Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ccce899e-b2d3-4749-b479-a9cbcc58923f.roa
File: ccce899e-b2d3-4749-b479-a9cbcc58923f.roa (raw, json)
Hash identifier: QDdCD2EssNQFlGoIVP/9k3SJm3oW2Nulid2A/bmTT5c=
Subject key identifier: DE:6F:C2:9D:1A:A8:82:32:02:74:EC:02:1B:0A:96:8C:84:2C:1E:1C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 481AF35B618F2F9C7A199CC9A5E20F9B40781F58
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ccce899e-b2d3-4749-b479-a9cbcc58923f.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:4000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:1a:f3:5b:61:8f:2f:9c:7a:19:9c:c9:a5:e2:0f:9b:40:78:1f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: serialNumber=3568d7405fbd17344f32bfff42d006c694e33f9fb6468926ecaa719f56b57f27, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:01:08:2c:5c:df:ff:05:a9:c2:4c:f9:da:
24:1f:bc:4e:f3:c4:32:e8:49:dd:c7:c2:6e:a1:fd:
52:41:dd:09:ab:ae:31:98:d2:43:b1:44:9b:a5:e3:
47:f8:67:87:11:6a:e5:be:7e:0b:f5:6a:e2:23:ab:
8d:f7:5e:ef:50:24:64:a4:78:5f:e8:33:9d:fc:d3:
06:04:80:3e:13:19:44:ae:7a:6a:70:8e:c7:f1:e8:
78:21:e0:36:aa:37:3d:e0:ed:d4:3f:41:be:a6:9a:
c4:07:d3:6d:6c:a8:03:7b:8b:ba:3d:33:42:14:26:
f6:fa:81:f1:0f:e5:3c:8a:54:f3:a2:47:0c:b0:24:
26:92:66:ff:df:bf:84:08:7e:9d:43:3a:ef:17:65:
1c:8c:a6:20:6c:ee:1b:d6:49:5e:56:86:27:3b:57:
dc:87:71:c2:24:a0:1c:bb:a2:a9:b2:be:5c:4e:d0:
bf:f9:2a:f7:80:79:be:37:ad:b2:9d:9c:18:86:b7:
3a:d7:a3:54:a3:d3:10:52:84:65:63:92:ca:a7:b3:
91:0e:fd:94:0b:0c:e6:ff:79:82:cb:d7:2b:e6:ac:
b7:97:1a:89:f6:55:ce:ff:cc:0a:27:82:b2:34:86:
c0:29:aa:0f:53:f5:8d:5c:a9:0e:7e:9d:2e:59:99:
9d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6F:C2:9D:1A:A8:82:32:02:74:EC:02:1B:0A:96:8C:84:2C:1E:1C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ccce899e-b2d3-4749-b479-a9cbcc58923f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:4000::/40
Signature Algorithm: sha256WithRSAEncryption
08:07:79:13:87:70:7c:ad:06:09:ff:29:a8:3e:0f:92:44:f9:
71:48:97:99:7a:64:20:4a:6a:69:37:61:93:66:8f:24:4b:2c:
13:6b:69:c4:07:e4:2b:15:1f:5e:87:38:f9:8a:28:b4:3d:60:
e2:83:1c:29:bf:b4:d9:95:e3:96:48:d1:09:37:4a:79:cd:2d:
2c:7e:71:4b:13:a0:93:02:9e:5b:ab:54:cf:01:de:6a:b2:17:
a0:17:fb:ec:87:a1:b8:5f:b2:c8:82:70:c6:05:be:20:9d:52:
65:f7:55:b7:78:1c:27:83:56:6f:e4:14:3a:d6:b7:f0:bd:d0:
01:cf:c9:86:1a:5b:41:fa:1b:58:01:4e:5c:d6:46:5d:32:dc:
41:6e:a4:d9:86:22:9b:88:25:31:34:8d:e7:59:e2:14:85:fd:
4b:60:38:1f:19:d1:b7:cf:52:66:10:45:ac:39:02:8c:4a:a2:
a2:79:a3:66:be:fd:03:22:12:43:69:49:35:b2:94:00:62:f9:
28:61:f2:2a:f9:78:d3:49:f8:e5:0c:fe:5c:00:38:ef:e6:84:
d4:40:06:8e:c2:0e:a3:11:c1:c1:d5:ab:0e:d2:50:09:f7:55:
d5:95:b9:0a:40:33:44:f4:01:1c:81:b1:e3:07:4a:37:0c:54:
98:a9:77:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:17 2024 by rpki-client on console.sobornost.net