Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e67aa02e-14fe-407a-af20-23ff2c0cfc23.roa
File: e67aa02e-14fe-407a-af20-23ff2c0cfc23.roa (raw, json)
Hash identifier: IVfVLrefy0GUvJuBGACCSvlhBz+Wt8tx8/FHpLHf9Vg=
Subject key identifier: 60:FA:13:21:E2:21:C7:94:7B:AC:F9:FF:F2:A7:8F:ED:F2:54:28:23
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5CAB68A0335C96C4BA5A0A42F3372F2E85067D86
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e67aa02e-14fe-407a-af20-23ff2c0cfc23.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 193.218.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:ab:68:a0:33:5c:96:c4:ba:5a:0a:42:f3:37:2f:2e:85:06:7d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=4d5f82ccfaf814ab3b0d18fe4d49f932401052e65175ed5d32aae0d2603ff609, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:38:c5:a4:fb:e3:6a:c1:a1:78:fa:11:d0:a9:
d2:fe:3b:32:08:53:fb:2d:cf:dc:e3:04:3b:6e:c3:
5a:6e:3c:7c:43:1d:a0:23:66:03:6b:d6:3b:ca:8d:
40:da:f3:d4:c1:c8:1c:38:93:d9:bf:26:04:d6:ad:
af:d4:59:9f:71:44:4c:b3:d5:67:70:e7:53:ea:78:
d2:9d:df:73:58:4f:f3:4a:31:4e:ff:56:46:81:98:
fb:1a:94:42:76:67:67:de:a6:88:50:09:1a:5d:db:
b1:3d:96:33:9e:9a:ac:3e:7f:9f:ea:2a:02:06:2e:
80:ef:14:ea:64:d4:f7:d1:75:2c:9f:df:d9:94:2b:
8d:7b:2e:31:f3:d8:79:de:25:d9:7d:6d:93:77:ee:
11:c8:da:15:e7:8b:d0:25:73:2d:64:47:82:ff:b3:
b3:90:34:1d:38:62:c0:a5:81:5c:b3:19:11:73:b3:
92:a0:c7:18:c4:2a:52:67:0c:36:14:56:05:e5:26:
2a:c9:1d:75:fc:15:32:e7:9a:08:ad:18:c3:ed:14:
57:d2:18:10:b4:0f:38:27:6c:31:83:39:2a:6d:7a:
82:94:24:f0:4a:47:a6:50:71:3f:b5:1c:6d:46:09:
a7:d2:a7:e3:05:7d:9a:4c:76:89:04:49:c8:e7:df:
83:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FA:13:21:E2:21:C7:94:7B:AC:F9:FF:F2:A7:8F:ED:F2:54:28:23
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e67aa02e-14fe-407a-af20-23ff2c0cfc23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.122.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:cf:39:57:72:1f:5b:8f:9f:6f:b6:5b:47:10:00:46:81:c8:
8c:3d:7e:df:a9:e8:d0:ae:35:03:01:1c:d1:21:71:0a:a2:d2:
63:1d:5a:89:47:dc:da:5d:99:00:c0:f0:e3:de:f4:c0:bb:7f:
a7:9c:30:9d:63:ef:5e:d2:af:06:c7:a5:82:b1:81:d5:13:9c:
06:b4:b2:36:f5:d7:57:24:9e:17:e7:fd:55:54:b7:b4:20:20:
dd:27:8b:19:0f:48:33:f1:43:60:2f:0f:f7:1c:74:6d:52:97:
b5:a5:d9:96:cc:0f:4c:9c:50:9e:26:eb:5f:f5:d1:55:31:0c:
99:bb:98:9c:fe:ed:ee:df:d7:aa:9b:a3:c7:8e:0f:6b:d2:22:
36:ba:1f:63:3e:74:ea:da:75:77:4f:a3:e4:e7:a7:52:7c:03:
08:b5:23:66:bb:f8:70:22:06:cc:d6:9b:0c:53:0b:f1:a3:70:
48:3b:cc:e3:44:bf:b1:8d:a2:aa:1c:7d:c9:7f:c3:81:f2:fb:
23:b4:25:e7:f3:35:18:91:61:60:f0:5a:6d:a0:16:f9:59:7d:
50:47:2a:15:01:94:62:f1:dd:ec:aa:ac:90:58:52:57:7f:01:
43:42:b2:16:fb:55:19:34:86:d2:d7:4f:bb:e5:ed:93:57:2d:
88:4c:9d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net