Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7b457542-f2de-44e5-aa2d-266e91992a29.roa
File: 7b457542-f2de-44e5-aa2d-266e91992a29.roa (raw, json)
Hash identifier: 1u8l4fgfPLB8OuGR/q3ttf0wje2WZT3F5vpTbSlo2p8=
Subject key identifier: DB:84:59:25:91:92:C4:D4:48:54:7A:1D:B8:E4:EB:BE:93:76:64:DE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 510BC0545724E7AC4BA4A51E90E5C34AE151EFDF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7b457542-f2de-44e5-aa2d-266e91992a29.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:9000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:0b:c0:54:57:24:e7:ac:4b:a4:a5:1e:90:e5:c3:4a:e1:51:ef:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=a1fae4b4ce719c8517d01ba68fb18b318356112fd5dfa19fcdf0ec439caea269, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:51:b7:bf:a4:73:e7:c3:77:3d:81:d1:a2:84:
1f:1f:f8:cd:79:f3:91:2b:42:2b:5a:e6:02:0c:3c:
68:23:ba:7b:67:8a:47:b4:10:cb:50:7b:02:d3:e4:
d0:fc:1f:90:07:dc:53:41:51:23:e7:b1:f5:15:94:
d7:ec:93:96:3a:74:1c:9c:c9:5d:e6:8d:fb:b9:e9:
fc:e9:8a:0f:54:d8:d2:53:cd:f3:27:8b:38:a0:13:
1d:4c:c5:b9:8a:79:f0:17:89:58:ad:84:e7:66:a5:
df:91:aa:b5:fc:7c:dc:82:48:ec:4e:3d:2f:53:f1:
9f:2c:c3:72:03:f7:bf:91:56:60:4e:69:82:61:be:
04:87:98:19:76:86:f4:29:bd:de:b0:3f:bd:43:d1:
c5:8d:8b:31:7e:c4:e9:f4:51:bf:c5:a5:24:73:9d:
5e:d8:b2:ae:c7:42:e8:f4:53:d2:c7:ff:f5:48:d0:
5a:83:42:f3:98:c1:63:92:2c:47:97:49:32:96:60:
87:5f:5c:e8:ea:8e:8e:60:7d:e9:28:31:49:35:a7:
fa:db:cc:1a:8d:d6:5d:3d:58:b7:81:2c:00:be:c1:
e3:16:99:77:27:30:ce:2f:59:a5:9e:15:f7:b0:78:
fc:8b:2a:bb:47:b3:4d:44:3a:5d:6e:36:6a:ce:25:
f0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:84:59:25:91:92:C4:D4:48:54:7A:1D:B8:E4:EB:BE:93:76:64:DE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7b457542-f2de-44e5-aa2d-266e91992a29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:9000::/40
Signature Algorithm: sha256WithRSAEncryption
9b:9e:9f:e1:d2:b3:1b:ce:80:98:0c:f3:18:26:7c:42:77:83:
0e:24:be:35:a7:9e:aa:23:e1:8b:01:1c:44:8f:45:eb:80:76:
02:b6:c1:b1:c4:33:fc:14:56:34:38:af:32:d1:42:0e:3c:c2:
45:c3:4e:a5:9e:13:38:bf:a4:80:a1:ec:a6:00:07:d4:b0:49:
eb:95:d1:80:4a:ef:54:da:a2:8a:eb:02:12:ba:d4:be:2b:c1:
96:87:80:ff:4f:eb:60:89:72:ea:30:97:ba:d5:6c:fc:ed:28:
64:85:e1:c7:05:98:94:88:57:91:9e:c5:a0:5a:4f:7c:d4:93:
a6:99:80:08:4a:be:70:41:f3:c1:4e:1d:4a:0d:2d:cc:71:b5:
ab:d7:46:94:0d:5c:f3:30:bc:0b:15:60:f1:16:82:40:d0:73:
f6:d7:d2:e5:e9:62:8e:38:79:ee:7e:a9:98:79:c8:85:27:0e:
22:14:dc:32:49:33:39:73:7f:fb:54:3b:35:08:54:aa:c1:46:
4d:9e:b5:bc:78:24:5f:9b:d3:0e:95:4f:7d:63:b8:d1:d3:f5:
e9:00:ba:81:72:1f:b5:85:39:3d:2a:cf:3c:57:1c:19:2e:c3:
bc:ee:7f:11:a6:1a:2d:c9:fb:18:ee:48:9e:85:94:8b:b4:d6:
1a:bd:c4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:17 2024 by rpki-client on console.sobornost.net