Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/226b8c83-9647-47e2-847b-1787f3d54040.roa
File: 226b8c83-9647-47e2-847b-1787f3d54040.roa (raw, json)
Hash identifier: ivrG6eITz5YtPbefRWvAEIJ/uG+RvSso6W8VPRd+MiU=
Subject key identifier: 49:21:CF:30:16:04:4F:6C:84:9D:01:1F:6C:55:2D:73:8B:D5:B8:0F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 36155B71C54D290306855328EF5FC426559CD588
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/226b8c83-9647-47e2-847b-1787f3d54040.roa
Signing time: Fri 07 Mar 2025 15:10:36 +0000
ROA not before: Fri 07 Mar 2025 15:10:36 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.94.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:15:5b:71:c5:4d:29:03:06:85:53:28:ef:5f:c4:26:55:9c:d5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 7 15:10:36 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:04:b1:1c:d0:21:5c:a5:2e:19:3b:1d:6a:b1:
1d:fd:0c:7e:9c:02:26:33:1c:03:e1:87:b7:86:b1:
7e:da:65:57:c9:cb:24:dd:02:b3:09:20:a7:c5:4f:
56:b0:74:36:91:4d:b0:02:97:92:7b:86:fd:c5:8b:
b5:de:35:35:78:d9:e7:30:82:3c:a8:f3:17:b8:f6:
05:97:ec:af:3b:df:b6:4d:b7:93:b0:db:c8:bf:36:
ba:21:e1:06:b4:ba:f4:8b:0d:ea:9c:72:15:79:2c:
fa:02:b2:af:a5:d2:f9:6d:65:8d:4b:72:90:28:c7:
49:db:eb:4d:bd:2b:e6:75:fc:f9:b0:44:b5:00:82:
88:60:a7:84:92:c6:7d:f3:bc:3c:d3:20:d6:3b:14:
7e:4a:6d:31:21:88:f9:79:3f:14:f3:4b:6e:3c:de:
e5:c1:ad:61:5b:71:b7:41:01:69:46:23:ed:44:b3:
69:95:68:38:e5:db:fd:b4:2c:c6:95:c2:62:b5:da:
46:9f:59:7a:00:2b:d5:e3:61:c3:fc:34:ec:99:52:
7c:b8:bb:5e:06:01:d1:c0:69:88:72:b5:96:b4:b2:
69:ae:d8:83:63:4f:83:17:40:52:15:3f:20:1d:de:
8f:ea:1a:a3:ac:fc:40:74:a8:77:af:18:88:8c:14:
df:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:21:CF:30:16:04:4F:6C:84:9D:01:1F:6C:55:2D:73:8B:D5:B8:0F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/226b8c83-9647-47e2-847b-1787f3d54040.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.94.0.0/15
Signature Algorithm: sha256WithRSAEncryption
d0:84:a7:3b:08:6f:a1:51:fe:94:3b:f2:34:c9:5b:38:50:66:
43:17:56:24:c2:13:2c:33:de:79:46:02:17:37:9f:53:8f:7a:
de:df:b9:5b:45:2a:db:a0:5d:6e:dc:32:a4:a9:d8:25:96:79:
7f:15:48:4f:90:39:2f:dc:96:88:7e:15:d4:80:03:a6:fb:03:
8c:e1:2b:f7:09:79:2e:d4:1e:b7:60:0a:bc:da:59:8f:16:da:
1c:c3:49:76:06:cc:ff:1d:62:a1:1d:bd:bd:bb:c3:29:09:2e:
f4:3b:d7:9e:d0:16:bd:e3:5a:26:f7:c6:64:4a:d8:e8:7d:bc:
03:b1:28:f2:8b:4f:aa:41:b7:5a:ab:34:97:7f:ba:c2:8d:7b:
de:d5:cb:4e:49:ba:6b:f9:b0:79:17:5d:dd:0b:eb:d3:bb:9d:
f5:d1:9a:91:00:1c:f7:e6:1d:71:98:3c:17:1d:f8:98:d3:da:
6a:4b:c8:a0:62:b9:49:da:f0:d0:bb:da:a9:28:4f:da:f0:70:
b3:62:17:a7:dc:f8:f8:f8:9c:47:1a:94:89:fe:59:13:fe:4c:
20:76:4b:32:77:90:75:f5:c6:4e:f1:81:8c:cd:26:c6:55:7c:
c1:0a:bb:52:56:a3:5a:11:81:b1:5b:90:67:b0:e8:1c:97:51:
d6:c6:07:cc
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUNhVbccVNKQMGhVMo71/EJlWc1YgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAzMDcxNTEwMzZaFw0yNTA0MTEyMzU5NTlaMHoxSTBHBgNV
BAUTQDFkZDRlZjBkMWJmYWU1NDFiYTBiMTliNTIyODBmMzlkZDhmYTMxMTMzMWYz
MTc1YzI4ZGMyNWM4OTM0NGM5OWExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK8EsRzQIVylLhk7HWqxHf0MfpwCJjMcA+GHt4axftplV8nLJN0Cswkgp8VP
VrB0NpFNsAKXknuG/cWLtd41NXjZ5zCCPKjzF7j2BZfsrzvftk23k7DbyL82uiHh
BrS69IsN6pxyFXks+gKyr6XS+W1ljUtykCjHSdvrTb0r5nX8+bBEtQCCiGCnhJLG
ffO8PNMg1jsUfkptMSGI+Xk/FPNLbjze5cGtYVtxt0EBaUYj7USzaZVoOOXb/bQs
xpXCYrXaRp9ZegAr1eNhw/w07JlSfLi7XgYB0cBpiHK1lrSyaa7Yg2NPgxdAUhU/
IB3ej+oao6z8QHSod68YiIwU34UCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRJIc8w
FgRPbISdAR9sVS1zi9W4DzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MjI2YjhjODMtOTY0Ny00N2UyLTg0N2ItMTc4N2YzZDU0MDQwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATNeMA0G
CSqGSIb3DQEBCwUAA4IBAQDQhKc7CG+hUf6UO/I0yVs4UGZDF1YkwhMsM955RgIX
N59Tj3re37lbRSrboF1u3DKkqdgllnl/FUhPkDkv3JaIfhXUgAOm+wOM4Sv3CXku
1B63YAq82lmPFtocw0l2Bsz/HWKhHb29u8MpCS70O9ee0Ba941om98ZkStjofbwD
sSjyi0+qQbdaqzSXf7rCjXve1ctOSbpr+bB5F13dC+vTu5310ZqRABz35h1xmDwX
HfiY09pqS8igYrlJ2vDQu9qpKE/a8HCzYhen3Pj4+JxHGpSJ/lkT/kwgdksyd5B1
9cZO8YGMzSbGVXzBCrtSVqNaEYGxW5BnsOgcl1HWxgfM
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:26 2025 by rpki-client