Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/ab79adfe-f7aa-409f-9455-78c2f2264124.roa
File: ab79adfe-f7aa-409f-9455-78c2f2264124.roa (raw, json)
Hash identifier: 3v1ANj6+ENLdBLKJ2/O5Ib8lbUX4TwF0mRtCS3vlJXs=
Subject key identifier: 38:DA:70:23:60:D1:F5:7B:15:31:FD:36:02:8A:87:4B:A4:EA:C5:4F
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 4402FE3DCDEA3462E45F923C893D50F0EADA4580
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/ab79adfe-f7aa-409f-9455-78c2f2264124.roa
Signing time: Tue 11 Mar 2025 14:52:38 +0000
ROA not before: Tue 11 Mar 2025 14:52:38 +0000
ROA not after: Tue 15 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:5880::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:02:fe:3d:cd:ea:34:62:e4:5f:92:3c:89:3d:50:f0:ea:da:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Mar 11 14:52:38 2025 GMT
Not After : Apr 15 23:59:59 2025 GMT
Subject: CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:11:80:7a:e5:fd:36:22:c0:81:a4:d9:9a:
95:d0:74:34:db:33:6c:05:fd:03:53:b0:94:79:32:
c3:0f:40:1c:34:7c:52:26:df:50:8d:6b:7d:ae:0f:
40:43:65:7b:05:d2:7e:45:d1:d1:5f:bc:23:0d:50:
50:a0:f8:cf:52:ba:a4:30:e3:d8:1d:5c:4a:ec:08:
b1:f4:04:77:6a:73:54:5e:78:60:80:3a:30:3c:44:
f3:2c:97:e0:2d:a2:b0:9d:7c:ba:13:bf:58:a8:b7:
2c:53:9e:86:80:13:20:f1:2f:93:02:7f:d2:84:01:
8b:59:3e:0f:26:63:b3:4f:9c:87:7a:94:29:b8:79:
a6:9a:e5:84:dc:f5:0b:29:5d:7a:1d:5d:82:1c:3a:
1f:69:80:cf:7e:95:c1:41:3e:ff:1c:c6:d3:7f:ef:
6f:e2:cb:ae:a8:41:60:18:c7:b7:b6:e0:87:95:1c:
a7:ed:f5:b5:89:2e:b2:24:62:74:b6:d7:b4:1d:a5:
3e:8f:3c:55:97:6c:8a:a3:9b:82:50:c8:71:7f:8d:
3b:8b:97:9c:c0:ea:a3:7e:b8:f2:42:42:13:ca:b2:
5c:2a:69:43:1d:d2:84:1f:cc:41:ed:01:fb:65:65:
9b:00:bf:7d:50:ec:d7:77:7e:96:1e:c4:e4:dc:59:
3d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DA:70:23:60:D1:F5:7B:15:31:FD:36:02:8A:87:4B:A4:EA:C5:4F
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/ab79adfe-f7aa-409f-9455-78c2f2264124.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:5880::/46
Signature Algorithm: sha256WithRSAEncryption
81:d7:69:0a:00:42:15:e6:aa:78:b5:27:22:cb:8e:f2:e2:ae:
40:87:45:81:58:a6:f2:4c:61:33:34:57:9e:92:f6:de:79:b5:
d5:ba:c7:2a:d4:26:54:cd:05:57:6f:90:ef:d9:cd:63:8c:65:
14:c0:6b:18:c6:86:23:d5:f5:5f:21:06:68:49:25:79:ec:9c:
6c:6e:99:59:1a:d2:86:77:80:d7:1e:ce:94:39:0e:86:39:f0:
