Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/654f1481-ba50-463b-9997-0d385dd9b0a3.roa
File: 654f1481-ba50-463b-9997-0d385dd9b0a3.roa (raw, json)
Hash identifier: qP8o3URDj/7RkHucL8fOYZDHU9oxrsn5cv1WOB9sh34=
Subject key identifier: 98:30:BE:66:37:64:FA:0C:01:37:68:75:0D:52:A4:9E:40:C2:49:A1
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 50D12DE4A79F38D07899E7AA83D8FBB1914C94DE
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/654f1481-ba50-463b-9997-0d385dd9b0a3.roa
Signing time: Sat 05 Apr 2025 00:10:59 +0000
ROA not before: Sat 05 Apr 2025 00:10:59 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc0:800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d1:2d:e4:a7:9f:38:d0:78:99:e7:aa:83:d8:fb:b1:91:4c:94:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Apr 5 00:10:59 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: serialNumber=bf21c688036dfc86a692dc3d3a10e9d52ce4c8ca00568f847f85d05266496df0, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d7:c7:69:e8:d6:42:13:79:b1:84:ed:cf:94:
dd:6d:6f:55:c4:b9:22:7a:ea:67:b9:95:7e:4a:e4:
da:0e:91:9b:89:ff:ed:b8:42:c6:30:b7:47:58:e5:
01:8d:2c:75:de:f2:a4:0c:36:dc:8d:56:4b:c1:47:
fc:66:e0:8e:cc:ef:a7:23:e7:21:2b:6c:67:b9:ac:
09:1f:3e:b7:92:07:f6:18:f1:0f:76:a8:94:59:92:
9b:ac:27:6b:3e:ee:2f:2d:1a:66:72:cd:9f:8c:e0:
df:dd:13:5e:06:cc:c0:2b:63:1e:6a:a0:98:63:2b:
83:68:ad:0a:9f:9d:a1:ed:7d:d9:31:5e:d3:d0:50:
0b:4d:c2:79:02:b0:cd:d8:bf:61:59:cf:90:03:8a:
6e:25:be:ec:75:cc:0d:94:c2:a4:0b:ce:59:d3:24:
74:e6:3d:68:f2:9b:e3:5d:1f:f6:e8:4b:ec:3d:41:
6c:53:32:6d:e5:1c:80:e5:cc:fa:ce:50:ae:f9:ab:
42:3f:10:20:d5:24:be:db:cd:85:28:dc:bb:c7:06:
66:d7:36:a9:f6:88:60:d1:7c:69:3b:89:6f:eb:4e:
e8:fb:c7:a6:f2:25:91:d9:16:5f:a0:c5:5c:b4:1c:
cf:20:c5:52:c6:0b:cd:aa:da:b0:08:1d:be:14:50:
59:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:30:BE:66:37:64:FA:0C:01:37:68:75:0D:52:A4:9E:40:C2:49:A1
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/654f1481-ba50-463b-9997-0d385dd9b0a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0:800::/40
Signature Algorithm: sha256WithRSAEncryption
5c:65:c7:ff:67:93:e9:e4:89:b9:65:5d:91:0a:91:ba:ed:5d:
33:8e:1d:48:8f:26:3d:0d:81:b2:73:2f:a2:f7:97:da:f8:d6:
ce:04:c1:0c:42:75:7f:c1:90:06:15:26:e7:b7:38:6d:68:98:
ca:ab:88:6e:e8:13:45:41:99:af:e3:4a:4b:a5:55:96:87:dd:
41:5d:86:6d:33:b8:f4:45:33:96:42:d5:7e:b5:fa:f9:8b:11:
fd:3f:44:8d:92:09:ee:8e:5a:dd:a1:ae:97:f8:ea:5b:db:f8:
8d:13:a4:78:7e:04:ac:7a:ec:75:6e:31:b6:0c:0c:23:45:a0:
81:c5:4e:f6:92:5b:64:e7:c6:3e:0b:9a:25:b8:d2:51:2f:90:
e0:29:03:f9:54:27:21:d2:9b:a8:68:11:75:70:2c:14:97:7b:
ff:4e:ea:2e:72:89:73:e4:07:0c:6d:d8:aa:e2:4f:7b:32:e3:
40:5b:5c:49:32:15:70:29:ab:93:db:3d:67:52:d9:48:95:c2:
01:35:b6:aa:70:b9:35:3b:ad:13:1a:75:5e:5f:bc:9e:06:25:
03:a5:e6:6b:aa:2d:e1:0c:88:04:69:63:90:46:ee:b8:b4:36:
86:32:86:94:b2:b1:01:5f:43:f9:98:1e:ea:57:58:ac:24:88:
a6:bb:59:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net