Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/bfd462bd-2e1f-485f-aa9c-e7e0c0bcb690.roa
File: bfd462bd-2e1f-485f-aa9c-e7e0c0bcb690.roa (raw, json)
Hash identifier: yDh0P2eVpDovnu2DMK+6ygFenUfyi0uCQW6CqpLom3c=
Subject key identifier: 8B:43:14:F1:E2:D3:22:C6:FF:E4:CA:5E:A5:73:00:FF:4A:52:6C:A0
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 01C8E1F67058DB1F792E39FC1328F14F4CAD10D6
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/bfd462bd-2e1f-485f-aa9c-e7e0c0bcb690.roa
Signing time: Tue 11 Mar 2025 14:52:31 +0000
ROA not before: Tue 11 Mar 2025 14:52:31 +0000
ROA not after: Tue 15 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:a000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c8:e1:f6:70:58:db:1f:79:2e:39:fc:13:28:f1:4f:4c:ad:10:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Mar 11 14:52:31 2025 GMT
Not After : Apr 15 23:59:59 2025 GMT
Subject: CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c4:18:6f:84:05:81:bb:b7:40:24:af:0b:bf:
3e:ae:76:39:b6:cf:2c:4c:77:b5:70:22:29:c0:6e:
fc:a9:43:7a:2f:55:9b:6d:14:86:45:31:57:f5:0c:
e8:04:2b:bd:dd:ca:7f:60:8b:a1:c9:ba:07:37:1c:
7c:8f:68:27:52:d1:88:37:ca:77:bb:3a:a9:1d:d0:
b3:07:33:9e:85:23:20:47:d3:1f:60:bb:25:98:03:
04:40:e4:08:ad:90:22:e8:14:84:5a:ca:38:cd:2c:
54:ff:87:b9:56:eb:24:21:29:92:1f:72:cf:f3:a8:
62:6c:96:53:da:bf:70:20:14:a3:ab:0c:9b:b9:38:
df:a0:90:a1:31:94:c2:ac:31:16:71:d4:2a:e2:85:
08:1a:d3:79:23:f0:ba:23:a9:ab:f7:3d:ef:18:e4:
79:31:23:f0:03:04:62:95:41:76:80:d2:98:2a:71:
b9:2f:10:91:27:f5:32:ea:51:bc:11:7a:49:7a:fb:
0b:ef:8f:df:07:93:a5:e8:c1:09:34:e6:5b:88:51:
58:19:43:7d:9d:1e:00:7f:aa:8a:ed:80:b5:32:8d:
0c:11:c7:eb:28:a7:73:86:02:98:ec:fc:13:15:ac:
f4:a4:fe:01:6d:cd:f6:32:e1:ce:e8:03:84:56:20:
62:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:43:14:F1:E2:D3:22:C6:FF:E4:CA:5E:A5:73:00:FF:4A:52:6C:A0
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/bfd462bd-2e1f-485f-aa9c-e7e0c0bcb690.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:a000::/36
Signature Algorithm: sha256WithRSAEncryption
22:c1:c1:2f:50:a7:9f:b3:b5:1a:fe:72:a3:75:94:21:b5:18:
85:63:5b:14:15:33:62:5f:e7:c7:b7:b0:3a:ac:be:ea:52:b8:
13:f0:ba:c9:f6:5b:cc:fa:5b:d7:a1:23:94:ff:46:ab:74:b1:
ce:5e:56:db:85:5e:2c:71:bd:f0:69:be:ff:62:ff:bb:82:d3:
66:6f:9c:e0:49:32:db:4e:cf:5e:b9:72:58:76:b1:b2:1b:a1:
f6:f3:08:90:14:f6:c8:7b:3e:53:60:6a:49:cc:7e:33:94:86:
ac:e1:ed:d1:78:28:78:f6:3e:e1:e9:46:30:3e:0b:80:7f:26:
04:1e:27:29:f7:34:eb:86:93:f7:57:97:be:cc:e5:1e:44:f1:
79:c6:68:6a:57:74:03:89:75:40:a5:9b:30:32:27:3f:bc:06:
78:c3:e1:c9:98:d7:52:75:df:61:6f:bf:92:bb:c8:33:e4:5a:
ec:36:13:2a:e3:92:39:1b:ca:50:d8:ed:e9:9d:dc:97:d3:c0:
95:c5:ea:0c:b9:96:ad:eb:cb:7e:70:9a:fd:c2:3b:9f:5f:e6:
93:ad:a6:3a:ac:11:06:5a:58:b1:68:cb:92:2a:3a:65:ec:0c:
a3:e2:fd:85:9c:1a:79:bf:3b:56:f1:f9:38:8a:f9:fe:ae:7b:
a8:06:2b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:28:46 2025 by rpki-client