d7:ae:1a:d2:b2:a5:ce:b0:41:ac:da:99:92:0b:9e:4f:06:7a:
59:f2:03:47:43:4c:60:a3:d4:4b:35:da:fc:34:7b:bc:6b:ce:
47:32:96:c5:02:d7:eb:45:6d:a1:96:55:2c:4a:f8:82:cb:b9:
29:66:6d:3f:d2:d0:0d:e6:7f:10:19:66:0f:7e:cb:1c:9f:f8:
b2:93:2f:8a:f7:41:5f:82:a2:7c:3f:49:aa:dd:0f:25:8d:7c:
43:a1:e4:c8:82:ed:56:c4:97:ad:3a:a9:c2:5c:05:ff:3a:43:
df:c1:f6:1d:6d:4b:93:20:1d:30:7a:26:de:d9:fd:48:42:61:
6f:7f:14:73:3f:79:26:cf:3d:34:91:8a:ec:3f:5f:64:65:8d:
2e:8e:34:1b:ce:ad:42:37:8b:e5:80:2f:88:a4:b4:81:6c:8f:
1a:d0:e9:cc
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIURAL+Pc3qNGLkX5I8iT1Q8OraRYAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGU5ZjQ1ZmQ2NWNlYTQ3ZmNlNTMzZjExY2ZjMTVjNDc1
NTU0ZGZiYzAeFw0yNTAzMTExNDUyMzhaFw0yNTA0MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQDE1NWUxZGUxM2MzODc0MTM1MjExM2Y2OWM1MjdmNGU1M2Q1MjNlZWEzYjky
OTc0NjIxMjdiNDg0OTVlNDAyMWUxLTArBgNVBAMTJGY2OTAzMTM4LTQyMGEtNGM4
NC1iZjNkLTlhZWE4MWYyM2ViNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALk6EYB65f02IsCBpNmaldB0NNszbAX9A1OwlHkyww9AHDR8UibfUI1rfa4P
QENlewXSfkXR0V+8Iw1QUKD4z1K6pDDj2B1cSuwIsfQEd2pzVF54YIA6MDxE8yyX
4C2isJ18uhO/WKi3LFOehoATIPEvkwJ/0oQBi1k+DyZjs0+ch3qUKbh5pprlhNz1
Cyldeh1dghw6H2mAz36VwUE+/xzG03/vb+LLrqhBYBjHt7bgh5Ucp+31tYkusiRi
dLbXtB2lPo88VZdsiqObglDIcX+NO4uXnMDqo3648kJCE8qyXCppQx3ShB/MQe0B
+2VlmwC/fVDs13d+lh7E5NxZPTcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQ42nAj
YNH1exUx/TYCiodLpOrFTzAfBgNVHSMEGDAWgBROn0X9Zc6kf85TPxHPwVxHVVTf
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RwOUZfV1hP
cEhfT1V6OFJ6OEZjUjFWVTM3dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9jZmFkYmE0ZC0xMzRjLTRhMWUtOWQ5Yy02NGU4YzVkNjEzZjMv
YWI3OWFkZmUtZjdhYS00MDlmLTk0NTUtNzhjMmYyMjY0MTI0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvY2ZhZGJhNGQtMTM0Yy00YTFlLTlkOWMtNjRlOGM1ZDYx
M2YzL092LWhpczA4STk5NlJvZlQ5VUEtb3dmbG56WS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAiABP8NY
gDANBgkqhkiG9w0BAQsFAAOCAQEAgddpCgBCFeaqeLUnIsuO8uKuQIdFgVim8kxh
MzRXnpL23nm11brHKtQmVM0FV2+Q79nNY4xlFMBrGMaGI9X1XyEGaEkleeycbG6Z
WRrShneA1x7OlDkOhjnw164a0rKlzrBBrNqZkgueTwZ6WfIDR0NMYKPUSzXa/DR7
vGvORzKWxQLX60VtoZZVLEr4gsu5KWZtP9LQDeZ/EBlmD37LHJ/4spMvivdBX4Ki
fD9Jqt0PJY18Q6HkyILtVsSXrTqpwlwF/zpD38H2HW1LkyAdMHom3tn9SEJhb38U
cz95Js89NJGK7D9fZGWNLo40G86tQjeL5YAviKS0gWyPGtDpzA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:18 2025 by rpki-client