Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f44e2851-6844-4150-9985-f362e9ff240c.roa
File: f44e2851-6844-4150-9985-f362e9ff240c.roa (raw, json)
Hash identifier: AgQLYXbbiU1v0riRFY6VUKlYwZ67JJ8TQfxosl2d7EI=
Subject key identifier: 07:C7:EB:C3:E7:46:18:C1:95:B9:08:01:5A:F3:A0:32:04:63:18:07
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4E1C871D7DECD38F07FFD54346476C2911E179BF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f44e2851-6844-4150-9985-f362e9ff240c.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:6000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:1c:87:1d:7d:ec:d3:8f:07:ff:d5:43:46:47:6c:29:11:e1:79:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=00f3b15ab0b81ec965ca169b7a9ac6cb8e72071ea5ae76cc9a3fdaac7f1358a7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:76:7d:40:46:46:89:ea:01:12:65:c7:24:
84:86:cb:99:42:38:0f:ad:ad:d3:47:5b:64:13:bd:
7b:4e:b2:42:d8:b4:a0:2b:7a:0e:76:e2:7b:d9:ea:
de:ea:d8:eb:23:6a:da:14:fc:54:22:42:02:f5:18:
ce:2b:d3:62:04:92:e0:a6:6c:6f:4b:a6:59:76:eb:
3d:be:3e:b4:1e:3d:90:1b:d8:85:18:e3:5a:4c:ad:
f9:7a:ba:f0:13:65:02:6b:0a:9e:68:69:43:be:6b:
e7:be:cf:40:48:8a:1d:db:0f:c4:bc:84:ba:ef:e5:
77:a7:52:79:a9:a7:73:bd:82:bf:09:d0:63:c7:80:
5f:62:15:05:66:c1:04:d0:a3:d7:ba:88:29:b9:6c:
07:2b:8a:29:ea:7d:01:ef:ed:5e:9a:8c:62:15:6d:
eb:d3:9d:da:62:a2:ed:8b:ac:4d:f2:5f:f9:f1:07:
8c:11:6a:03:fb:10:a5:c3:bd:f8:f9:6f:1d:56:b5:
c5:5f:36:72:61:88:47:05:54:68:e3:5e:80:55:c8:
eb:1f:9b:cc:b6:26:c4:bc:ec:c4:f6:0e:70:a0:42:
f5:07:c8:8d:cb:54:f5:56:da:73:2f:e3:1a:ba:56:
34:88:8d:d0:a1:5a:0c:20:1f:30:34:e8:6e:00:98:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C7:EB:C3:E7:46:18:C1:95:B9:08:01:5A:F3:A0:32:04:63:18:07
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f44e2851-6844-4150-9985-f362e9ff240c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:6000::/40
Signature Algorithm: sha256WithRSAEncryption
39:fb:5d:4e:2f:72:0a:26:22:fc:c1:12:16:e5:f7:a8:23:fd:
de:56:e5:14:3d:48:17:ce:db:33:f3:d6:b4:82:31:b4:cf:f9:
a8:ce:26:27:0c:47:4e:0f:56:4d:6f:a7:f5:8b:2f:03:1c:ea:
3b:88:45:b6:c9:83:5c:87:8d:59:c1:90:db:ef:a9:30:68:70:
1c:a4:e1:40:a3:11:f4:dd:ed:22:3b:da:f9:f0:c3:91:26:39:
49:c6:6e:c3:2d:74:ba:cc:e5:66:da:95:67:22:63:2c:a7:75:
02:56:77:5a:df:26:2b:6a:76:c1:d0:67:75:2c:59:ab:b6:b2:
aa:f0:4e:56:6e:9c:b1:5d:6d:4f:4f:ee:6f:a6:04:92:8a:6a:
7e:0a:e4:b5:cb:36:0d:13:93:3e:09:f9:58:22:3f:70:2f:63:
cb:f2:d5:20:ca:3e:54:e3:a7:dd:cb:77:51:45:e6:18:80:13:
c0:ab:15:22:c6:4d:f4:db:58:64:46:f7:2f:dc:e7:48:3b:98:
78:fc:bf:02:d3:ec:06:35:af:3b:28:0d:34:af:2c:28:f5:1a:
60:ca:35:57:4a:66:45:90:19:3c:50:a9:48:bb:17:d4:47:bf:
84:21:e7:3e:c1:e6:bd:3e:7a:49:01:fb:19:c5:39:eb:3b:1d:
7e:7b:d2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:17 2024 by rpki-client on console.sobornost.net