Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15bb95ba-ebea-4e26-bf73-67b8bf6b89cd.roa
File: 15bb95ba-ebea-4e26-bf73-67b8bf6b89cd.roa (raw, json)
Hash identifier: qTHbrZZ4f3HNV/2C+eATPsPhX71yQE/q/mYic7OSt/g=
Subject key identifier: 97:93:D4:04:3D:3D:E1:05:1B:51:CE:4B:BE:86:ED:9E:B6:4A:47:03
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2F336A526453E1B7EF16C2A3BC8FFD9D0607C831
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15bb95ba-ebea-4e26-bf73-67b8bf6b89cd.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01c::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:33:6a:52:64:53:e1:b7:ef:16:c2:a3:bc:8f:fd:9d:06:07:c8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=3011e06b31581c3865303e13bb47eeb537826dc825dacfacafb1c04ba0b77253, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:a6:9f:9f:43:8e:b3:89:5c:df:4b:62:9a:
dc:8e:71:f8:86:ee:49:37:9d:97:87:86:3d:0f:19:
20:a4:d0:1e:4f:b9:75:59:58:ec:5a:8c:d0:44:4e:
e3:e7:8a:c0:43:b5:08:6a:6d:52:b7:13:b8:dc:14:
69:db:68:db:14:54:72:63:cb:ac:1c:b6:ba:6f:14:
69:b6:d0:46:d8:13:4d:8e:1f:b8:bd:4c:03:51:7d:
d2:f8:40:4d:74:5d:58:9f:fa:2d:ce:8c:27:f8:5c:
cc:6d:36:d0:f3:6e:4e:4d:e0:81:ec:3c:89:c7:ea:
25:c7:0d:26:25:11:bf:81:7e:5d:86:a4:bd:da:64:
d4:0f:55:44:66:c2:86:11:d2:48:4c:86:74:61:ab:
24:49:a0:af:28:af:ed:10:7b:a2:fa:17:b9:30:2f:
48:83:cb:7a:77:14:12:25:e2:d0:c4:40:31:66:3c:
14:06:5b:97:05:7a:bf:d2:c5:3b:eb:df:27:df:12:
15:7c:57:8a:5a:0a:0d:e4:b5:24:57:68:d7:39:60:
32:03:da:db:1d:12:b8:db:89:06:86:83:b4:c9:65:
be:2f:23:31:d6:6e:d9:6a:3c:9f:7d:e2:51:31:ba:
c8:a3:e0:68:29:5a:53:ee:c8:b0:9a:41:e9:08:54:
45:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:93:D4:04:3D:3D:E1:05:1B:51:CE:4B:BE:86:ED:9E:B6:4A:47:03
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15bb95ba-ebea-4e26-bf73-67b8bf6b89cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01c::/36
Signature Algorithm: sha256WithRSAEncryption
67:b9:da:89:87:00:35:af:ee:9e:46:b3:ee:e1:5e:58:52:ac:
e7:99:94:c1:ca:93:ab:8d:f4:21:96:28:50:5f:1b:51:8e:41:
95:af:be:ce:2d:67:46:49:d1:14:b9:b3:bd:f4:35:ff:ca:fd:
29:d5:b8:58:8a:b3:54:88:4e:9b:fa:9e:41:b5:94:95:2c:26:
32:69:1b:c9:79:b5:65:fd:d5:0b:fe:34:2a:ed:fe:43:78:8b:
48:58:29:1e:1e:da:da:a6:ee:c1:fb:cd:3b:14:3c:ef:ff:d7:
4d:cd:be:6e:b4:23:91:2c:6b:ca:7a:30:4e:0e:cd:db:fc:ed:
a3:20:b0:76:d9:f8:4e:bd:f1:13:9b:71:d4:7e:0c:fe:cf:f0:
a3:c0:49:4d:a4:8a:e3:76:2c:5b:4a:26:ec:1e:e1:f1:30:b6:
a5:eb:9c:84:4b:db:fb:20:3b:49:8e:75:9c:51:15:4c:e0:8d:
5b:32:a0:22:8c:5f:ae:85:85:f7:99:6c:0b:85:59:c0:ee:c7:
72:31:3c:c4:5c:c2:33:bd:b9:e9:21:a6:69:90:1c:68:84:6a:
1d:bb:1f:d6:e7:f0:30:07:85:c3:d5:19:cc:a5:a5:42:d3:54:
af:a4:50:37:6b:81:92:5a:2e:b5:d4:f9:25:a1:0c:69:b1:ef:
d9:44:fa:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net