Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/06f5324f-fb2d-4212-b1f7-6ca0b172bf22.roa
File: 06f5324f-fb2d-4212-b1f7-6ca0b172bf22.roa (raw, json)
Hash identifier: G6LxvHQEDYKheH+5c3DH+CthiI3CjBY3M1cSpifXY/s=
Subject key identifier: 5E:07:D0:DD:1E:AF:BA:A8:69:9F:87:BC:AC:15:24:5C:31:AE:F4:F3
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 4F0C1B1D6B7C0B2D4366A7F78021699AA9620676
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/06f5324f-fb2d-4212-b1f7-6ca0b172bf22.roa
Signing time: Sat 05 Apr 2025 00:21:09 +0000
ROA not before: Sat 05 Apr 2025 00:21:09 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:0c:1b:1d:6b:7c:0b:2d:43:66:a7:f7:80:21:69:9a:a9:62:06:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Apr 5 00:21:09 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: serialNumber=98b8af90cd606db66913bb467b4aacbd4c63511272d8417a9cbcd7aad88bbf28, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:97:41:cd:35:67:89:77:ff:12:8d:ee:49:87:
d6:b2:bf:eb:67:10:f0:67:b4:b9:be:a4:cf:69:1c:
24:30:e4:5e:e4:0d:e0:89:ac:23:78:bd:1a:c8:85:
fb:05:7d:58:1b:c6:0c:c8:dc:ee:39:64:45:30:4d:
b0:bc:9a:92:1e:e4:cc:2c:c3:d3:6a:48:10:f0:ac:
f9:69:76:6a:a8:dd:26:f8:d4:92:94:7d:0d:87:31:
cd:16:13:ca:e9:8a:03:90:9f:8b:05:92:c9:19:8d:
01:72:e2:15:06:5e:7e:0b:33:7e:03:3d:1e:59:b0:
91:97:9b:23:75:4d:a7:4f:45:a9:6b:f6:1a:d0:17:
f2:39:83:79:54:2f:61:73:00:79:7f:b8:3a:60:f7:
4c:ed:68:47:14:76:ab:fc:4e:36:77:9c:ea:07:fa:
5b:e1:54:e3:09:9a:f4:e0:54:2a:a1:8b:12:8a:f0:
4c:ef:c2:a4:a8:e9:51:98:0f:60:b5:51:31:bc:24:
07:f1:07:4e:58:03:e5:dc:17:b9:c0:15:1e:85:7e:
54:6b:91:b5:f9:ca:72:66:49:fa:c1:ca:6f:00:0a:
dc:e5:46:3e:f2:db:db:c9:de:3a:0f:19:58:1f:0e:
d5:c3:eb:67:aa:02:65:07:c0:32:15:e7:0c:a7:5d:
0c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:07:D0:DD:1E:AF:BA:A8:69:9F:87:BC:AC:15:24:5C:31:AE:F4:F3
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/06f5324f-fb2d-4212-b1f7-6ca0b172bf22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:8000::/36
Signature Algorithm: sha256WithRSAEncryption
8a:4a:ff:07:c9:56:f6:58:b8:25:66:26:57:e9:9f:11:85:89:
3d:cd:66:be:b1:ee:09:39:5d:63:9e:a1:17:4c:c6:84:b3:c8:
6b:05:ef:0b:f0:ae:0a:7a:6f:96:5d:da:6c:9a:bd:97:0b:4b:
1a:78:38:2a:bf:5b:7a:48:a2:69:ed:5c:19:47:59:e8:89:9f:
f9:bd:3f:56:2d:80:e9:b8:16:97:b1:f1:17:c3:6d:da:9a:98:
60:df:3f:8a:db:94:70:34:e4:ac:49:04:0c:66:76:77:7c:4c:
65:1a:93:37:92:84:32:d0:c4:f1:d8:d7:7b:02:9d:8a:80:ae:
08:8c:01:06:81:99:d1:b1:08:f7:23:77:a8:cb:23:46:61:18:
94:ba:58:22:55:cd:f6:9b:3f:9b:70:75:39:63:5e:bd:d5:e9:
41:5e:ce:87:98:9c:a9:0c:d9:72:09:34:a5:9e:82:39:f4:62:
81:5e:08:52:2e:41:33:9e:21:da:44:e5:f6:d7:98:6c:0a:cd:
35:5c:a9:a6:72:96:4f:9e:b9:6b:18:49:aa:89:a6:d8:22:f0:
0c:90:5d:14:f6:97:40:08:7d:48:5d:73:60:14:86:85:2e:85:
58:6d:da:9b:b1:bf:b1:ad:6f:ac:d3:ad:91:35:5c:cb:62:14:
d4:37:4e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net