Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a936626d-d488-4592-873a-b340b1b23c31.roa
File: a936626d-d488-4592-873a-b340b1b23c31.roa (raw, json)
Hash identifier: 1rdSCXfWjr1VITDbTrYxmy9JafMqUY3alZc0xB7u4RA=
Subject key identifier: CD:EC:72:8A:27:EA:82:CA:AA:73:61:43:6B:BE:A5:92:BD:E6:A1:C1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 11C008E902DF152C06AD9DEC456262C2CD1A1F07
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a936626d-d488-4592-873a-b340b1b23c31.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:b000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:c0:08:e9:02:df:15:2c:06:ad:9d:ec:45:62:62:c2:cd:1a:1f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=5f73ce8f3e84dcec402c866d3dd30e744edcd5541ef141436577685936c88e2e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:84:06:dd:a1:1f:ee:9e:62:f9:e0:6b:f5:
b7:e3:8a:6d:93:b1:56:4b:55:12:d4:06:ea:7d:0e:
c4:a4:5b:c2:76:24:56:ba:bc:6c:95:78:0d:cc:63:
b9:71:28:cc:8c:0e:df:3a:fb:16:ae:fe:e2:db:14:
6a:ac:75:bc:5d:bd:c8:3b:89:e6:38:14:90:07:62:
15:de:1e:ab:aa:97:5d:b4:6c:d2:98:dc:4a:1a:f0:
93:9e:dd:80:29:6c:45:23:98:31:2f:3e:85:aa:05:
83:ea:48:9c:eb:5f:d1:e9:df:06:7d:35:ad:c0:a4:
44:ad:be:99:b1:29:4c:a6:6b:ba:63:32:e5:cb:72:
b8:9a:8f:b6:97:84:b4:14:67:08:10:42:62:30:38:
aa:45:22:1f:36:22:3a:07:47:11:0a:26:ad:48:95:
fd:0d:08:bf:97:39:9f:14:71:ff:a2:ca:7c:a2:fd:
0f:f9:93:d6:a1:eb:e3:90:dc:ec:f4:61:7c:2a:5a:
5d:f9:13:31:02:0b:c9:66:2c:16:5d:a8:5e:1c:77:
dc:f0:ce:04:80:1a:ba:69:26:d0:6f:59:81:31:2a:
29:c7:32:86:76:2b:59:d8:b1:95:a9:55:b0:7d:1f:
9e:b3:e1:fd:90:0d:a7:6c:f3:cd:4b:b1:1f:d0:b7:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EC:72:8A:27:EA:82:CA:AA:73:61:43:6B:BE:A5:92:BD:E6:A1:C1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a936626d-d488-4592-873a-b340b1b23c31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:b000::/40
Signature Algorithm: sha256WithRSAEncryption
7a:f2:75:08:27:2b:f1:31:eb:4f:c1:1b:94:c5:1a:87:b3:5d:
7f:b8:71:01:ae:06:16:ad:6f:fa:a8:8e:91:11:9a:b6:a0:d2:
9a:29:73:bf:6d:6e:3e:51:4a:22:72:f6:6d:b9:5a:36:ac:58:
fa:f8:40:59:56:60:c2:e5:4c:2a:a9:a9:e0:ec:98:9d:5a:e1:
56:65:2b:7a:12:b8:56:7e:4b:ec:8f:3c:10:12:d5:56:4e:9f:
b4:e2:b3:a4:98:9e:4c:dc:80:83:9c:00:4a:0f:a3:16:d9:f6:
c2:f3:bb:87:06:27:e8:97:ef:56:68:b1:74:09:99:58:f1:3f:
1f:c9:50:b8:4d:6e:e4:af:d9:29:ae:2d:bc:05:7a:de:fb:30:
f7:4f:8a:5a:5a:1d:d4:38:8c:3e:56:bc:ab:2f:8c:59:1e:cb:
5d:de:dc:34:6f:a1:7c:95:81:99:bc:8f:a8:df:50:5a:32:ab:
64:28:f5:c5:2e:37:40:6d:d6:28:7f:12:26:6a:98:da:e1:a1:
69:31:17:0b:db:f2:8d:a3:67:3d:06:a7:ae:5a:dc:d2:60:0d:
67:4a:45:dd:10:0b:73:c1:9b:a9:cf:08:0f:dc:0a:4f:66:21:
3a:2c:df:54:6e:25:97:e7:c7:e0:3c:ca:18:50:5f:a8:c8:c8:
1b:8a:d9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:17 2024 by rpki-client on console.sobornost.net