Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e0cc362c-4a3a-4eec-9b91-4d4a8c1380dd.roa
File: e0cc362c-4a3a-4eec-9b91-4d4a8c1380dd.roa (raw, json)
Hash identifier: dt0d+AXEJtAGhH2OmFfalVHthaR8ka3KcLmW/CS4tfo=
Subject key identifier: 8A:99:59:95:5D:B8:2A:86:E5:AF:78:3D:F9:AE:D2:69:F7:E1:37:EB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 672D2A2549A730A466EC41D5D8A9DA737C579E9A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e0cc362c-4a3a-4eec-9b91-4d4a8c1380dd.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:2d:2a:25:49:a7:30:a4:66:ec:41:d5:d8:a9:da:73:7c:57:9e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=5a876436574cdde128353606846a66f02c54614d16efbb616cf664a29151e056, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:72:a7:2d:44:5e:a5:2a:58:98:41:cd:99:
77:be:93:f6:87:cd:fd:0c:5c:e0:82:a4:2b:b0:9c:
f5:1a:07:04:b1:e7:fd:e2:6e:33:e1:e0:e0:ac:a3:
cc:19:4e:5a:d3:c9:27:1a:d4:a1:38:ad:d2:5b:58:
e8:2f:e5:95:96:31:8a:ba:8c:55:79:41:05:c9:4f:
fd:3f:0c:c9:c3:34:7a:2a:06:bf:05:5c:94:aa:be:
ad:fa:cc:c4:cb:29:b4:dc:b5:1c:b6:e0:05:23:9c:
a8:4d:39:6b:a4:7d:5e:32:10:9d:92:26:84:ce:62:
6b:c4:08:67:13:bc:5f:59:40:ba:01:72:84:f0:4c:
c5:24:7c:e7:88:7e:54:3c:a9:51:c5:b8:14:db:c0:
38:6d:e8:28:de:12:d6:8d:96:cc:3a:34:96:32:5e:
37:41:ce:a2:9e:fa:87:50:3d:e5:a8:2a:2b:35:49:
58:4f:1b:ec:33:44:0d:99:3d:c8:1f:2a:39:ee:06:
70:93:5c:48:a8:3f:bd:5e:4c:cb:e4:0c:5f:29:47:
9a:85:f9:ec:b2:1b:ee:f5:bd:29:84:ad:56:0d:f4:
00:a7:28:1b:57:de:79:29:14:27:37:8c:bf:7b:ab:
c9:cf:24:7c:9a:d0:24:8e:ce:93:cc:52:61:8c:cf:
68:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:99:59:95:5D:B8:2A:86:E5:AF:78:3D:F9:AE:D2:69:F7:E1:37:EB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e0cc362c-4a3a-4eec-9b91-4d4a8c1380dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:1000::/40
Signature Algorithm: sha256WithRSAEncryption
71:74:1e:82:8d:f2:58:d3:2d:36:b3:00:ce:a9:0c:03:8e:ef:
b6:9b:34:93:19:a5:90:b1:6c:2e:30:a4:17:3c:bc:e6:7d:4b:
b1:97:f0:9e:0a:42:eb:37:cd:8b:d2:f9:f7:ea:9f:ac:cd:4d:
06:3b:d7:26:20:db:24:49:b6:b1:1b:bc:34:d1:ec:05:01:d5:
0b:0b:8f:9c:e0:ea:af:34:7f:a7:9e:14:c4:e6:9e:ed:d7:df:
3e:77:3a:f8:e7:f8:1b:5f:ba:98:a0:df:f8:0c:7e:00:8b:af:
5b:5c:a5:0d:78:ff:26:e0:15:54:52:51:92:a4:24:81:1c:ea:
b2:f1:72:84:06:ce:90:57:b0:2d:a7:d3:cd:28:cb:e6:4e:f9:
02:f3:f5:2b:83:37:f6:e4:92:a9:48:8b:f8:af:01:c4:72:65:
db:22:52:c9:01:44:2e:4d:22:4b:c1:71:b8:bf:ab:a6:b3:06:
07:5a:63:71:e6:98:56:38:83:ea:0e:7f:1e:9c:1d:43:2d:1f:
c4:6c:eb:d6:0a:d2:c3:ad:84:24:ef:ad:b8:aa:51:1e:c1:2f:
cb:56:30:8f:e3:39:10:a6:8f:fa:bb:d0:8b:46:a9:2c:0e:9d:
b9:f3:41:7c:e3:0d:0c:15:76:35:a7:b0:15:d4:6c:68:d7:46:
a2:eb:02:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:17 2024 by rpki-client on console.sobornost.net