Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/1f7b2e34-a041-4b12-a5b0-5af0d6f43b9a.roa
File: 1f7b2e34-a041-4b12-a5b0-5af0d6f43b9a.roa (raw, json)
Hash identifier: 82el5PTDSPjzjm6Au+6jRy5m5Sa/i6u5kd03nyNjw5E=
Subject key identifier: 07:70:EB:54:05:E6:97:43:16:BE:AA:EA:39:B5:CC:28:77:BF:ED:9D
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 7E8C76F1667E567869610D5441CB53E41218FECA
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/1f7b2e34-a041-4b12-a5b0-5af0d6f43b9a.roa
Signing time: Sat 05 Apr 2025 00:20:27 +0000
ROA not before: Sat 05 Apr 2025 00:20:27 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc1:8c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:8c:76:f1:66:7e:56:78:69:61:0d:54:41:cb:53:e4:12:18:fe:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Apr 5 00:20:27 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: serialNumber=f62878016fcd8f86b4f66883ce24d1de20673bd2c0f52150a2412da0cd9d9a33, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:a2:ee:54:fe:8b:ab:b7:ec:cd:5e:e4:c6:
d2:01:45:52:87:f1:32:93:ed:d0:95:52:f7:52:60:
e0:1e:56:ea:68:4b:73:ef:c6:7b:2a:98:6f:5f:0e:
fa:ab:b0:2b:b4:c5:7b:47:24:d8:0c:8f:5a:5d:e4:
38:40:93:13:c6:6c:c2:95:10:6e:55:39:1e:15:f7:
f8:fa:6f:23:e7:43:a9:98:71:b1:e4:32:4d:db:19:
5e:b0:be:19:86:4c:8c:c0:46:37:73:ae:30:29:7b:
4a:23:5c:a0:2b:fd:fb:ea:b7:4b:dd:7f:a5:07:6b:
76:d9:4e:ce:f6:97:2d:8a:54:ab:26:06:de:69:59:
75:aa:bd:04:03:c3:a5:0e:c6:d0:6f:37:e4:21:7e:
27:bf:ca:1d:59:99:86:70:e7:be:56:e9:22:4b:82:
85:a5:a4:df:cb:9e:47:cb:33:68:2c:ec:9a:0b:3e:
c6:5d:49:57:4d:d5:14:ad:27:e4:45:11:ea:c3:2a:
8c:58:31:f7:6c:03:8f:45:13:77:96:6c:73:ab:25:
39:d5:aa:c2:36:15:77:86:95:2f:1a:29:77:82:d2:
55:b9:5a:7a:68:3f:e0:9c:20:9b:75:25:e4:b1:ab:
60:16:b4:5e:37:b2:04:6c:5c:b5:62:d1:dc:2a:d2:
20:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:70:EB:54:05:E6:97:43:16:BE:AA:EA:39:B5:CC:28:77:BF:ED:9D
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/1f7b2e34-a041-4b12-a5b0-5af0d6f43b9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc1:8c00::/38
Signature Algorithm: sha256WithRSAEncryption
06:49:21:d4:19:59:73:e9:b4:da:e3:9e:33:16:6d:5c:a3:0d:
10:29:3f:6d:25:81:2b:60:a0:e7:5d:f9:3b:87:8a:b5:ee:ed:
8d:4e:c3:d0:5b:9b:57:ea:e3:40:09:b9:ad:94:b4:7e:63:db:
9d:28:36:fe:7b:21:af:63:db:c1:e4:68:f9:49:a7:43:13:cb:
5e:da:04:14:8b:fb:9a:90:ce:93:9d:be:87:5a:68:58:02:13:
a1:4b:52:76:0e:96:7d:14:3b:d8:e4:a0:90:cd:1a:5d:b1:9a:
7e:70:6a:46:ee:49:44:f2:78:2a:00:13:10:75:75:f0:b4:a9:
e5:b3:d4:f3:d8:02:a8:f9:a8:52:f5:36:e4:3e:56:90:44:21:
cb:b2:97:57:fd:9a:79:08:1e:a3:e3:eb:7f:6b:a1:04:cf:cf:
6f:44:1e:33:46:a5:e9:00:77:fe:ac:c7:37:19:14:44:19:dd:
75:9d:29:53:87:36:8f:b5:e3:bb:fe:2e:4d:9a:fe:3a:5a:87:
3c:86:68:3f:db:26:01:3e:08:88:e8:dd:d2:bb:2b:48:4b:da:
e1:d4:73:03:24:fb:cb:84:7f:2a:92:f1:6d:02:40:8e:7a:8c:
8c:e8:54:31:67:f0:eb:fa:40:b8:13:04:33:77:8d:8f:d5:53:
05:14:0f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net