Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dbd10abb-63fa-4e02-bbda-3369cb1b837f.roa
File: dbd10abb-63fa-4e02-bbda-3369cb1b837f.roa (raw, json)
Hash identifier: TvbZAegnETW/Jo9vQT5MWIfHA5r0Bdo+FFkEucCXuRw=
Subject key identifier: 1E:BE:0C:5B:55:35:2C:98:75:25:74:99:D9:85:C5:E3:55:21:64:D3
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 498712320E278B9EA3E081F134B2BB3935CB0ACE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dbd10abb-63fa-4e02-bbda-3369cb1b837f.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 143.65.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:87:12:32:0e:27:8b:9e:a3:e0:81:f1:34:b2:bb:39:35:cb:0a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=b16e728ec4b7c72c8cc7c8c864905aa9a0c9f6dca14974731486f2fcaecea0e7, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8e:26:6e:b6:59:1f:35:f5:84:c3:d7:81:42:
35:d2:48:e0:b2:80:d0:e3:f2:e9:6a:8b:84:87:f7:
fa:b4:a1:c9:d3:f8:03:6f:06:10:13:11:db:cf:b6:
b4:bc:dd:61:66:27:ff:bb:37:10:43:4b:b3:cf:d9:
9f:2f:9b:60:d5:e4:92:1a:07:49:29:3e:ad:53:77:
e2:1d:89:fd:0b:27:5b:7a:74:db:3d:6e:12:f3:de:
05:fc:5b:d8:a0:cd:fd:0b:fb:28:b6:55:66:77:dd:
21:bb:92:0a:2f:b2:91:ff:4d:8f:44:f9:cb:80:46:
26:a4:a1:77:57:4d:27:f0:14:14:b3:13:37:dd:f9:
e7:cd:07:10:b3:db:ff:7d:54:8e:b3:ed:4b:55:06:
5a:e4:50:55:b3:0b:fd:4e:91:0d:ad:44:1a:6f:94:
8b:67:4f:ae:67:43:b8:44:0d:db:75:28:87:18:f4:
79:e0:fa:87:20:c3:f8:89:2d:20:a4:1a:3e:d8:6b:
d7:97:0a:2c:89:3b:ff:31:92:bb:24:04:58:fa:68:
69:1a:60:d2:f9:e7:53:ff:0e:56:75:e8:d6:e6:09:
60:4b:48:17:c1:b0:02:94:30:78:9f:49:5c:bf:5d:
39:63:93:b5:4b:eb:2d:73:4c:b4:db:e4:f1:3f:4f:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BE:0C:5B:55:35:2C:98:75:25:74:99:D9:85:C5:E3:55:21:64:D3
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dbd10abb-63fa-4e02-bbda-3369cb1b837f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.65.0.0/17
Signature Algorithm: sha256WithRSAEncryption
26:33:29:81:7d:63:21:0f:6f:75:dd:a9:fe:8e:fc:83:74:6b:
d5:90:b1:8d:23:36:ab:06:92:3e:f7:58:c9:cf:b0:fa:f0:3a:
b4:de:0a:7e:e0:0d:2a:49:cb:dd:88:1b:f5:e4:f7:39:f3:26:
87:41:ec:4d:02:43:72:97:3a:30:f0:9a:57:7e:c8:aa:c9:4b:
40:5b:1f:3f:ca:01:a7:f9:d0:df:0e:14:80:38:3d:2a:d4:96:
c5:97:64:85:54:b6:ab:fe:c8:1c:2e:f2:44:73:4f:36:4c:38:
86:f2:70:59:52:36:73:bd:f1:e4:d2:5c:91:24:ed:97:9f:10:
2c:c5:d8:02:54:08:a0:5f:28:7b:ef:61:3d:0a:0d:3e:d4:59:
16:0c:72:f0:9e:2f:70:2f:99:92:d8:a2:5c:ea:7a:57:e1:7d:
54:25:e3:a7:35:5b:58:29:a7:6a:0d:eb:ff:5c:3e:52:23:bc:
0c:70:84:dd:7f:db:c7:d8:92:12:0e:f6:f5:2b:79:70:a8:66:
03:18:56:0d:ec:af:8f:d8:71:2e:cc:55:c5:ef:a6:cd:3a:26:
f9:9f:8d:5b:ea:55:2f:d5:79:b8:4b:80:55:3d:4a:8d:2b:3f:
01:5f:d7:c1:2f:05:36:2c:4e:a0:59:5c:47:b7:dd:f1:e1:66:
b0:19:a7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net