Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e937d1d6-ce02-43b8-8306-022b3b0fff00.roa
File: e937d1d6-ce02-43b8-8306-022b3b0fff00.roa (raw, json)
Hash identifier: ak5FaJufh6iUJXF0VaCd15pm8aw9i24DBhHNaMsNfsw=
Subject key identifier: D5:8F:64:49:83:78:1B:65:48:D8:D8:40:C2:23:E7:B3:6A:F1:FC:A1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 70274611C2F8515EA267E5BFAE55EE336D885E0D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e937d1d6-ce02-43b8-8306-022b3b0fff00.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:c000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:27:46:11:c2:f8:51:5e:a2:67:e5:bf:ae:55:ee:33:6d:88:5e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: serialNumber=a4ab6ab9861cfafe2182dafcce34ae48c5d6b0336e4eb8b0a700b5185f80830c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:82:ad:6c:84:0e:f2:08:ae:6c:3f:1d:e4:
f6:0b:8e:66:ac:a5:c4:c0:9a:e9:62:34:ee:18:47:
2e:7d:5b:d4:78:8d:f5:34:5a:f6:19:12:c5:22:dd:
92:29:91:1c:06:58:74:40:55:59:80:57:85:66:4b:
1c:25:59:61:48:7d:19:b2:f2:e3:2f:b1:f8:17:09:
c0:90:af:de:cf:3c:58:d6:34:85:11:f2:ac:e3:60:
0e:11:dd:b9:8c:75:c5:3f:bc:03:02:93:b0:22:89:
a2:2e:59:19:e7:6e:bc:40:23:0e:29:c9:3c:24:9c:
4e:6d:19:d3:74:97:07:e7:34:59:e9:fc:85:b9:b8:
82:62:a8:32:7c:02:af:f5:12:71:6a:46:cb:dd:3a:
ea:3c:a2:35:29:f0:bb:09:11:cf:52:b4:a8:9f:0b:
11:9d:42:ea:61:c9:a2:a6:07:61:dc:2c:f0:81:54:
fc:53:47:19:25:8d:6d:71:c1:7c:74:58:c0:46:c8:
a2:a0:2c:fa:85:83:3d:d1:b3:7c:c0:46:0f:c7:82:
ea:74:7d:e7:6b:bc:1c:3e:72:f5:5e:9f:6b:43:fc:
1f:23:18:8f:03:a0:66:09:70:68:cb:53:02:2c:5f:
d9:b0:2d:8a:93:15:ce:0a:f6:0d:cb:8e:03:5f:3a:
74:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8F:64:49:83:78:1B:65:48:D8:D8:40:C2:23:E7:B3:6A:F1:FC:A1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e937d1d6-ce02-43b8-8306-022b3b0fff00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:c000::/40
Signature Algorithm: sha256WithRSAEncryption
2a:62:a0:49:a4:60:b8:26:4a:57:af:b9:99:75:16:01:f2:18:
2c:16:28:e7:14:d3:80:2d:03:ee:3a:1a:2d:d1:e8:23:22:9b:
fb:1d:a7:c6:1a:b9:ad:f2:08:d3:66:f2:d2:a9:dc:f9:69:be:
22:ad:96:cb:03:8a:a7:ee:34:fc:fb:4a:fb:67:a7:fc:f6:3e:
8b:fc:28:ba:1a:16:49:24:bf:8f:a0:84:ae:b1:16:c1:91:c0:
78:6c:31:7c:78:8c:12:ce:36:44:40:17:80:35:3d:58:0a:33:
95:fb:8b:5d:b6:a5:7d:60:35:86:18:0a:68:a8:a9:4e:2f:16:
9c:7a:21:31:d0:ce:78:25:96:77:ac:01:8e:2e:44:23:dd:20:
b5:55:b8:a6:a6:a7:d9:c5:1a:5a:43:fd:17:ca:48:04:a2:33:
b0:ee:71:68:7f:38:b7:bd:fe:09:9c:e5:41:98:60:93:a9:00:
c6:30:b9:11:99:fb:6a:12:ee:eb:92:b1:07:ba:07:70:95:d9:
13:96:9f:54:5a:71:ee:ac:7c:42:8c:de:fe:8f:13:68:94:c1:
cc:2b:b9:43:0e:92:c0:69:8e:8b:77:cc:b5:0f:ec:03:a6:a7:
43:c1:04:80:f2:4a:33:e4:2e:8e:ef:00:e9:a7:ef:ec:43:a5:
9c:94:05:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:17 2024 by rpki-client on console.sobornost.net