Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/336f8390-241d-4b6f-9822-91232dc553f3.roa
File: 336f8390-241d-4b6f-9822-91232dc553f3.roa (raw, json)
Hash identifier: sHosSjFxNW34j7A1SxfZdc2jUSo8JYQdT278gb0OhJY=
Subject key identifier: EB:8B:15:19:EB:BA:A8:21:60:AF:57:02:10:37:D0:99:CE:CF:D9:23
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 536E396A57945358F45AB43EF36FBBD17C79E442
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/336f8390-241d-4b6f-9822-91232dc553f3.roa
Signing time: Sat 05 Apr 2025 00:21:02 +0000
ROA not before: Sat 05 Apr 2025 00:21:02 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:6800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:6e:39:6a:57:94:53:58:f4:5a:b4:3e:f3:6f:bb:d1:7c:79:e4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Apr 5 00:21:02 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: serialNumber=33cb5abc7f33ed1282159032d313d4775f03c35384fd844d0490b736542f94e8, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:61:47:8f:18:0b:b9:11:3d:ae:97:2f:72:7c:
00:07:a8:a2:b1:c8:1c:74:5d:48:8f:bb:a1:ae:93:
8a:b7:6e:4c:eb:9d:88:e0:af:e8:df:8b:ac:a2:3f:
a8:c8:b5:bd:cc:48:b9:cc:ed:73:35:d8:5c:94:07:
f3:0b:3c:3a:f0:aa:5d:7d:8b:3e:a5:57:24:e3:b4:
f8:16:49:fd:54:12:ff:a6:67:d8:a2:10:06:6e:3a:
d2:d7:d1:2b:cf:c1:72:27:9e:c7:62:0e:d9:e2:47:
20:16:16:2f:34:db:96:f5:b8:2b:61:b8:9c:1d:5c:
fa:35:00:ae:26:c3:c1:07:22:c4:70:ac:fa:a9:ba:
4d:a4:46:4b:c9:3d:d3:88:2a:79:7c:be:14:77:1f:
2c:91:7a:df:10:4f:42:8e:9e:93:dc:07:98:4a:9e:
a6:9c:49:fe:7c:0f:8a:b2:9a:5b:21:1f:e4:ee:7c:
13:e7:20:a1:77:e2:6f:bd:58:35:c1:8d:e2:62:78:
7a:80:36:d7:96:6d:8d:89:29:dd:ea:28:01:e9:b4:
ff:6c:dc:d2:b3:cd:bd:66:72:53:ee:f5:be:fd:5a:
9f:1d:84:17:eb:bf:db:45:ca:37:86:5a:04:05:36:
db:64:71:1e:d4:28:20:48:07:e2:01:2c:0d:6b:77:
2a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8B:15:19:EB:BA:A8:21:60:AF:57:02:10:37:D0:99:CE:CF:D9:23
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/336f8390-241d-4b6f-9822-91232dc553f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:6800::/40
Signature Algorithm: sha256WithRSAEncryption
5d:18:0c:dc:60:bc:ec:e3:5f:96:14:65:21:91:a9:4a:37:65:
93:f5:bf:f1:28:e5:b8:ba:2a:5f:d3:a1:ea:d8:0d:0a:bc:3f:
3f:90:d3:f3:77:26:6e:a6:a0:3b:9e:ce:c8:3a:fd:26:a9:86:
42:b8:2a:c6:c2:2c:5a:7c:90:34:a4:54:f5:a7:3d:f0:fc:d4:
86:27:83:6c:43:e8:f4:dd:fd:6a:0a:da:e9:87:06:8e:ea:2e:
51:15:ee:f7:43:10:6f:f9:71:2b:e0:5b:14:b8:35:46:07:bd:
3f:f3:f2:b0:33:b4:b6:04:81:6b:f2:41:a7:ea:8a:6a:6d:bd:
34:31:5c:61:19:35:ef:d2:db:2c:76:d4:58:b0:20:12:c4:cb:
0d:19:65:86:5a:1b:32:24:66:8f:bc:92:07:ce:8f:2e:ac:ee:
01:b3:04:b5:d0:bf:0a:d0:e0:9d:23:b8:36:b9:df:88:df:82:
4c:3e:19:88:8e:d5:e2:2f:20:5f:a2:cd:13:b5:25:eb:4a:6e:
c7:f1:aa:c6:cb:5d:1a:2f:0b:c3:f8:3c:0b:d7:11:0a:b4:fd:
fe:14:f8:c6:98:e9:57:e8:28:c4:f9:56:11:4b:51:bc:b3:30:
39:6e:28:7c:3a:3c:f3:98:f9:39:e5:5f:d7:1f:15:1f:ff:ba:
15:fa:d0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net