Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/06c271dc-5e79-4265-bb06-1d06647fd302.roa
File: 06c271dc-5e79-4265-bb06-1d06647fd302.roa (raw, json)
Hash identifier: 6JmU+WllqMJgTDRWRIwdWgXp6afVArD11FrKlg9JLAs=
Subject key identifier: CF:5F:01:31:04:45:D4:0D:91:D9:C6:00:24:A6:8D:E2:F8:A2:37:10
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 761F622D8177627B8980447FE594D8F5DC7171A3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/06c271dc-5e79-4265-bb06-1d06647fd302.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d023::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:1f:62:2d:81:77:62:7b:89:80:44:7f:e5:94:d8:f5:dc:71:71:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=f4dfb8d8d2b070fa22298b4644eb9b650cd6d7f205204f1515180c6c93c34ae4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bb:d1:65:26:22:b1:fd:7e:7a:19:60:9e:8a:
86:3e:73:88:20:99:2c:9e:2a:d2:c7:ca:95:2b:43:
bf:05:69:88:b0:d4:f9:a9:5c:1e:ca:7c:d5:ea:5b:
bb:fa:fb:e2:59:9f:39:3c:eb:a7:cd:76:98:51:5b:
96:b5:4b:30:cd:ef:9a:5c:1d:73:8f:43:d2:44:af:
19:45:0d:cd:dd:26:a8:03:cd:72:83:a4:cb:12:64:
72:0e:22:6e:6b:3a:9f:0c:13:09:7e:80:bf:7e:fe:
73:06:01:1b:8b:dc:42:b4:18:ac:8d:98:54:76:62:
93:b0:d2:81:c9:ba:45:92:88:42:3b:e8:87:49:71:
8c:5b:b8:81:a4:92:a2:77:2a:f6:63:e3:fb:d2:e6:
71:b3:f7:ef:f2:40:a8:6f:38:14:03:6e:42:7a:72:
f6:dd:57:c6:d3:80:fc:0f:3b:3d:db:a1:c2:a4:f1:
1f:bd:6e:92:f6:31:aa:0e:64:2a:a5:70:c9:32:79:
b4:90:d9:ce:b2:72:b7:0f:6a:fb:66:a0:d5:31:1f:
a2:8c:44:1b:9b:8b:cb:0f:dd:60:2f:21:da:37:cc:
11:db:e2:bf:9f:7d:e2:9e:3c:79:36:14:b6:ea:42:
e3:e9:1f:c0:2c:f7:d1:1f:74:8f:ca:78:ab:da:dc:
43:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5F:01:31:04:45:D4:0D:91:D9:C6:00:24:A6:8D:E2:F8:A2:37:10
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/06c271dc-5e79-4265-bb06-1d06647fd302.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d023::/36
Signature Algorithm: sha256WithRSAEncryption
2c:4a:dc:8c:c6:dd:ec:11:53:12:61:51:54:44:eb:6e:39:08:
9c:09:c2:bd:64:ef:39:e4:04:91:2e:95:45:b7:a3:af:17:00:
56:17:5e:ca:45:a3:7f:e5:59:95:11:6c:dd:87:6e:5d:84:64:
17:02:d8:25:45:75:1f:d0:40:3f:dc:22:7f:c4:8b:22:db:29:
96:0a:68:0d:21:38:d6:f6:58:d5:89:67:b9:4f:fb:e7:6d:e2:
3e:72:c6:20:91:ed:c8:36:fb:ce:96:81:f2:e9:1b:1f:6f:64:
c6:c4:4c:0b:5f:c5:cb:e3:cd:8f:1d:a7:21:28:59:15:83:ef:
81:dd:01:a7:4a:04:57:82:b0:40:62:c6:16:9d:1b:b8:8e:2e:
6f:6f:ea:c3:b0:ef:e3:3c:81:93:a0:37:1e:85:9a:b6:b7:81:
1a:76:34:82:2a:a4:a2:02:56:3d:fb:74:50:80:2b:4b:1f:13:
54:bd:06:33:e7:6e:21:be:33:c8:4d:09:bd:a9:f0:4e:ef:63:
41:18:59:3d:d5:77:2e:3a:8e:58:2a:1c:d1:fb:d1:54:5e:07:
dc:b9:86:0d:fb:75:53:0e:96:4b:53:f0:3c:6c:4d:68:78:45:
41:6c:23:06:bf:26:b3:fe:b4:17:64:32:68:c2:f5:7a:42:ef:
50:0b:3a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net