Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/bb926853-f3ad-4f1a-b024-12b34c55d5bc.roa
File: bb926853-f3ad-4f1a-b024-12b34c55d5bc.roa (raw, json)
Hash identifier: OlW/tuSPzf0v71kuWUbOz3f6c9Z1D5IYlwnpoHOhzOQ=
Subject key identifier: AF:52:3B:F8:F8:71:26:10:B0:D1:F3:02:C3:BA:69:98:E0:EC:FB:81
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 36F5C1E975EA895DA9BFDB16183F5E3E9BB0E6A2
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/bb926853-f3ad-4f1a-b024-12b34c55d5bc.roa
Signing time: Tue 11 Mar 2025 14:54:24 +0000
ROA not before: Tue 11 Mar 2025 14:54:24 +0000
ROA not after: Tue 15 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:f880::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:f5:c1:e9:75:ea:89:5d:a9:bf:db:16:18:3f:5e:3e:9b:b0:e6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Mar 11 14:54:24 2025 GMT
Not After : Apr 15 23:59:59 2025 GMT
Subject: CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0a:a9:8c:28:3b:c3:e6:9d:c8:a2:08:80:e0:
5d:c8:d0:f2:03:e2:69:4b:2b:56:0a:37:71:20:0f:
a1:a6:1f:aa:aa:3b:98:54:17:e3:0c:93:6c:c8:3a:
bc:78:e4:6e:4a:c5:4e:d3:77:18:fe:69:0e:6f:f7:
49:7d:f2:ba:e7:e2:79:ac:c4:b0:74:9d:be:f1:31:
14:02:bf:3d:93:4d:c7:de:c2:f8:01:dd:06:ba:9d:
41:2d:65:88:5f:09:c6:d3:f5:a3:f0:f3:d4:1c:f0:
38:5f:c5:1c:da:d1:bd:64:2c:bf:2e:d8:0e:ea:8c:
24:0f:e1:46:8b:89:55:22:05:b7:87:df:96:ea:29:
9c:e5:92:13:de:24:a9:7e:0f:b6:3b:c4:78:a8:85:
ac:8d:ca:91:e3:02:68:d5:12:15:b7:43:ec:d5:b9:
f5:31:77:5e:33:20:c8:ca:f6:1b:e6:68:e9:d2:2d:
5c:a5:3f:0e:90:9c:35:75:7f:f5:d6:51:c2:14:a3:
1a:76:a6:aa:89:45:c8:6c:22:a5:da:d1:94:a3:3f:
82:d8:f0:4c:28:51:89:ad:55:25:8e:79:5c:42:5b:
90:82:c6:fc:49:a9:52:0f:f5:22:75:b8:6a:de:82:
2d:93:a9:2b:02:78:5d:85:ed:f8:47:e9:39:96:c5:
81:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:52:3B:F8:F8:71:26:10:B0:D1:F3:02:C3:BA:69:98:E0:EC:FB:81
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/bb926853-f3ad-4f1a-b024-12b34c55d5bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f880::/48
Signature Algorithm: sha256WithRSAEncryption
8e:47:4d:56:5a:66:f0:2a:b6:ea:b1:e9:44:48:ea:24:54:66:
52:89:ea:9c:d3:cd:67:64:13:7a:6d:90:bf:af:f0:0d:c0:1a:
33:a7:ab:e0:4f:11:45:96:03:75:c0:72:5f:cc:f6:d6:c6:db:
09:39:c9:6f:d3:5c:88:82:78:f2:04:d9:3c:80:f7:bf:9b:17:
ae:c6:d0:ef:ab:4c:91:0f:e7:15:cc:dc:60:d9:98:0a:04:9b:
b0:4f:cb:81:c9:f3:c6:54:dc:7a:17:1b:21:c4:e4:84:cf:8b:
6e:b9:ae:cc:ab:9e:59:d6:bc:97:2a:e3:a0:19:3c:52:5d:c9:
01:0f:aa:df:b8:7f:ed:f8:b7:3a:c2:01:0e:a0:b5:93:6a:ce:
88:5b:27:69:77:f0:f8:26:8e:28:8a:47:cb:68:b6:57:0d:7d:
be:3d:ff:d3:79:53:7a:a5:13:8c:7d:0f:8a:f0:e1:97:0c:db:
d9:68:83:8d:aa:00:26:81:18:26:6c:02:b3:e1:e0:44:57:f3:
46:20:76:29:e0:5e:6f:7e:d0:d5:ab:1f:26:de:d7:cd:24:66:
c3:e5:28:f1:55:b1:8d:8c:14:a0:b9:5c:09:c7:3c:03:ae:e7:
57:5e:19:6b:d8:c3:75:cf:e7:f7:33:5f:39:c5:e7:1d:7e:0b:
44:ea:62:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:28 2025 by rpki-client