Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fe96f6e6-74b1-4f69-bb18-2d9aae354d8e.roa
File: fe96f6e6-74b1-4f69-bb18-2d9aae354d8e.roa (raw, json)
Hash identifier: Rcg9oS5EqsvoL7MWHstvSMCj0qzPQtDqifVLNpDiDeg=
Subject key identifier: F6:82:AE:10:42:B3:DD:B5:D1:0D:44:CF:EA:71:8C:8B:50:0A:6D:FA
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 04E5028AE26F96641818CBA753033DB4A3D4E2AD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fe96f6e6-74b1-4f69-bb18-2d9aae354d8e.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 193.57.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e5:02:8a:e2:6f:96:64:18:18:cb:a7:53:03:3d:b4:a3:d4:e2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=4f653da2fc80980541aa2bc86cdc53f917d98a45a6e123279137c12a41b9ec59, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9e:94:7d:d6:fb:9e:b2:df:14:56:68:ab:e4:
39:d6:81:d7:f8:77:04:35:52:a6:20:15:62:4a:89:
ef:38:12:c8:a2:99:cc:4f:7f:10:99:9e:e3:84:6b:
26:40:9b:ed:67:b9:02:56:5a:d7:66:78:1b:6f:54:
a3:a0:b8:5a:a7:47:5e:92:7e:97:dd:fa:65:66:70:
93:c9:f6:0c:3d:21:7c:ed:1e:93:5c:c4:0b:39:aa:
d2:fc:83:1c:3e:45:19:57:4d:02:2b:f5:98:fb:a3:
29:fc:e1:b9:e4:5f:40:03:78:78:bf:3d:16:f2:41:
0a:c8:da:83:11:39:36:77:12:eb:31:96:1e:d9:38:
12:b8:ff:1d:78:21:aa:b7:10:6f:00:d9:d8:10:78:
e8:99:f4:80:d2:39:a9:59:b8:37:2a:21:39:14:fd:
e7:ec:5b:28:a3:e6:41:7f:3a:db:83:0a:85:59:26:
dc:21:dd:83:7c:3b:ae:31:6f:07:96:fb:5b:6a:3f:
f7:df:59:c6:97:e3:c4:12:12:49:f4:50:7e:04:ab:
c6:7b:80:fe:da:b7:22:74:e5:98:dc:3c:a0:1f:c5:
4b:f8:fa:ff:80:ea:34:00:c6:0b:a4:66:91:9e:96:
b8:52:18:f4:b9:e7:c1:cf:41:59:65:b9:b2:a1:44:
ca:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:82:AE:10:42:B3:DD:B5:D1:0D:44:CF:EA:71:8C:8B:50:0A:6D:FA
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fe96f6e6-74b1-4f69-bb18-2d9aae354d8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.169.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:8e:0b:23:8e:7c:78:e5:d2:7f:f6:1a:7e:e2:4b:4e:0d:7b:
f8:0b:85:bd:20:c9:1b:0e:ba:7a:55:12:8b:8c:23:30:cc:d8:
ad:d9:46:97:42:22:b6:84:81:9d:8b:1b:c3:bf:cf:22:1a:62:
e2:03:dc:7b:d9:d9:18:82:6a:00:c4:97:75:1a:fb:5b:b9:ef:
6e:73:74:72:9f:fa:b2:bd:78:a4:56:ce:01:a8:23:45:5e:e1:
a7:b7:39:5d:86:8d:35:47:11:f6:61:cb:a4:c3:40:c0:37:09:
1e:2c:d5:a8:f6:80:12:8e:07:33:65:51:a5:a4:42:7d:73:ab:
86:cd:d7:c1:2c:24:88:71:4b:36:c1:1c:02:a8:6e:7e:8f:ab:
bb:f8:d3:81:d7:16:9e:8c:d4:d7:5c:07:27:d2:cc:51:58:b1:
71:aa:aa:74:eb:88:68:ff:c8:8c:dd:04:7a:67:ab:4c:7c:25:
98:16:1c:bb:2b:c4:03:2c:10:b0:7b:84:11:49:dc:0d:3c:3b:
07:22:ac:8a:91:c3:42:e2:8f:64:21:0d:66:b5:5f:ee:79:80:
59:87:bb:da:71:b7:db:55:c0:90:b4:72:ce:3e:de:2c:7f:5d:
c7:42:ca:df:34:c0:15:b2:ec:5b:07:cd:e7:e0:b1:0e:99:4d:
6c:bc:60:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net