Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c8af9121-2fa0-422d-9c11-2e15bcdcdd17.roa
File: c8af9121-2fa0-422d-9c11-2e15bcdcdd17.roa (raw, json)
Hash identifier: sLHMM4j9f6iuiKPdzOtIBiQVc3suTHNM1z/0CVOYS04=
Subject key identifier: E4:ED:49:D6:5F:32:1F:AB:94:B2:29:D2:E5:EB:CF:02:49:7C:83:9A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4C0C57210E993F7321B94BED63B32C4B42FA7C80
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c8af9121-2fa0-422d-9c11-2e15bcdcdd17.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 178.236.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:0c:57:21:0e:99:3f:73:21:b9:4b:ed:63:b3:2c:4b:42:fa:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: serialNumber=169710fb4f29d91bb71fd2f69f3b19290d4400470160f1ea9c2fb3bbbf008b82, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:55:aa:02:c7:92:c5:e8:cd:2a:82:65:85:fc:
c2:34:62:96:2e:cf:d7:cc:47:d0:6f:b5:9b:5b:a7:
34:67:4b:02:f3:27:5a:67:bf:d1:6f:cc:77:22:94:
04:7d:f2:a1:f0:a1:1f:32:ee:e6:08:1b:56:79:56:
f6:8f:7f:b4:52:52:0e:44:ca:75:fe:7f:e6:a6:52:
92:f7:a6:87:f4:fe:f3:b7:65:5c:81:24:f2:7b:52:
85:af:52:4d:d6:e7:07:01:f3:b8:ee:50:58:ae:1c:
56:66:23:15:38:15:c5:73:c8:41:ad:b0:6f:ad:2b:
57:6b:8e:a9:69:86:ee:d1:9f:fa:79:55:96:1d:2b:
04:3b:e7:30:5b:df:e1:13:2d:6f:e2:f2:08:62:62:
f0:3a:63:e2:89:ff:1f:89:a4:73:54:42:f2:88:24:
b7:ab:7f:99:38:49:d0:45:c7:ce:eb:ac:92:41:4b:
85:89:50:0d:6a:98:96:1d:b8:f4:ea:ce:63:c4:bb:
d2:c8:6d:5f:51:e3:17:0e:f1:67:16:e1:1b:cb:09:
0d:9b:ab:dc:3b:bd:94:a6:58:32:1b:8b:74:03:14:
00:01:cd:5e:56:8d:7a:29:fe:f9:b7:ef:49:19:b0:
0e:bf:5e:d2:60:6f:5b:b8:cf:36:13:ec:4a:f7:4a:
34:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:ED:49:D6:5F:32:1F:AB:94:B2:29:D2:E5:EB:CF:02:49:7C:83:9A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c8af9121-2fa0-422d-9c11-2e15bcdcdd17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.0.0/20
Signature Algorithm: sha256WithRSAEncryption
42:0d:8d:fe:d2:c2:f1:ea:ac:53:46:3c:da:42:b3:13:64:a1:
1f:07:98:c8:7b:19:61:89:61:58:71:c3:0f:c5:cf:2a:bd:4f:
3e:d1:2e:39:2f:7b:af:54:28:8f:b6:6e:43:32:40:7e:96:77:
bc:ab:30:ad:96:e4:b7:1a:80:c0:e7:08:4e:34:c7:51:e4:a0:
4d:be:a7:be:d2:5f:6f:57:9f:78:6d:08:6b:f5:d5:39:ef:a0:
5f:c9:b5:fe:ce:e7:27:e3:79:83:da:84:a0:06:16:75:5e:ab:
7e:2d:9a:5f:dc:1b:5c:29:db:b3:e2:4e:8a:53:1c:a8:2a:d8:
98:88:93:98:91:3f:68:7b:83:bd:39:cf:f2:f3:11:f2:5b:80:
fb:d0:b3:8f:db:bb:75:f8:64:dd:0c:7a:6d:4b:92:25:34:3e:
15:25:f1:1f:ba:96:32:17:be:e3:73:25:03:18:93:2f:61:54:
8c:15:32:92:23:4a:53:f7:aa:cc:3f:a7:8a:29:a0:95:dd:ca:
e0:e1:56:27:af:26:b9:70:26:9c:d1:75:32:9c:fd:08:06:c8:
7d:b2:4e:13:c6:df:99:66:8a:7b:67:12:bb:95:de:61:6f:1a:
e4:04:3b:5d:6f:13:9e:29:f2:98:04:db:76:ba:6d:42:b3:35:
19:04:9c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:17 2024 by rpki-client on console.sobornost.net