Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f3b212e-99ea-437f-8284-aae55df5f2b3.roa
File: 0f3b212e-99ea-437f-8284-aae55df5f2b3.roa (raw, json)
Hash identifier: p3nmzvuMdY4jgU/vfKuOi/La4gpIHwigPlomuctJnis=
Subject key identifier: A6:F0:6B:6C:29:CB:EB:DA:36:DB:69:ED:0C:6D:51:59:C1:B8:5E:4A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 26CD08CF19A51D22D73F882C03C206A7925E74EF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f3b212e-99ea-437f-8284-aae55df5f2b3.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07c:4000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:cd:08:cf:19:a5:1d:22:d7:3f:88:2c:03:c2:06:a7:92:5e:74:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: serialNumber=888d9378ae3a9d181074d28db8ef604f23893c96e221f332b841f04db6469eba, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a9:cd:a6:06:ff:03:72:d1:13:34:a4:03:48:
ff:f0:2b:63:55:dd:86:02:e4:c6:c2:05:2e:19:bd:
1d:d8:f1:a1:5e:e3:56:ee:c4:f5:7d:1c:45:ea:6a:
d0:94:50:0e:a5:f6:8b:17:fc:a7:db:70:8e:c7:bb:
5b:df:ee:ce:cf:06:d4:89:17:5c:53:7d:43:0e:b1:
d1:78:1b:8a:af:90:16:22:23:7e:60:a7:c5:56:5b:
dc:5a:4b:b4:36:a1:fa:1b:c9:e5:73:7f:bb:ff:7f:
38:69:34:3c:fa:30:dc:f4:a6:1e:48:aa:6a:07:53:
63:b2:f1:ca:3e:b4:50:44:03:af:25:3f:91:af:09:
00:c1:b2:12:5a:c4:ad:32:ae:ac:bf:e3:72:24:2d:
5e:f1:8f:26:e5:ea:c4:64:14:b3:0c:bc:6c:f2:a8:
8b:14:90:cd:a7:4d:14:9a:81:0c:6e:0f:61:75:a1:
42:45:dc:58:b2:1e:71:21:8b:e0:e5:43:8c:48:1a:
4b:3d:57:c4:18:9e:d0:55:8a:d0:0e:06:6b:9b:0c:
95:a3:e3:cc:9d:df:c5:93:7f:62:35:d1:5e:0f:0f:
9e:e3:cf:11:9d:11:a6:18:c1:72:d8:53:9c:62:1a:
c7:95:5e:c1:9c:62:16:08:3b:42:be:54:e9:4c:87:
93:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F0:6B:6C:29:CB:EB:DA:36:DB:69:ED:0C:6D:51:59:C1:B8:5E:4A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f3b212e-99ea-437f-8284-aae55df5f2b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07c:4000::/40
Signature Algorithm: sha256WithRSAEncryption
5c:4f:d8:3c:fa:f0:26:06:25:e3:c0:f5:10:78:5e:d1:b1:38:
6d:d9:b1:42:74:7e:ca:03:bf:3c:db:ea:df:2f:24:cd:e9:c9:
0c:e1:98:9f:b1:d4:5d:02:46:80:31:98:31:89:c9:23:29:99:
d7:24:17:86:4a:0f:fc:48:bf:b5:97:2e:d9:c7:ff:76:f6:e0:
ac:a3:24:55:a1:09:d4:86:69:fa:bf:4a:de:4a:ae:e9:b2:cb:
50:2b:38:62:89:1d:61:d2:48:0a:a2:55:4d:92:91:51:d0:34:
27:e8:a3:ca:80:f2:48:ff:ab:3c:cc:cd:27:04:58:2a:88:42:
8d:c8:a4:c5:57:1f:5d:28:0d:23:72:50:69:dd:d2:76:3a:15:
cb:b1:91:82:88:bf:d4:3c:9a:11:7b:ce:ae:63:34:b8:7e:c9:
96:cb:0e:cb:ac:8e:0b:4c:af:f7:21:32:de:05:e2:40:3e:0d:
54:a6:01:30:84:79:2a:ea:17:69:d4:1c:40:f7:d0:56:8f:ca:
cb:24:6b:cf:00:12:23:cd:c6:bb:69:69:60:d2:c7:23:74:a7:
0c:1c:03:c8:08:bd:fe:f5:9b:b4:ef:38:74:42:49:1e:8e:39:
cb:0d:36:08:02:87:54:10:f1:05:d2:de:cf:eb:ee:2b:bc:a3:
61:ed:e9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net