Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ef1a032c-6b4a-4f4b-ac0e-89624058b38e.roa
File: ef1a032c-6b4a-4f4b-ac0e-89624058b38e.roa (raw, json)
Hash identifier: CNnnnh6qsF+u9uF9vXvOAHC8RwMolcdP0eDlAwxGA4s=
Subject key identifier: 69:C5:FA:05:CF:67:FE:03:33:57:65:02:1F:C8:D7:72:14:1E:69:80
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2979277F17B22A8F8BC2E9B0CDF45541BD2D2EAC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ef1a032c-6b4a-4f4b-ac0e-89624058b38e.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 195.119.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:79:27:7f:17:b2:2a:8f:8b:c2:e9:b0:cd:f4:55:41:bd:2d:2e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=0313c7ce06c61338f9a3c9a09e70652709c4992fab4e42776776659ace6a27dd, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:6a:e7:96:99:a1:69:86:71:5b:ed:c2:69:
e5:f7:e2:df:4a:b3:4e:f3:78:25:05:cd:36:1d:ba:
02:68:0e:d9:24:a0:f5:09:a3:9b:ed:b4:7a:5a:c4:
a9:75:c4:9b:56:3b:f0:53:2c:ca:43:9c:a2:ff:d5:
b6:a3:2f:09:73:58:c2:da:6f:d0:00:94:64:28:55:
c6:f0:59:25:7e:16:c0:b6:94:ca:5e:80:c7:bd:b0:
60:a1:d7:03:51:c0:2d:1a:f4:78:e1:8b:4a:a4:6d:
d9:95:4f:10:57:23:04:f3:77:af:01:00:df:6c:b7:
38:20:1e:4d:04:5b:0a:bd:51:bb:b1:f2:fc:57:3b:
1a:81:61:9e:5b:f8:e8:9d:99:7c:84:8e:b0:95:ed:
f0:0c:ab:90:8f:af:64:3a:07:c2:0b:f3:a4:ba:81:
5b:43:5f:89:1a:8c:35:01:f8:fe:64:eb:52:b7:86:
7b:33:5b:5e:67:75:bb:cf:0b:73:1b:e2:4f:67:5d:
da:f1:64:a0:65:62:37:1c:d8:6c:b0:cf:65:92:0e:
4f:02:e7:51:6b:2b:92:a2:eb:87:9d:c9:f7:ba:f4:
6f:1f:5d:29:94:5c:96:c5:9b:1f:81:42:68:4a:f2:
f5:f2:4b:bd:be:fe:69:9c:ae:d1:77:63:77:3b:d3:
5a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C5:FA:05:CF:67:FE:03:33:57:65:02:1F:C8:D7:72:14:1E:69:80
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ef1a032c-6b4a-4f4b-ac0e-89624058b38e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.119.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:16:b8:c7:6c:99:e4:ba:c7:03:55:ac:72:e9:a7:ba:f5:fe:
bc:9c:ff:94:18:9a:34:e5:9d:65:1b:6e:9c:c4:4f:bd:93:8b:
51:fd:16:ad:da:84:f8:13:68:72:a8:e2:90:0c:74:a2:ae:63:
32:16:af:82:af:25:9b:5d:ab:2b:cf:ed:3a:2b:67:28:4f:2d:
e0:82:3e:c7:5e:16:97:b5:f8:af:9a:2b:91:47:85:27:ff:d0:
1d:08:4e:70:57:84:d0:41:d3:e7:f0:c9:c3:a6:37:7b:ed:fa:
eb:6d:28:6f:90:f5:18:bc:4d:ed:f3:bc:0c:6f:2d:36:e5:70:
d3:16:0f:82:ed:0a:a1:30:7d:25:8e:ba:6f:10:dd:de:21:6f:
34:15:60:ff:b4:b4:e7:13:e1:a7:ce:92:82:bb:98:00:ae:ac:
71:98:8e:6f:c6:7e:66:99:73:a6:81:fe:d9:05:ca:2e:14:26:
6e:02:e1:52:c4:db:f0:cf:b4:42:ae:26:88:5d:e5:f6:f8:39:
08:5d:83:42:de:33:56:08:7c:a7:e3:fe:5e:5f:ca:cc:f1:76:
40:7d:bc:65:69:dd:7f:69:2a:42:bc:14:31:64:66:49:d1:82:
5f:5e:87:4d:7f:8d:88:65:3a:1e:34:0c:0e:62:b4:a4:cc:62:
c8:8f:fe:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net