a:1f:96:af:27:
b2:46:b9:81:9b:a8:6f:73:40:9d:e4:4b:f7:aa:3a:
d9:a1:70:e6:f5:1f:61:65:ad:6d:63:3e:b7:82:ec:
5d:cd:a4:fe:48:0e:e2:45:d7:9c:72:10:77:a1:2c:
d8:4e:fb:9e:16:3e:98:7c:f4:24:f9:05:a6:4b:55:
ed:6f:ec:ea:ea:99:dc:72:8b:b3:67:82:bd:92:b1:
9b:bc:ac:e9:c1:c2:bf:94:87:40:33:72:d9:0c:e2:
b5:c7:7e:cc:50:05:6b:98:af:6d:d6:0f:18:8c:32:
99:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AE:86:10:72:B9:69:DA:4B:17:79:DA:F0:78:E7:46:C1:42:26:C5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d28f1fe0-a546-4bc4-b487-38dfedc0c67a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.203.128.0/17
Signature Algorithm: sha256WithRSAEncryption
59:35:96:c4:d1:34:44:b5:26:a8:2e:57:c6:7c:18:77:0f:4f:
2c:0c:e9:75:f4:0f:1d:68:ff:77:dd:6c:4f:3e:7d:cd:f8:a1:
1a:88:4f:6a:0e:7e:96:fb:e0:8e:d1:c0:68:ea:90:1b:9d:57:
d1:cd:7a:31:d7:c2:a2:0a:ef:c5:3f:7e:f4:ed:de:2c:c9:36:
0a:74:1f:1d:e8:cc:f9:c1:08:0c:33:2c:83:1d:64:05:e4:f8:
05:de:3b:6e:33:12:ef:b5:2a:17:a0:9a:d0:2a:77:5d:c5:95:
0b:0d:a6:cd:75:59:d5:ba:4d:93:47:e3:d1:06:bd:a0:dd:f6:
81:b2:e9:d9:83:56:a9:e6:ea:fc:48:81:45:03:b6:bc:e9:65:
eb:78:b8:9d:29:62:ba:42:51:0d:66:b0:da:fd:a8:ee:c7:5c:
8c:2f:90:47:da:10:08:4b:5b:eb:de:b2:be:e5:73:e5:d1:d8:
fc:ba:17:4e:44:70:44:0d:4d:f3:6f:d9:30:19:31:e9:52:c3:
38:4a:40:48:52:c8:80:6a:d4:80:a3:76:5a:5f:ff:ea:aa:4f:
39:ae:44:76:1b:9c:76:07:01:c1:f0:52:ff:62:bd:c3:e5:8d:
e9:7a:8a:d4:18:db:f3:5f:a5:ed:4b:47:c0:a9:1d:7e:df:c7:
f5:dc:91:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net