Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/7146d24a-48dc-45b1-ac1b-2a6c2d7b7b19.roa
File: 7146d24a-48dc-45b1-ac1b-2a6c2d7b7b19.roa (raw, json)
Hash identifier: bH0xVPWMg0/UyHdVXSX9PwGc1vMzZjLKtFYIhmyoY+g=
Subject key identifier: 2B:58:97:69:BB:EE:CB:A6:FA:0A:54:3E:FE:5D:B9:70:6F:36:5B:FE
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 7F753ED5E25FA360E6B1FDEE893C85666B190DF0
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/7146d24a-48dc-45b1-ac1b-2a6c2d7b7b19.roa
Signing time: Sat 05 Apr 2025 00:20:59 +0000
ROA not before: Sat 05 Apr 2025 00:20:59 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2001:3fc3:800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:75:3e:d5:e2:5f:a3:60:e6:b1:fd:ee:89:3c:85:66:6b:19:0d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Apr 5 00:20:59 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: serialNumber=ff25f8f1cea3e12ea1e088ba1e472751bb1c00fc91e65b8859582fef593c9329, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:13:33:25:d8:7c:84:a3:a0:ec:9d:fd:06:
db:26:08:d1:fc:66:37:92:45:b0:d8:4c:f5:2b:ee:
6d:11:22:b1:ff:43:73:3a:bc:6a:db:af:b0:69:f9:
b4:a7:b4:cf:c4:48:8d:a0:e2:d0:ca:1b:8c:56:90:
cd:20:d8:1e:45:4f:c5:9d:5d:de:a2:26:34:8c:dd:
bc:ba:4d:f8:85:ee:e5:99:f4:f7:d2:d2:dd:b6:fa:
bf:ad:fe:bc:f8:ab:7f:85:6c:1b:9a:63:a9:9c:8d:
bd:4d:22:3e:af:b1:00:bb:35:4a:87:a1:65:72:cf:
46:bf:f3:58:56:bd:f2:73:f9:a6:d3:f3:b5:fe:b1:
f1:07:0c:cb:f0:1d:a1:56:0f:46:10:59:2c:fd:63:
4e:5b:3c:a3:26:2f:07:1e:0e:d1:41:28:6a:5f:41:
ec:14:7d:da:ed:af:be:eb:c6:f0:cc:49:74:02:9d:
3f:26:47:dc:c0:f4:e2:56:0b:15:d8:ef:90:75:e4:
dc:46:6b:25:9b:e8:aa:36:e3:88:c6:d2:a5:19:f5:
de:b5:95:f7:43:79:7f:82:35:73:54:9e:bf:65:46:
1f:77:da:9a:63:04:01:8d:5e:d4:19:05:f6:63:92:
b4:d5:3c:cd:b9:f3:db:40:f9:87:71:60:b9:2a:d1:
6c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:58:97:69:BB:EE:CB:A6:FA:0A:54:3E:FE:5D:B9:70:6F:36:5B:FE
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/7146d24a-48dc-45b1-ac1b-2a6c2d7b7b19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:800::/40
Signature Algorithm: sha256WithRSAEncryption
1c:35:21:b2:79:78:a3:5f:7a:18:ac:ae:4d:4d:a7:09:a5:10:
45:c0:8d:f0:5c:57:cf:9d:63:72:e5:0f:cb:53:2d:82:cf:21:
3f:20:f5:b2:5c:a7:a7:56:fc:83:94:95:40:b4:39:7f:63:dc:
6c:20:27:e3:cc:b9:33:2d:a8:49:86:f6:f1:92:84:87:dd:2a:
90:a2:1e:14:9c:7d:5c:cd:a2:19:f2:34:72:42:9d:7a:c8:0a:
d2:50:f5:16:78:4f:cc:62:e2:6e:a0:80:06:82:9c:2e:29:8d:
5f:a5:45:69:85:6b:89:9d:45:17:92:a2:d2:b2:00:a8:d4:c5:
1a:84:dd:f7:96:2c:cc:1b:cd:81:74:e8:49:32:91:b4:fb:2d:
ff:d5:30:93:bb:4d:b0:b2:af:a5:29:6a:a6:e1:46:85:fd:2c:
50:bc:75:3c:ad:28:87:1e:77:ab:b3:46:56:58:76:80:6f:97:
69:9b:85:a1:a3:08:35:7f:35:0e:89:88:74:cb:f9:53:90:15:
34:db:b0:be:3b:ea:4b:03:b2:2c:89:52:a1:1c:ec:8c:42:b6:
6b:ac:18:2e:7f:80:c3:58:7d:5a:17:27:37:f9:de:a9:f1:f6:
75:d9:4b:8c:b0:db:66:93:c8:9a:b5:20:72:bb:ff:c3:22:97:
a6:3b:97:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net