Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d31002e8-d1ea-4de1-8eaa-bc6d702b98bd.roa
File: d31002e8-d1ea-4de1-8eaa-bc6d702b98bd.roa (raw, json)
Hash identifier: cxPxutBNOq7Q/FAu7K7hCq9N3ZsvxzoFGRYLzTejxW4=
Subject key identifier: F3:05:43:44:2A:6B:DC:15:BA:7A:06:29:8E:A7:F1:29:57:73:BD:2C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 019E89D1464CA99D45578CD00F179397CB60F5EB
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d31002e8-d1ea-4de1-8eaa-bc6d702b98bd.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 151.176.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:d1:46:4c:a9:9d:45:57:8c:d0:0f:17:93:97:cb:60:f5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=a87f9f350e9b0d021ed7b6138e3f6c8eec491689f9f10c45530f4835e160e0f9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dd:c9:9b:30:c2:7d:8f:ef:ea:70:50:c0:b7:
11:74:21:61:11:6e:31:08:8c:5f:46:7a:f8:e6:3a:
59:23:e2:e7:41:f7:8d:49:2c:95:98:26:8d:67:35:
1d:f6:c3:a8:87:93:2b:d1:ba:97:61:c1:d3:19:fe:
d9:b1:79:c1:0a:c6:6a:8e:ba:0a:41:9d:d3:59:fe:
20:0b:8f:db:c9:f9:24:eb:5e:9c:73:ef:58:39:23:
96:11:27:46:81:f4:74:44:8c:6d:b9:e2:9a:87:ca:
4a:81:9f:63:8e:3c:59:ce:d6:31:24:10:b7:5e:41:
78:8c:af:0d:4d:e4:35:61:b0:16:11:77:f1:fe:69:
e5:c2:17:83:5e:77:c9:dd:41:44:4b:f5:ed:b5:a5:
23:f0:8a:57:b5:a5:0e:59:92:74:47:35:16:ac:3e:
84:16:5b:0e:90:92:f0:e9:de:7a:7b:30:41:3f:e8:
e1:90:97:e9:fa:b3:d5:ba:dd:ca:5d:05:0b:c4:fd:
21:b1:0e:b0:9c:80:e1:0c:e7:d0:e4:73:ea:dd:62:
40:56:0f:6f:dc:5a:cc:b4:57:1c:36:f0:20:43:db:
15:b2:98:f5:9e:21:dd:55:f0:96:0d:f1:28:19:35:
70:86:e9:ad:fd:14:83:7c:77:3f:02:3c:2e:51:de:
00:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:05:43:44:2A:6B:DC:15:BA:7A:06:29:8E:A7:F1:29:57:73:BD:2C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d31002e8-d1ea-4de1-8eaa-bc6d702b98bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.176.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cb:79:d6:e1:09:f8:ac:78:b6:e7:80:bc:07:88:87:96:29:1c:
c8:26:14:49:8b:b7:b7:2c:65:2c:f1:dd:87:ae:2c:59:ae:b1:
9f:3a:08:a8:f7:62:d1:6e:12:5c:c6:2e:2f:ec:cb:ee:2d:e3:
ed:63:6b:c5:59:5c:e9:e0:d4:a5:cf:68:fd:ff:fe:6d:b0:c0:
91:2e:06:2f:d5:fb:12:f1:cd:f1:0b:b4:f2:58:8a:9e:9e:f6:
55:1b:0a:f2:ca:aa:4a:df:d1:40:3b:f8:fb:99:5b:fb:80:cc:
91:25:dc:5b:54:3a:f3:09:90:65:47:3b:90:e7:ae:78:95:cb:
ce:46:b7:94:da:f7:e1:0c:3e:52:82:c3:15:fa:f8:8d:88:8d:
3d:c1:1c:64:5c:8b:21:63:67:80:0b:13:f7:83:0b:da:d8:69:
2d:b5:fd:67:d3:c1:54:ea:18:4a:12:1a:2c:b0:9f:d4:fc:26:
29:df:d5:24:dc:1f:21:7c:31:f6:e4:f4:6d:67:70:8d:06:a3:
c5:95:6d:ba:92:dd:cc:87:85:48:ce:d7:f6:e5:02:68:a0:73:
7a:97:00:c7:40:cb:12:f8:99:40:c0:89:3f:fd:3d:e3:53:0a:
8e:cb:a7:25:a5:be:67:ff:e9:bd:8c:1e:9f:80:6b:10:fc:b4:
2a:90:49:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net