Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be992706-c3d6-44a9-a546-5fdf15912be4.roa
File: be992706-c3d6-44a9-a546-5fdf15912be4.roa (raw, json)
Hash identifier: DEHdN3xUwF0yX/4W4R+Ok8oBWLYnoIRTtlSL4+k/Vus=
Subject key identifier: 57:23:4D:CA:D0:E3:C0:F1:1A:69:64:D9:E2:04:F7:09:41:1F:B6:BA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1306A1133D4CA1F0F295D94240A33C7B5D0D7DFF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be992706-c3d6-44a9-a546-5fdf15912be4.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 176.34.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:06:a1:13:3d:4c:a1:f0:f2:95:d9:42:40:a3:3c:7b:5d:0d:7d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: serialNumber=a81d6bdc146b482f8bfe659ca622ca9fb4a00d2a0a060836a9210be4b3cc98ff, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:f3:bd:57:74:ab:55:e0:18:80:91:42:44:
d6:21:99:63:cf:1d:15:ae:80:00:01:d2:7f:1f:bb:
43:1e:31:65:ae:2c:0f:f7:53:68:50:ec:4a:f6:c6:
91:16:56:b0:b1:ad:c6:63:23:63:1e:54:3b:71:b4:
0a:87:af:1a:11:c3:ae:6d:1e:5f:c5:b0:81:4c:f3:
1d:7b:ba:d7:e0:c5:41:a7:37:4c:03:48:e5:c9:b8:
f9:fd:0d:72:b9:c2:28:15:9a:6f:77:de:d0:07:d4:
d2:af:df:42:5e:77:9d:03:69:f8:86:26:0a:68:83:
0f:11:2a:e5:c1:31:d3:15:3e:84:45:b1:f6:e0:eb:
7a:a3:02:a1:b3:67:ea:ad:b2:7d:23:f8:e5:90:ee:
ea:34:52:72:b0:ec:5d:c0:c8:39:30:a6:cf:3a:2b:
72:36:8c:98:60:9a:bc:0a:f3:dd:7e:0e:da:2c:cf:
c3:77:92:08:03:ac:6a:5e:91:bf:4a:3a:31:ff:20:
8f:95:c5:95:f9:03:46:05:99:66:90:91:8a:53:88:
82:03:d6:f8:2f:5c:48:c3:a2:60:a9:06:fa:75:9e:
e8:50:04:8f:b2:76:76:34:76:4b:d0:ff:69:1c:41:
90:b6:78:9d:aa:4e:e9:25:89:0d:7b:f4:17:db:82:
85:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:23:4D:CA:D0:E3:C0:F1:1A:69:64:D9:E2:04:F7:09:41:1F:B6:BA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be992706-c3d6-44a9-a546-5fdf15912be4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:20:e6:a0:7d:8f:45:72:76:4a:4d:9e:68:ad:93:32:ab:e5:
be:36:90:8f:c2:2d:58:0b:4f:02:f0:d9:a4:b2:f6:d2:5c:32:
31:89:06:3c:6b:84:de:c1:44:8a:8d:63:23:69:97:7b:13:dd:
46:e8:a2:f5:c3:df:51:ea:f5:ec:8d:2e:ec:13:11:04:b4:d1:
1b:3e:97:29:55:48:e5:27:89:38:0b:a1:e8:42:31:4c:11:a0:
da:60:cc:85:64:c7:32:0c:b0:fc:4e:78:0e:1d:1a:a0:e0:dd:
52:6b:41:1a:90:6a:5c:f6:6c:ad:55:19:8c:30:de:65:40:9e:
8a:6d:ac:f7:88:f6:39:32:00:aa:49:34:54:39:93:0e:3e:1a:
fd:43:a8:b6:de:ac:b2:4b:59:9b:43:e6:cc:c6:62:ad:3b:f4:
79:a9:14:b2:77:7a:2d:2c:2d:ff:bf:36:36:15:22:66:4b:e2:
45:f5:d1:11:39:91:2e:12:14:58:df:39:bf:77:98:00:96:c5:
e9:1f:21:18:33:46:26:48:20:63:e1:3d:8a:22:32:a2:9c:d8:
79:61:5c:c4:a7:f8:6f:dc:6d:87:6c:ae:08:87:5e:d9:94:9c:
5a:47:d3:61:fd:28:e8:c7:f8:b2:27:1e:38:75:1f:58:66:bf:
1b:a5:c9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:17 2024 by rpki-client on console.sobornost.net