Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/7da13080-67e7-4ae7-b0bb-d85b087719b7.roa
File: 7da13080-67e7-4ae7-b0bb-d85b087719b7.roa (raw, json)
Hash identifier: GVo6EHKEvtlx7F9sqFkn921/dweC9VjKPrOPjiro8vg=
Subject key identifier: 21:8B:1E:8A:D8:1D:7D:76:70:74:D4:A0:F7:B0:0F:A0:27:DF:92:81
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 60BAFAC36E1BB1C48BCB3986403295874AEA4C86
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/7da13080-67e7-4ae7-b0bb-d85b087719b7.roa
Signing time: Sat 05 Apr 2025 00:11:17 +0000
ROA not before: Sat 05 Apr 2025 00:11:17 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:7000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ba:fa:c3:6e:1b:b1:c4:8b:cb:39:86:40:32:95:87:4a:ea:4c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Apr 5 00:11:17 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: serialNumber=f28462a081aef747b2a7b40c7ea23fa4be7209dc1bd14476a3ecb5071cba0b76, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:87:fe:92:00:49:59:b5:5e:31:e2:bb:ad:8f:
5f:07:6c:a2:e6:65:0c:9c:62:71:06:bc:79:35:46:
33:3d:af:33:c8:ea:28:b4:e7:14:61:53:26:fa:ec:
d8:8c:a5:5f:d3:ed:d8:cc:0f:71:af:fd:e2:b6:be:
0c:a5:9f:f2:40:29:25:e2:32:2d:0d:2b:31:3e:dd:
78:05:f0:ef:de:e5:ed:2e:58:24:6e:60:07:56:89:
36:af:07:06:1a:9f:64:c3:54:b5:93:14:a0:c1:90:
fe:12:22:2b:f0:a3:e1:b2:a8:17:57:47:a7:dd:03:
0e:37:af:10:61:7a:18:d8:e9:e9:ce:4a:8b:81:20:
b0:31:5a:4a:a0:4f:7e:7b:8a:e2:38:23:79:68:d9:
74:ba:87:d0:91:07:90:e6:bf:ea:fe:1c:7a:a2:2a:
ba:e8:e3:fb:e4:54:fd:0a:cf:73:98:33:7d:43:b7:
52:0f:8c:97:cb:03:61:82:22:9a:46:be:85:b7:f3:
dd:04:7e:34:81:e3:c8:55:9a:91:79:ba:5e:e5:84:
43:98:f1:8d:30:16:39:6e:5e:f9:75:24:7d:29:04:
28:a9:d4:a3:59:d4:34:04:3c:40:65:c9:5c:f1:8c:
49:17:b2:df:48:20:32:7d:e2:34:9a:b9:4a:81:e8:
3d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8B:1E:8A:D8:1D:7D:76:70:74:D4:A0:F7:B0:0F:A0:27:DF:92:81
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/7da13080-67e7-4ae7-b0bb-d85b087719b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:7000::/36
Signature Algorithm: sha256WithRSAEncryption
6c:a6:4f:b8:9b:45:fc:a4:4d:9c:94:9e:bf:01:15:4e:9c:ca:
42:4f:fb:42:95:8f:33:d4:f3:99:26:61:aa:a8:d2:1f:cd:5d:
a0:a8:25:76:cc:d6:97:21:d2:e4:e2:f8:b6:5b:ab:c7:6e:42:
f8:98:b9:3e:63:83:7d:c8:7a:65:11:b5:0e:83:59:48:dd:6e:
98:ac:73:9c:85:33:5e:6d:26:6c:83:bb:87:54:0d:be:46:bb:
1f:87:d4:bf:cb:26:09:97:d7:b6:b8:ee:ac:d2:0e:9d:b0:3c:
b9:26:05:64:2d:2e:9c:17:af:ef:45:44:a3:00:03:0e:6e:16:
a7:49:50:b5:3b:37:2b:a6:6d:f5:9a:22:da:87:6c:41:cb:3b:
c1:39:60:be:bc:c0:92:27:6c:fb:93:1f:22:a9:fd:13:a9:65:
e0:d0:1e:29:ee:11:88:f3:96:d8:4b:fe:7f:5e:dd:f7:00:e2:
9a:eb:bc:b7:a0:9e:cf:79:81:a3:94:59:f7:7c:26:58:b4:a0:
2a:d7:92:27:ef:7a:57:c3:e8:a5:ea:46:8c:a5:c4:c6:38:b5:
20:d1:5b:17:69:8f:51:fe:f5:e3:6e:42:44:7e:a9:eb:90:59:
92:2c:98:55:bd:b0:88:ea:56:2e:e7:07:63:2e:a1:94:a3:84:
2e:c5:24:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net