Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00793623-9ed7-44a4-9c2d-b3ff0668aeb2.roa
File: 00793623-9ed7-44a4-9c2d-b3ff0668aeb2.roa (raw, json)
Hash identifier: 6cpoemvqzsHOAVJ49Rphc7qzQhsZtCF5UskDKr9feBk=
Subject key identifier: D8:B6:8D:53:AA:79:D3:AD:FE:EA:FB:49:DF:42:99:1A:1C:04:7A:AF
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 79C2CE446120D1484E3F977A6203ED05486973DA
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00793623-9ed7-44a4-9c2d-b3ff0668aeb2.roa
Signing time: Tue 11 Mar 2025 15:06:51 +0000
ROA not before: Tue 11 Mar 2025 15:06:51 +0000
ROA not after: Tue 15 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:6000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c2:ce:44:61:20:d1:48:4e:3f:97:7a:62:03:ed:05:48:69:73:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Mar 11 15:06:51 2025 GMT
Not After : Apr 15 23:59:59 2025 GMT
Subject: CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:be:fc:df:d9:f1:68:78:fc:64:88:d9:53:
a8:0c:e2:50:d5:51:39:86:c9:76:b3:63:cd:b3:6c:
ed:ab:9f:cd:04:86:b7:30:19:ac:ce:7a:d4:29:25:
56:ab:f5:29:eb:31:39:a8:ae:01:0d:e7:15:64:53:
1c:99:03:06:5b:fa:0b:63:2f:06:99:a4:50:ce:00:
c2:d7:cf:84:f0:ce:80:5e:29:13:a2:e9:bf:f4:ef:
6b:3a:f5:b0:60:91:d1:c4:28:30:1c:ba:f9:26:df:
4a:d4:e7:b4:a7:9d:db:cf:62:1a:98:fe:04:72:c1:
77:d0:ba:92:22:88:be:db:ff:8b:df:4c:57:47:9b:
80:36:c9:d8:ba:89:3a:5f:72:e0:28:8c:9f:bf:2c:
77:e9:61:b3:a8:58:0d:2b:54:8f:d6:be:ab:83:87:
33:1d:26:69:93:6a:8d:df:f6:0d:ca:4e:24:ee:0b:
21:6e:17:51:8c:13:9d:55:b7:4f:04:bf:06:3a:f6:
d4:c1:bc:a7:f6:52:1e:68:ca:66:de:2e:8a:1a:b4:
58:f7:5e:53:b7:2d:5b:10:29:81:93:a1:c6:c0:df:
9f:d5:38:6e:56:fe:82:18:e6:de:6e:fe:9b:fc:1e:
a7:36:d0:cd:cb:5c:bd:2f:c3:cc:92:09:1c:84:30:
a3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B6:8D:53:AA:79:D3:AD:FE:EA:FB:49:DF:42:99:1A:1C:04:7A:AF
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00793623-9ed7-44a4-9c2d-b3ff0668aeb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:6000::/36
Signature Algorithm: sha256WithRSAEncryption
44:18:2d:54:61:c1:46:30:9f:13:ec:d7:9e:33:a8:5d:00:95:
9d:7e:8d:70:e4:9a:cf:b3:94:d5:f2:28:e7:1c:3d:9c:89:cc:
7d:81:08:d7:ff:5d:aa:94:0a:d4:8e:cc:9c:d0:53:a6:4d:27:
67:00:0e:16:5a:02:64:66:c0:42:1f:cb:06:ae:14:87:5c:35:
8e:6c:da:71:e9:6a:62:90:48:d9:b2:88:ff:89:2b:73:4c:be:
0b:e1:c1:d0:82:cd:85:36:41:d9:17:85:e7:04:74:ef:30:63:
5f:5e:02:ea:a5:d3:38:e4:dc:b0:16:db:34:46:11:93:f4:26:
ef:d0:f0:e7:3d:9f:0f:52:2d:ed:89:35:91:92:b5:b0:9b:30:
cb:85:0d:bb:14:f2:32:3c:0e:07:5d:2b:c5:4f:92:c4:43:96:
1e:7a:e4:cd:7d:6e:39:1b:5c:7e:dd:99:fd:6e:26:06:00:5b:
70:6e:98:e3:a3:2b:84:20:4f:6f:bf:78:f4:e6:36:76:ab:fd:
28:70:92:ae:23:17:08:23:44:1a:72:4a:fe:a8:36:fc:0f:29:
e8:64:12:af:b5:bc:b1:69:ac:3a:fd:f5:e6:78:c3:53:03:4b:
2b:88:c9:bb:ad:70:ef:11:b9:c3:b3:99:dc:f1:9d:06:74:b0:
1d:11:f2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:25 2025 by rpki-client