Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad4fc667-5e8e-4f39-9814-5ea23369e78b.roa
File: ad4fc667-5e8e-4f39-9814-5ea23369e78b.roa (raw, json)
Hash identifier: bMfhjWC43TyvSaw2iRTG+e4JBwphqSPeebr9jUTIs+E=
Subject key identifier: C1:AC:EB:83:61:2E:44:8C:C7:4F:98:82:F1:5D:9E:12:6D:AA:1D:3C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 155915C917D6C21FF3CD745D0AA1F35A9A68BAC0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad4fc667-5e8e-4f39-9814-5ea23369e78b.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 87.238.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:59:15:c9:17:d6:c2:1f:f3:cd:74:5d:0a:a1:f3:5a:9a:68:ba:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=9c04bb2899ed2ec15fdc6cb468fd333aaf028db1feb1de43407e1f3409487c15, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:ea:e1:77:61:28:57:88:0e:71:29:b2:0f:
50:2f:0b:68:14:91:ec:92:6e:0f:9c:52:e9:1f:12:
10:e2:1d:5a:87:4b:21:0f:34:a7:ff:53:6c:72:7b:
e1:ca:74:8f:76:25:c2:13:62:58:6e:6d:cd:f3:50:
83:9d:dd:8a:b8:e1:60:d0:55:fd:0b:4a:b2:fe:49:
c6:4b:c9:16:df:06:3e:7c:b5:06:9f:65:bb:1e:92:
e2:c0:e7:4f:1a:35:b7:1a:66:cc:bf:ab:09:ff:c6:
65:5e:ee:f2:03:3e:c7:8c:c1:2c:e4:b7:05:bb:12:
83:7c:34:58:b6:7b:34:a0:34:10:9e:4e:98:c3:88:
d7:d5:ae:72:df:43:e2:74:ef:2b:bc:99:88:56:45:
28:13:24:7a:ab:20:07:08:ce:6a:62:0c:c1:8c:2d:
3a:d0:8f:a7:02:cd:fe:b6:d6:7e:50:cd:3f:23:34:
f2:92:8c:ee:5c:fe:7c:73:90:4f:1a:57:86:3e:5d:
8e:0a:7d:6b:b6:66:e0:20:78:83:40:c5:c2:c9:1d:
bb:2a:f4:6c:a4:0a:ba:d2:ff:29:db:8f:63:dc:08:
85:da:d2:6c:69:a4:0a:4d:01:1d:e2:cd:e6:7d:bc:
85:ba:b9:d0:72:74:95:7f:13:5a:74:76:b9:1b:9a:
a9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AC:EB:83:61:2E:44:8C:C7:4F:98:82:F1:5D:9E:12:6D:AA:1D:3C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad4fc667-5e8e-4f39-9814-5ea23369e78b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.80.0/21
Signature Algorithm: sha256WithRSAEncryption
26:84:d9:1d:09:65:12:21:9d:cd:08:91:d0:95:14:85:3b:af:
2b:a4:b5:e4:cb:22:49:24:58:89:7f:f9:0a:9d:d0:d7:01:cd:
23:86:5d:4f:8a:d4:f0:ee:f4:85:71:3c:67:b8:a9:aa:e0:70:
bf:8d:4f:c3:cc:74:6c:5b:eb:8d:92:55:52:ec:d1:8d:c5:24:
b3:c2:dc:f5:80:b3:51:4f:4f:54:6d:dc:8e:90:ac:50:ff:c9:
30:67:46:88:39:33:66:f3:3b:83:25:4b:ea:71:34:2f:cc:e5:
3d:5a:dd:4a:ed:93:c6:b4:36:72:ae:96:9c:05:09:63:98:c4:
3f:2c:7b:31:ec:1b:1e:3e:b4:3d:12:33:2b:af:73:b6:12:a9:
39:8c:ad:f5:01:06:6f:90:ce:7d:20:9a:62:09:81:60:16:20:
83:4a:bd:ac:75:c2:80:21:79:2b:62:d7:ef:31:83:f2:8c:c2:
bf:74:7d:57:70:57:2e:38:52:37:dd:ca:89:e3:5c:ae:22:44:
c2:d7:21:19:ea:61:a4:2e:75:b7:f8:f6:1a:d0:b3:52:97:8b:
de:75:40:36:1b:95:d3:0c:7e:99:61:3f:8a:39:cd:83:9f:4c:
a7:65:e8:49:b8:80:46:3d:ec:72:ef:68:2a:da:05:db:bf:e1:
26:3c:5f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:17 2024 by rpki-client on console.sobornost.net