Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/f4581009-959f-4805-904e-a85043ac559b.roa
File: f4581009-959f-4805-904e-a85043ac559b.roa (raw, json)
Hash identifier: ThazYvPoVj6gZinMAN7SqOdRKyZfOsjIb9R0u8OamqM=
Subject key identifier: D2:2D:89:3A:98:71:64:4B:B3:2B:99:60:54:E1:01:33:C8:8D:15:D3
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 609207BBAA203FB61A244B0A0B954AA024405CE7
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/f4581009-959f-4805-904e-a85043ac559b.roa
Signing time: Tue 11 Mar 2025 14:54:32 +0000
ROA not before: Tue 11 Mar 2025 14:54:32 +0000
ROA not after: Tue 15 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:a800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:92:07:bb:aa:20:3f:b6:1a:24:4b:0a:0b:95:4a:a0:24:40:5c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Mar 11 14:54:32 2025 GMT
Not After : Apr 15 23:59:59 2025 GMT
Subject: CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:13:ba:90:00:94:da:a9:ab:f4:94:5a:03:13:
f2:78:71:6b:22:99:4d:3b:b8:49:ee:4b:02:74:28:
87:34:ff:19:0e:1d:37:41:8b:7e:eb:f9:d7:2b:5c:
b8:58:c5:b6:c3:32:5e:2f:7b:5c:b7:d4:9f:ca:bb:
b1:28:71:cf:54:47:4a:b8:e5:c3:cb:3b:5d:1f:80:
ec:dd:c9:0e:87:37:e1:89:98:15:f6:f7:b3:8f:b3:
3f:4f:c8:ff:c8:07:3a:5f:af:cb:93:a1:85:69:7d:
09:ea:23:5f:d4:08:3c:07:1a:3e:ef:d5:b0:e4:00:
9a:6f:43:10:2a:1a:c7:b1:57:a8:2e:3d:8c:5b:89:
cc:c1:98:bd:72:56:75:a7:be:d4:9b:1f:67:92:87:
cb:8f:fe:d9:51:ba:18:8f:88:af:95:48:25:06:90:
91:9f:bb:13:50:dc:1e:50:75:5b:f6:48:ca:8a:6e:
cb:6f:3a:76:13:ce:a5:a2:44:73:98:40:c3:cd:22:
91:90:3d:ff:56:14:93:99:aa:ee:99:c3:26:f8:e9:
a3:97:43:b8:6f:c7:92:59:78:e7:da:1f:c6:f1:aa:
7d:da:f9:8d:01:74:7c:34:88:5b:f6:ac:4b:53:3f:
9f:e2:36:f3:8b:e6:82:cf:82:3e:04:79:23:e8:67:
fb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2D:89:3A:98:71:64:4B:B3:2B:99:60:54:E1:01:33:C8:8D:15:D3
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/f4581009-959f-4805-904e-a85043ac559b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:a800::/40
Signature Algorithm: sha256WithRSAEncryption
a9:ca:08:45:93:dc:02:af:d7:49:23:00:24:21:5d:e7:b2:84:
a3:cf:8b:8e:68:c6:51:d6:88:e7:c2:65:a4:1a:30:32:dd:d9:
ec:1e:4d:41:95:65:af:a6:89:ba:8b:9c:74:a7:df:69:de:62:
34:49:a9:58:1a:93:48:95:1d:87:5c:22:4a:d2:ff:2c:4d:c3:
35:86:25:e1:bb:69:72:db:a8:de:43:81:d1:da:7a:2c:76:fa:
6d:72:98:35:bb:36:6e:03:3e:63:77:b3:d9:c4:c1:23:05:5c:
c5:49:dc:34:d5:00:70:f9:9e:e9:ec:98:e7:67:2a:a9:de:d2:
a3:e4:33:d9:e3:49:8c:76:1a:6f:b4:4b:46:1d:99:50:a8:9e:
c3:bb:5e:26:c9:74:bf:fd:ab:92:a8:7a:2b:43:a2:d6:e0:7c:
03:cd:e9:b1:89:64:cf:cb:d6:ff:ef:a5:35:76:2a:ac:3e:16:
11:d1:b6:a9:3d:75:a5:29:85:66:5e:57:d9:9a:2b:69:1c:7e:
7b:dc:fc:01:cb:e9:25:ec:11:22:e9:57:04:3e:56:95:d7:22:
ef:e2:86:b6:f7:80:27:ec:5d:23:18:4f:c9:8b:7e:46:f1:ce:
63:20:da:ea:8f:fc:55:71:6a:0d:40:e7:de:9c:cf:a7:a5:54:
46:86:ed:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:30 2025 by rpki-client