Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f98cf399-52e9-47a9-a65e-9953c8a44c49.roa
File: f98cf399-52e9-47a9-a65e-9953c8a44c49.roa (raw, json)
Hash identifier: SQRqUdmlorhKZl4n611sbGBhW6e3Us+Kr2P4sYYxMgU=
Subject key identifier: 22:13:46:F6:C5:64:32:CB:7C:5D:26:FB:94:BB:A7:2D:10:E7:98:C4
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 56DBA51C80BCC3B90823FBCCFB2389DB4D2C9A45
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f98cf399-52e9-47a9-a65e-9953c8a44c49.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 194.52.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:db:a5:1c:80:bc:c3:b9:08:23:fb:cc:fb:23:89:db:4d:2c:9a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=8bfc687543ab1e5fa043df9015a98ab959c0631546d6a4324c3c33caab520212, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:86:09:25:97:d1:05:fd:54:5a:9f:5d:e9:
b7:99:53:81:54:c2:bc:6f:2f:21:03:0a:18:20:6a:
ae:ff:a2:11:a1:75:b3:4d:53:a0:4a:38:0f:11:74:
09:03:a7:1b:7c:1a:fc:a9:1b:31:46:86:50:92:17:
4e:1f:bf:48:a5:92:94:94:e9:ad:c0:53:ec:33:06:
30:72:ca:51:e3:4b:1c:d0:ae:c9:a0:59:62:4b:31:
3b:b9:cd:0a:43:76:f1:f7:36:fa:ec:15:b2:d6:76:
87:0f:6e:f7:a1:05:80:73:ac:ef:d3:1e:98:20:53:
28:b6:ef:e7:e0:c8:5d:d3:32:bc:e6:a0:04:76:fe:
72:e7:12:6b:56:ee:ed:08:f1:95:d5:26:35:e7:a5:
49:e1:22:1c:7c:61:f1:dc:6a:e2:00:04:94:ba:b6:
ea:a7:3a:8b:45:86:4c:cf:5e:37:b0:39:26:0f:3e:
82:a4:33:98:a6:49:c7:60:65:84:99:ae:9a:a8:9e:
24:9e:24:ea:cd:51:f6:bb:a6:cd:60:98:67:d2:fc:
88:33:fc:36:64:1c:1c:c0:8c:85:fd:d0:d0:ac:2a:
75:9b:78:44:1a:74:c8:ae:d5:2a:6e:03:34:b8:29:
95:d8:46:ec:4f:b8:4f:72:93:fa:6c:0a:1e:24:37:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:13:46:F6:C5:64:32:CB:7C:5D:26:FB:94:BB:A7:2D:10:E7:98:C4
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f98cf399-52e9-47a9-a65e-9953c8a44c49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.52.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b5:cf:7d:e4:86:67:68:dc:4c:61:e1:b1:43:a5:9c:0d:e9:5f:
f3:e5:d6:c7:4a:2e:3f:2c:04:97:28:45:75:06:52:a0:ca:2c:
2e:9e:22:6a:cf:e9:b5:73:ce:89:a1:28:ea:c9:08:e8:64:a2:
51:7e:ab:0e:0b:3a:2f:1b:79:a7:00:01:6d:7d:8d:11:1e:8b:
22:8a:01:b2:f3:c2:ed:fa:a0:f0:95:98:18:c7:40:74:42:e2:
2a:f9:b6:4e:89:d6:98:ec:dc:4a:9a:8d:67:8e:a2:4e:ef:05:
e7:f4:3c:7f:cc:71:89:cf:49:5c:96:f4:d1:8a:bc:8c:da:63:
96:61:a6:a2:ce:89:3d:c2:0a:2e:5d:b6:bb:8a:3e:8a:f3:01:
de:9c:d9:48:84:47:4e:11:3e:e5:71:4b:02:8b:ca:eb:5a:99:
d8:6d:d0:62:0b:0e:b8:94:ca:06:0a:df:76:e3:93:28:fc:10:
b3:08:70:da:99:b5:6b:76:9f:64:f6:72:ff:59:a7:43:7c:d9:
9f:7b:91:b3:6f:16:d4:1c:4b:d5:3a:d4:49:8e:9c:34:6d:b9:
ee:52:36:72:a0:d7:8f:dd:38:31:ba:31:c0:d6:81:74:62:5f:
1e:00:29:04:b7:d4:2f:92:ff:76:d6:c6:d6:79:a5:0b:16:3f:
00:5d:ee:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net