Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3c120d2-b640-4365-9bfc-3021f21ce388.roa
File: c3c120d2-b640-4365-9bfc-3021f21ce388.roa (raw, json)
Hash identifier: FGgsklePCsbaMYohl+TRCwOabxDti1f4NhLawvz56+Y=
Subject key identifier: 6C:78:E6:36:31:AF:5D:D5:60:83:CB:89:6F:47:FB:52:60:B7:96:FC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2ED6269C7C4F14A9044B81364EBBE242578DE960
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3c120d2-b640-4365-9bfc-3021f21ce388.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:b000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d6:26:9c:7c:4f:14:a9:04:4b:81:36:4e:bb:e2:42:57:8d:e9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=cef7835e1927e0afeec935d9308d6baadf9b132cd237c4b3900eed78a8b9608f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:75:b3:0f:44:df:4b:c0:d8:0e:cf:05:7e:a4:
76:62:db:8f:95:1b:b5:b8:cd:66:3b:e6:6f:e0:08:
ab:5a:99:27:1b:b1:2e:9a:f2:3a:f6:d7:e6:15:2f:
81:44:a8:9e:0a:76:cb:ac:65:2f:2b:36:c0:91:68:
a7:8a:6d:05:db:3c:c0:6d:df:cb:1b:bc:45:f8:5a:
11:21:af:eb:dc:54:cb:f2:11:53:3c:f8:78:47:39:
fd:e5:1c:1a:5a:13:5a:ce:0b:80:9f:74:3d:42:14:
59:70:98:ce:49:67:ec:de:72:f2:b6:6e:63:d5:c4:
9b:56:75:5b:c8:5c:19:fc:bc:6b:f7:48:86:82:40:
63:33:ae:a1:28:28:48:c9:39:1e:e8:be:4f:3e:94:
59:77:c8:bf:95:ac:8b:7c:05:b4:a5:45:cd:96:ba:
ad:f7:46:2b:12:e5:da:e9:d2:e9:3f:97:6c:1b:99:
31:47:4a:0c:72:b2:b9:a8:5b:62:a3:92:b3:17:99:
55:cc:6a:b0:da:bd:54:0b:08:80:3c:30:93:1f:ef:
b0:4e:d8:6f:27:f3:20:bc:42:14:cd:e0:84:65:2b:
78:e4:f7:1e:ec:f1:8d:f9:1c:3e:39:58:e4:0b:a1:
30:d1:be:f4:21:a6:80:40:5c:10:67:33:2a:71:7c:
7a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:78:E6:36:31:AF:5D:D5:60:83:CB:89:6F:47:FB:52:60:B7:96:FC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3c120d2-b640-4365-9bfc-3021f21ce388.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:b000::/40
Signature Algorithm: sha256WithRSAEncryption
5e:80:34:ca:e9:a8:2b:ed:c6:84:e8:94:f9:22:08:93:0d:96:
ad:c7:a2:9f:10:25:97:72:02:e7:ec:fd:c6:bb:f6:ce:13:24:
bf:e7:a5:8e:be:3b:ab:95:ce:26:09:0c:4f:94:cd:21:98:f3:
33:67:3e:de:5e:e5:db:65:3d:dd:42:a1:5a:94:68:21:c4:a8:
f7:30:e1:71:7f:0f:1a:12:2e:19:30:4f:71:9b:d2:eb:33:12:
a2:d6:b2:20:84:12:fe:2c:a0:e9:f3:fb:6a:35:34:bb:0f:b7:
44:da:ce:82:0c:6c:e2:4a:40:20:2b:64:dd:be:45:0d:d9:5d:
d6:4f:c4:1f:77:5d:2d:a3:c8:b1:b6:86:43:08:17:23:8d:50:
c4:32:77:69:1a:e1:fd:4f:0f:9e:9e:76:93:ad:9a:ff:d2:3c:
00:48:34:51:d0:28:55:3b:05:e7:f7:17:91:74:f6:5a:fd:63:
ed:82:9c:b2:6f:a3:62:d1:cf:bc:e5:d7:47:5c:bb:67:53:24:
ca:18:bd:63:05:ad:72:16:c7:8a:82:20:e7:f9:8c:ad:2f:66:
43:6d:03:42:99:64:5a:7b:d8:d7:b3:bc:d4:0b:9a:5a:7f:9b:
24:85:3e:ac:9e:f1:39:5b:47:00:48:b0:17:d5:a0:03:74:2b:
54:86:7c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:17 2024 by rpki-client on console.sobornost.net