Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d9f56b92-7135-4c68-941d-3d63aa91ee36.roa
File: d9f56b92-7135-4c68-941d-3d63aa91ee36.roa (raw, json)
Hash identifier: zVMxhfrlrvJHwoZjphV7DntDmHSAk0BwZduK1lW8Fzo=
Subject key identifier: B3:18:CF:BC:2A:2E:E9:45:55:C5:74:36:11:7A:D4:ED:25:31:CC:39
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6961190DE2FA1867FF5F87162CFD5FEDA9FFD962
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d9f56b92-7135-4c68-941d-3d63aa91ee36.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 57.65.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:61:19:0d:e2:fa:18:67:ff:5f:87:16:2c:fd:5f:ed:a9:ff:d9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=f52edfc50540a6930c27fc047ed61f51e7018744a55984c1fea0d4cfb5bffaa1, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b0:ab:b3:59:40:5a:6b:c3:94:76:ba:dd:84:
2f:7f:b1:38:48:34:7f:84:fa:03:76:5b:a4:1e:5a:
3c:ec:ab:7e:c9:9e:f3:0d:c6:62:67:8d:b3:80:4a:
98:56:12:13:ae:ab:67:69:e0:43:a7:b4:71:f9:b1:
62:05:44:b9:f6:a6:8d:9f:7a:dd:1c:76:75:13:81:
a8:a1:d6:5e:62:81:53:97:53:34:f1:8b:51:50:c1:
38:36:64:36:36:44:32:8e:5d:a8:88:f8:d4:0e:c3:
c5:1d:99:e8:a1:8f:38:55:cb:86:e9:86:06:77:f8:
c8:63:97:18:14:8c:93:2f:c2:17:83:c6:62:6e:a6:
cc:db:0e:01:ac:24:6c:04:5f:cd:74:80:5c:b3:3e:
49:82:44:a6:73:4c:f6:31:72:0b:a1:31:73:be:c6:
aa:cb:d5:d9:c9:24:93:36:c9:65:99:b6:9e:92:9c:
a8:89:9f:aa:5f:92:b7:0a:ad:0c:16:e4:8e:5e:aa:
62:37:df:b8:23:89:dd:35:3e:b4:e2:6c:73:f6:65:
b2:59:42:09:85:46:b6:dd:b9:06:1f:91:bb:64:19:
f6:35:96:d0:a5:46:ae:c1:ba:93:e8:57:2f:0b:b6:
0c:2a:da:58:a8:d6:15:f4:fd:4e:96:f6:87:68:06:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:18:CF:BC:2A:2E:E9:45:55:C5:74:36:11:7A:D4:ED:25:31:CC:39
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d9f56b92-7135-4c68-941d-3d63aa91ee36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.65.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:61:25:98:69:8b:8c:18:b0:33:99:e3:ac:2c:63:ca:bb:fa:
1e:df:15:02:42:e0:59:25:82:c3:3f:27:8f:45:bd:fa:eb:3a:
ea:72:37:65:a8:6a:07:d4:c7:07:c9:18:47:83:db:24:b7:da:
d8:66:24:e6:a7:c4:46:a1:91:e1:ef:e1:60:df:f6:41:08:e8:
d5:21:3a:e4:87:7a:76:9f:08:d3:71:ab:0c:8e:1a:4b:50:bc:
0d:b4:c2:b6:85:7b:7c:93:09:33:4f:d4:eb:39:ce:14:c6:a8:
95:f1:0c:2d:39:e4:74:d2:88:72:2c:24:4f:24:ef:4e:27:1a:
f3:87:cc:2f:23:9c:6f:2f:8a:51:55:b5:f4:15:77:8c:2c:7d:
d4:e4:e5:e5:16:b1:82:86:5d:c1:eb:e5:63:5f:ab:ea:96:79:
19:29:e3:5a:d5:95:1d:5f:bc:62:a0:df:cf:56:95:bf:5a:11:
69:31:3e:de:9a:75:2a:dc:db:b1:b8:db:37:08:51:ef:76:a7:
06:19:b8:11:2b:a2:9c:2b:d8:42:20:af:89:83:b7:0b:2a:6b:
8b:8f:1d:85:26:e2:ed:3f:76:00:b6:95:bb:16:83:cd:ae:aa:
ff:90:7c:d4:99:07:c2:fc:80:cb:a6:e8:0a:ef:ef:d2:3f:12:
d6:fc:3d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net