Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f2663f97-3b6a-42cf-aecf-39cdbb344d60.roa
File: f2663f97-3b6a-42cf-aecf-39cdbb344d60.roa (raw, json)
Hash identifier: cybdBaXJECOVdcrm9c1PoD1GumdQF9E5jDlsTk9Z2lM=
Subject key identifier: C7:2B:07:6E:48:8C:25:49:60:83:39:A8:63:71:F3:3B:78:84:A7:72
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1CB0D3FB6AED748B1B61480FA56D98807CC737A8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f2663f97-3b6a-42cf-aecf-39cdbb344d60.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 143.65.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:b0:d3:fb:6a:ed:74:8b:1b:61:48:0f:a5:6d:98:80:7c:c7:37:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=03f3c8ab4d521a55931e2de75a3aa066d0cf2df40e126fbfcae33e47b11c8920, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e2:12:2e:ef:05:b7:cc:ba:7d:07:e4:6a:d6:
69:d9:f4:72:02:37:d2:01:7f:2f:eb:04:6b:a5:82:
ee:93:f9:78:6d:f6:0e:4f:03:ec:5e:44:7f:1f:ec:
ec:c1:a5:0c:a0:53:f7:01:ba:6d:67:43:00:f2:7c:
cd:57:6f:05:45:65:7e:ba:fe:81:10:56:4b:e9:5a:
79:91:40:82:85:2a:3a:82:f6:d7:5a:08:c5:d1:21:
84:e6:03:17:22:47:3c:f7:c5:6e:e5:9a:ee:2e:01:
ee:6f:67:54:43:9b:00:83:3b:00:95:af:a8:01:15:
cc:b3:ba:cd:ed:0a:ae:7e:64:71:0e:48:cb:7f:43:
7c:22:87:55:30:dc:05:44:10:43:46:e3:43:b7:82:
8a:61:30:b1:36:21:3c:ea:93:9e:5c:59:dd:9d:26:
af:52:45:7a:5e:02:98:27:17:53:44:51:41:46:2d:
69:2d:b4:78:b3:9a:74:91:1c:aa:9d:26:f5:98:50:
e8:2e:d5:61:ab:f9:c9:a8:d9:a1:ab:be:95:20:95:
44:d2:c1:9a:fd:f5:91:b0:3b:ca:c6:2c:84:ee:8e:
aa:a1:bf:cc:2c:d8:e8:fd:bb:5d:f5:db:64:b7:4f:
af:47:44:54:d5:42:f0:a7:87:7c:b3:3b:6e:c1:1b:
4a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2B:07:6E:48:8C:25:49:60:83:39:A8:63:71:F3:3B:78:84:A7:72
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f2663f97-3b6a-42cf-aecf-39cdbb344d60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.65.128.0/18
Signature Algorithm: sha256WithRSAEncryption
b9:ea:9e:ac:f7:75:74:eb:f6:99:76:cc:d3:17:57:d9:4d:61:
9a:52:f9:ad:fd:dd:0e:92:7e:2a:c0:6a:46:e5:73:36:c4:7c:
ed:40:5f:7d:2b:b9:41:ff:0f:c1:f4:56:ea:80:08:78:78:81:
a7:a0:09:ed:58:69:80:e1:32:43:99:b1:0c:50:e6:13:c7:24:
17:8a:22:08:e5:6a:ed:65:48:8d:12:52:55:f0:2b:69:52:e6:
f5:80:69:d3:fb:ba:e1:29:08:12:c7:e1:42:de:76:f9:03:7a:
88:b0:44:2a:59:42:67:1b:53:77:91:56:1f:21:d5:ba:c6:91:
05:f0:8b:94:32:a2:a9:f2:25:a4:91:4f:9a:2e:25:8b:bd:3d:
e6:77:06:60:cf:ac:6c:5c:d9:80:62:d6:35:c7:b5:16:cc:73:
8a:39:bb:26:60:1e:bf:6b:df:8e:64:f7:c8:7b:2b:24:05:87:
a8:2b:45:87:6b:6e:ba:f3:75:e6:d3:cc:e7:8c:09:41:8c:76:
72:19:52:af:4c:68:ea:76:22:7e:c5:c3:d7:b9:7b:34:41:37:
00:37:23:18:8b:25:57:65:07:fe:95:c9:5f:d2:27:ec:ab:e0:
95:b5:d4:92:75:b7:13:66:3f:c4:c8:f0:c6:4c:e6:e8:14:97:
64:66:8c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net