Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c1f61529-4ff8-4380-a3cb-87884046881d.roa
File: c1f61529-4ff8-4380-a3cb-87884046881d.roa (raw, json)
Hash identifier: 27MLyjfQ/cJdLV8fVDP22UvcxmmV5MfNIONDhO50K6E=
Subject key identifier: DB:61:72:AD:E2:58:BF:36:3D:15:C1:4B:93:D1:91:6A:DA:60:B8:13
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2D6A511880F91112EBE6026A45C0122D8B26F43B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c1f61529-4ff8-4380-a3cb-87884046881d.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:6a:51:18:80:f9:11:12:eb:e6:02:6a:45:c0:12:2d:8b:26:f4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=a3f8e6d1652e8446f29a63e2beba36d1ede55a22f3d78597617af334ce07539a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:24:96:02:65:6c:88:f4:cc:f3:53:7b:af:
a1:3b:2e:3c:50:61:c7:b5:b3:65:f5:38:04:8e:94:
6a:af:31:32:77:69:7a:5e:1b:44:4b:da:0a:35:80:
1c:a8:c5:10:70:51:8b:5e:05:8e:8b:2b:7b:77:f2:
56:ca:c7:06:93:06:d2:60:6b:d9:e7:1d:07:5d:ec:
35:2a:00:77:f8:6c:f3:e9:fb:46:51:31:57:bb:13:
d2:dc:58:ba:d9:ae:64:08:ae:2e:ca:31:10:67:43:
33:e6:40:0c:53:9f:4f:ac:c8:a4:15:33:0e:5e:2d:
fa:d6:f3:21:51:81:4b:b2:fa:2e:b8:44:bb:1d:b3:
8a:e8:6a:b8:58:56:48:13:7e:5e:f8:48:93:b4:bf:
43:ac:59:2f:32:07:04:1e:ee:d3:2a:4e:3a:4d:a9:
56:e0:ba:1b:6b:f7:88:42:52:18:d1:8a:91:bc:5f:
36:df:44:92:1c:a2:2e:d2:b2:30:e9:63:dd:c9:42:
d5:97:9e:12:52:ee:4f:e7:4f:e4:ae:ad:83:48:fd:
cb:00:a6:7b:d0:84:10:36:a9:f4:c1:4c:4c:a7:31:
12:03:86:33:73:26:d3:0c:4e:6e:c6:b5:98:06:eb:
54:40:d1:cb:65:63:06:b3:78:fd:14:b2:e5:f9:f5:
4f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:61:72:AD:E2:58:BF:36:3D:15:C1:4B:93:D1:91:6A:DA:60:B8:13
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c1f61529-4ff8-4380-a3cb-87884046881d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8000::/40
Signature Algorithm: sha256WithRSAEncryption
09:3e:0a:90:23:16:58:2e:35:8c:b4:48:ec:a5:c0:79:03:2e:
87:74:55:25:e3:cf:c2:95:17:11:78:4b:0e:92:e4:a4:2a:42:
4f:eb:3d:d7:ce:8f:8a:bc:f7:2c:45:0a:f2:c6:64:b6:8b:88:
8f:7a:19:bb:8f:c5:5a:ba:72:b6:a7:7d:7d:43:5e:d1:c4:c5:
86:10:8e:b3:8b:6a:1f:0f:41:d2:00:d9:2f:80:09:d6:42:78:
d0:ff:31:43:c1:df:63:2b:20:7b:50:89:9a:cb:8c:c8:f4:52:
67:74:56:ff:f4:8e:89:e7:a6:98:37:33:f9:0f:36:b6:a1:7a:
95:08:d5:3e:3f:dd:c1:38:f2:b9:d6:5d:52:39:77:57:f9:c0:
58:56:dd:b9:7f:38:f9:b3:f3:4e:c7:d0:16:56:15:dc:11:3c:
3c:af:b1:82:c4:bd:04:8e:05:b7:44:8f:47:87:18:a6:74:58:
eb:03:7d:04:30:b8:13:34:30:6d:d0:f5:06:7b:18:fe:2d:c7:
00:45:ba:45:54:12:dc:02:fd:73:f9:19:48:d5:12:d9:ec:bc:
d5:f1:2b:d1:a4:23:91:06:55:31:d1:bb:9d:55:c2:3d:f5:ce:
48:03:c8:8e:7d:7a:37:9e:0d:1f:9e:f2:ef:25:8d:59:7c:a5:
fe:ea:b4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:17 2024 by rpki-client on console.sobornost.net