Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1c6a1167-c110-4a43-924e-7edbc1f49e2b.roa
File: 1c6a1167-c110-4a43-924e-7edbc1f49e2b.roa (raw, json)
Hash identifier: xgw6AKkzuW2n0i365pUaa2Sh7gol9VCXTE2utY9ha5Y=
Subject key identifier: D0:4A:94:48:EF:9D:6D:FF:08:1F:1A:E0:00:08:BD:8C:79:FF:CC:0E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1424BD8D9F9838B7862C15EFE24814CC2CEE8E76
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1c6a1167-c110-4a43-924e-7edbc1f49e2b.roa
Signing time: Tue 31 Dec 2024 00:00:00 +0000
ROA not before: Tue 31 Dec 2024 00:00:00 +0000
ROA not after: Tue 04 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.206.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:24:bd:8d:9f:98:38:b7:86:2c:15:ef:e2:48:14:cc:2c:ee:8e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 31 00:00:00 2024 GMT
Not After : Feb 4 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a5:26:bd:51:57:20:43:cc:0e:0b:e5:f3:df:
73:2a:1a:4a:08:90:d3:08:e9:f2:95:39:4f:36:4b:
b8:fe:d7:80:11:b6:36:ca:2a:cf:24:a5:92:10:a7:
f4:67:63:da:d8:77:b7:18:e1:12:b4:42:a0:c1:d8:
ef:c5:35:54:95:54:0b:8d:d6:70:4c:70:56:eb:69:
b7:34:14:cf:c0:2b:fa:78:c8:91:42:ca:1e:c3:04:
d5:6f:6d:d7:7e:83:eb:c6:a6:d7:67:eb:5b:4f:97:
56:11:f3:ab:ca:61:5f:aa:e7:b5:e9:f7:90:93:d3:
99:8c:2f:04:96:7d:e8:65:2b:dd:ec:e9:a7:93:1b:
f0:c3:fe:69:55:f2:93:e1:80:e2:cd:0f:b7:9c:61:
97:8a:65:ad:1a:e9:21:8f:66:be:34:d3:e7:4b:ee:
54:fa:45:18:b0:af:9a:5a:16:0f:3b:b6:24:27:39:
c2:96:f5:85:e5:d5:fa:22:d0:43:c7:6a:d2:d1:d8:
46:07:f6:f0:2c:58:82:62:9e:1b:44:98:88:21:36:
bb:44:ba:75:0c:5b:0c:c5:97:19:05:d5:4e:a1:a4:
c0:2f:df:20:ee:15:d6:85:42:7e:96:6e:d3:5c:08:
59:14:06:44:1a:8a:6a:c7:37:6a:c0:de:a6:a6:90:
c3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4A:94:48:EF:9D:6D:FF:08:1F:1A:E0:00:08:BD:8C:79:FF:CC:0E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1c6a1167-c110-4a43-924e-7edbc1f49e2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.206.0.0/15
Signature Algorithm: sha256WithRSAEncryption
36:6a:ed:a8:8d:92:16:d2:ef:b1:c2:60:a8:70:79:a0:d1:24:
03:b8:30:a2:3d:f1:4f:0f:e4:7d:cd:7a:6d:99:e2:27:de:e3:
0d:da:8d:a4:40:16:cc:ab:bf:fc:f6:ed:ac:a9:e9:fc:33:70:
fd:d6:e4:d7:a2:b1:45:8c:4a:c2:27:1e:7d:70:06:66:6f:c6:
8e:0b:61:45:15:56:92:cd:5e:1f:36:f8:a2:9b:bf:55:2f:19:
17:df:b6:ca:a7:e6:06:05:d6:5e:1d:c8:05:23:b4:24:4a:9d:
f1:20:cf:d9:af:7b:b1:db:06:e1:6f:5a:4e:13:a3:db:f0:93:
62:9a:49:1f:a7:c0:bf:b1:c9:34:89:9e:ec:01:5e:2b:d0:f2:
05:fb:b9:ea:90:7a:91:2d:8f:e9:6e:c8:69:87:7d:0b:d8:e1:
78:65:30:9e:23:19:08:de:d6:04:9f:2d:cb:2b:5f:28:bd:22:
07:5b:ba:5e:5e:50:cb:c1:67:6d:c6:ec:e3:35:74:a8:3d:b8:
92:cc:22:e9:9e:cf:d0:8a:46:a2:ac:9b:90:5c:0a:25:fa:fd:
2c:45:a4:b1:a1:45:36:be:fd:89:67:31:94:f3:fb:4d:e1:f4:
6b:e0:45:3a:97:35:fb:a5:8e:78:d0:a0:91:e9:37:2c:27:17:
4c:e4:1b:82
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUFCS9jZ+YOLeGLBXv4kgUzCzujnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDEyMzEwMDAwMDBaFw0yNTAyMDQyMzU5NTlaMHoxSTBHBgNV
BAUTQDlhYjI3NzExODk1YmM3ZGZmZThhOWUzY2FlMjE4NjQzYmE3MTNmYzdlYTc4
NDQ5NjU2ZGYzYTdjY2JjOTE4YjIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANClJr1RVyBDzA4L5fPfcyoaSgiQ0wjp8pU5TzZLuP7XgBG2NsoqzySlkhCn
9Gdj2th3txjhErRCoMHY78U1VJVUC43WcExwVutptzQUz8Ar+njIkULKHsME1W9t
136D68am12frW0+XVhHzq8phX6rnten3kJPTmYwvBJZ96GUr3ezpp5Mb8MP+aVXy
k+GA4s0Pt5xhl4plrRrpIY9mvjTT50vuVPpFGLCvmloWDzu2JCc5wpb1heXV+iLQ
Q8dq0tHYRgf28CxYgmKeG0SYiCE2u0S6dQxbDMWXGQXVTqGkwC/fIO4V1oVCfpZu
01wIWRQGRBqKasc3asDepqaQwy8CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTQSpRI
751t/wgfGuAACL2Mef/MDjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MWM2YTExNjctYzExMC00YTQzLTkyNGUtN2VkYmMxZjQ5ZTJiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPOMA0G
CSqGSIb3DQEBCwUAA4IBAQA2au2ojZIW0u+xwmCocHmg0SQDuDCiPfFPD+R9zXpt
meIn3uMN2o2kQBbMq7/89u2sqen8M3D91uTXorFFjErCJx59cAZmb8aOC2FFFVaS
zV4fNviim79VLxkX37bKp+YGBdZeHcgFI7QkSp3xIM/Zr3ux2wbhb1pOE6Pb8JNi
mkkfp8C/sck0iZ7sAV4r0PIF+7nqkHqRLY/pbshph30L2OF4ZTCeIxkI3tYEny3L
K18ovSIHW7peXlDLwWdtxuzjNXSoPbiSzCLpns/QikairJuQXAol+v0sRaSxoUU2
vv2JZzGU8/tN4fRr4EU6lzX7pY540KCR6TcsJxdM5BuC
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:43 2025 by rpki-client