Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0044471b-07bc-4caf-8218-11c01ca18965.roa
File: 0044471b-07bc-4caf-8218-11c01ca18965.roa (raw, json)
Hash identifier: il5YBsLr47voYBQC4hmHKOG5n0nZbxTxc4JPvUUwSYo=
Subject key identifier: 87:6F:C4:3E:7A:8F:06:FD:0B:D2:AA:AC:76:B5:27:7E:3D:4A:FB:07
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 206E237799B0896B39C0CF96D7709239040AFA36
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0044471b-07bc-4caf-8218-11c01ca18965.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 85.151.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:6e:23:77:99:b0:89:6b:39:c0:cf:96:d7:70:92:39:04:0a:fa:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:4f:8a:4e:f1:92:62:27:21:f2:04:4f:7f:
40:07:ff:b0:cf:e0:4b:70:36:7a:a9:12:b6:b0:21:
f6:d9:7f:5c:07:ca:80:4b:bb:84:84:bd:6e:2f:5b:
c7:bd:f6:93:5c:53:ba:35:f1:ac:7e:90:6f:44:a7:
5e:a5:86:96:66:4f:5b:d3:a5:cb:99:07:22:08:9f:
dd:6c:e0:98:35:1d:85:72:cb:8f:40:8d:f2:c1:7c:
f8:25:e2:61:69:1b:81:23:d6:ba:82:53:0e:dd:ac:
6b:fb:de:6e:a1:7b:d5:d0:4b:8f:51:ed:bf:ca:16:
ce:11:b8:e2:85:75:a3:07:1d:c4:2d:d1:56:74:de:
9c:0e:9a:62:10:27:65:e4:ed:11:f2:f1:9e:45:3b:
1d:f9:d3:8b:86:65:b8:1a:1e:30:40:88:9d:3b:7a:
ee:cf:ca:b7:db:0e:c0:5c:33:0d:1e:f0:9c:bc:9b:
cd:92:d1:36:63:40:f9:bc:d7:1c:0f:49:80:04:f0:
26:e3:35:ab:bc:aa:bf:d7:d5:8f:77:b9:2d:e3:0e:
1a:05:61:ba:53:e3:50:4d:ec:bd:93:cd:fa:ae:57:
0a:31:69:8b:49:ea:4c:d4:7b:f6:1c:5b:10:de:26:
3b:03:79:f3:20:d2:fb:51:8a:02:66:85:04:a9:53:
46:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6F:C4:3E:7A:8F:06:FD:0B:D2:AA:AC:76:B5:27:7E:3D:4A:FB:07
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0044471b-07bc-4caf-8218-11c01ca18965.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:0a:8c:a9:b2:ae:5e:02:ea:18:9c:a2:84:0c:64:09:7f:c7:
75:40:31:f3:a2:ca:c5:a2:7f:4c:70:e0:23:13:57:d5:4e:4f:
0f:38:d3:d9:be:47:19:13:71:4e:1f:9f:08:5a:a6:d0:eb:35:
bd:23:03:bc:a9:eb:e5:5a:9c:f4:90:b6:67:f2:10:77:bd:04:
fe:7a:ac:db:dd:61:21:3d:67:9e:0b:32:c1:e4:d0:64:4a:bd:
81:01:60:ba:60:a6:b9:47:72:d3:3f:00:b1:86:dc:62:ca:16:
f2:92:a0:d1:c2:02:f8:85:2c:5e:c8:91:51:e2:2c:06:67:af:
7a:58:cf:74:70:2e:58:10:12:dc:59:79:cc:56:15:44:70:41:
93:41:4b:f4:fc:7c:36:82:50:67:05:21:de:95:7d:89:93:39:
f5:3a:e9:9d:81:f1:27:c4:be:92:95:d4:be:a5:2c:de:01:4c:
c3:67:c5:21:cb:1f:09:14:11:a1:73:c1:85:45:4a:f6:9b:01:
59:ad:02:5f:1c:52:2d:24:ea:ce:78:b5:26:03:26:7d:0a:3d:
f9:38:c2:51:3d:2f:b8:c3:39:ec:d9:46:0d:80:a2:0f:58:f5:
1f:c4:91:45:c8:50:8c:e3:84:0e:65:96:83:5e:21:08:a1:a9:
fc:d1:74:60
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUIG4jd5mwiWs5wM+W13CSOQQK+jYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAxMDcwMDAwMDBaFw0yNTAyMTEyMzU5NTlaMHoxSTBHBgNV
BAUTQDRiZjhkNWYxOTU5NGM4ZmQ5M2IxNjNhZmE0MjY4NDgxOGVjYTAzZWM1MDI4
ZWJkZWQyMjg2YjIwODA1MTRlMmQxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKWBT4pO8ZJiJyHyBE9/QAf/sM/gS3A2eqkStrAh9tl/XAfKgEu7hIS9bi9b
x732k1xTujXxrH6Qb0SnXqWGlmZPW9Oly5kHIgif3WzgmDUdhXLLj0CN8sF8+CXi
YWkbgSPWuoJTDt2sa/vebqF71dBLj1Htv8oWzhG44oV1owcdxC3RVnTenA6aYhAn
ZeTtEfLxnkU7HfnTi4ZluBoeMECInTt67s/Kt9sOwFwzDR7wnLybzZLRNmNA+bzX
HA9JgATwJuM1q7yqv9fVj3e5LeMOGgVhulPjUE3svZPN+q5XCjFpi0nqTNR79hxb
EN4mOwN58yDS+1GKAmaFBKlTRoUCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSHb8Q+
eo8G/QvSqqx2tSd+PUr7BzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MDA0NDQ3MWItMDdiYy00Y2FmLTgyMTgtMTFjMDFjYTE4OTY1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAFWXMA0G
CSqGSIb3DQEBCwUAA4IBAQBVCoypsq5eAuoYnKKEDGQJf8d1QDHzosrFon9McOAj
E1fVTk8PONPZvkcZE3FOH58IWqbQ6zW9IwO8qevlWpz0kLZn8hB3vQT+eqzb3WEh
PWeeCzLB5NBkSr2BAWC6YKa5R3LTPwCxhtxiyhbykqDRwgL4hSxeyJFR4iwGZ696
WM90cC5YEBLcWXnMVhVEcEGTQUv0/Hw2glBnBSHelX2Jkzn1OumdgfEnxL6SldS+
pSzeAUzDZ8Uhyx8JFBGhc8GFRUr2mwFZrQJfHFItJOrOeLUmAyZ9Cj35OMJRPS+4
wzns2UYNgKIPWPUfxJFFyFCM44QOZZaDXiEIoan80XRg
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:40:43 2025 by rpki-client