Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2030a8d8-88f9-4725-9c63-e7aaa9e49e8a.roa
File: 2030a8d8-88f9-4725-9c63-e7aaa9e49e8a.roa (raw, json)
Hash identifier: Ne9ucpbQ3De6Ki2LiQKeAruqYO2/OezQUzHixQ6YO1s=
Subject key identifier: 51:1E:02:30:02:D6:D5:BF:49:EE:9B:24:82:14:C5:2D:65:53:3B:4E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1C94A6C22352284940F664782533C9000CA59B34
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2030a8d8-88f9-4725-9c63-e7aaa9e49e8a.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:6000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:94:a6:c2:23:52:28:49:40:f6:64:78:25:33:c9:00:0c:a5:9b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=8da4c3ad187a8e1d4bb39523af58b4d189c7c1b5c8c4ff6d72bed37ec9dc2b8a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:b7:9d:9e:f9:00:e1:ce:88:a5:b1:e3:2f:
ed:62:06:82:f7:19:21:64:52:94:20:9b:84:b3:b1:
9c:c3:a9:68:c5:6b:4e:79:da:46:91:0a:31:d2:06:
64:92:9c:de:f9:eb:c8:5c:71:8a:9b:e1:55:bf:59:
0e:3e:b1:96:72:c5:df:c2:0f:11:5a:a0:b3:ce:8b:
82:d2:f9:e6:e2:4e:9a:a8:e5:cc:03:28:87:e4:12:
a8:0e:39:94:85:4b:1d:0e:e1:86:0f:76:f0:3f:13:
04:04:b2:2d:d1:15:2e:f7:64:ce:c9:15:07:63:b9:
c1:6d:ea:cd:66:76:a3:70:8b:b4:32:b7:06:8a:00:
a9:d0:0f:a2:23:14:af:9a:8c:75:a2:b1:82:30:e9:
11:9c:86:4b:7c:a6:4a:fa:c5:c1:4c:49:b8:09:57:
8c:f2:05:30:39:13:2c:81:ac:25:d0:cd:27:d4:dc:
85:43:38:74:4f:84:4a:68:e1:2f:0c:a0:5d:f2:e6:
60:7f:c9:aa:97:dd:6d:44:bd:d5:5d:83:5f:64:4f:
1c:80:3c:a1:ba:a6:8f:89:01:91:3f:31:3f:bb:c9:
cf:fc:4e:a5:fe:fc:45:d0:f1:3f:1a:9f:fe:22:38:
82:7b:ff:fc:47:3d:16:0c:8c:58:82:d3:bc:ba:a8:
f8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1E:02:30:02:D6:D5:BF:49:EE:9B:24:82:14:C5:2D:65:53:3B:4E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2030a8d8-88f9-4725-9c63-e7aaa9e49e8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:6000::/40
Signature Algorithm: sha256WithRSAEncryption
48:59:5d:6d:22:06:e3:59:57:d6:6d:26:65:a0:5f:29:68:c5:
77:23:95:1a:50:46:6b:9e:1f:2b:41:6a:c2:ec:07:09:49:37:
83:31:38:c6:9c:02:81:a2:c4:11:d2:a3:07:fc:cb:7c:f4:57:
a4:ef:59:89:44:42:22:9e:6f:89:81:51:35:64:b4:e5:09:d7:
09:bb:e2:d3:00:a4:54:d3:a0:4f:bd:7c:0a:e8:5d:f3:f5:b4:
1d:c8:53:d7:fa:fd:c8:ea:96:c2:4c:ac:f9:9b:d5:69:ca:12:
1c:ae:9e:ab:dd:d2:07:70:90:4e:34:63:28:92:c3:94:9e:2e:
a0:9e:1b:48:06:b6:fb:06:d3:6c:ce:3b:27:be:ef:fe:cb:63:
e1:26:e9:c2:08:77:ae:d6:62:81:5f:0f:fe:6f:65:bd:7b:9f:
a1:81:6f:d7:0e:c1:64:ac:22:cb:85:08:b0:1e:2f:7e:2a:52:
cc:2d:54:ac:5d:05:49:ca:a8:79:b5:3a:67:dd:e2:b0:4d:1b:
5d:8c:88:00:a0:d3:b0:3d:fe:b1:41:96:c7:18:19:22:cc:9e:
a2:01:6d:30:e9:b9:ee:37:48:6d:fd:c9:cd:89:f7:75:ba:d9:
a6:03:97:11:f8:d4:43:8f:1e:42:6f:2d:16:14:57:cd:98:31:
9d:fc:f2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net