Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/51429a37-e3fd-4b49-a184-1e07ed522f97.roa
File: 51429a37-e3fd-4b49-a184-1e07ed522f97.roa (raw, json)
Hash identifier: tZKOPSANM6kOrdCDCoqunl2UZJxEUOmAdVJfkhIuw1o=
Subject key identifier: D8:57:FC:3B:D0:B7:71:2B:72:57:F7:31:2E:B0:44:FB:5F:69:4E:53
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3C4324B146B57CC19750784FCFBF1618E59093E9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/51429a37-e3fd-4b49-a184-1e07ed522f97.roa
Signing time: Wed 05 Mar 2025 17:51:50 +0000
ROA not before: Wed 05 Mar 2025 17:51:50 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.3.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:43:24:b1:46:b5:7c:c1:97:50:78:4f:cf:bf:16:18:e5:90:93:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 5 17:51:50 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c6:6a:53:e5:66:16:7e:f6:07:d6:8e:c2:ea:
eb:4b:9e:91:16:71:c3:0f:2b:c3:d2:66:30:b7:3a:
42:29:59:4a:a1:61:eb:3e:4f:cc:8f:e1:86:fa:82:
ef:3e:ef:d6:9c:1c:ae:e9:24:4f:df:62:d0:60:ae:
bc:b1:91:e2:09:ef:47:a8:87:a6:84:c2:da:87:17:
45:f2:f1:50:40:75:44:e7:5a:8c:ae:bf:68:01:22:
c0:6f:97:3d:4e:c8:9c:35:c7:a6:37:84:dd:13:ee:
2e:81:83:78:ef:4f:58:c4:32:40:1b:8b:52:bf:78:
70:54:a8:cc:30:06:3d:55:3d:78:25:65:6e:88:97:
b2:96:5f:bf:99:e3:6e:d0:64:98:c6:6c:12:54:02:
c8:ee:ff:a5:73:c4:2a:50:31:d1:f0:f2:ae:2b:c9:
5b:f6:c8:a9:ec:79:50:1c:72:90:cf:04:9e:3b:c9:
d7:94:59:7d:d9:e9:65:e0:34:f4:b1:33:68:e2:29:
8a:67:36:5e:29:bb:ac:ee:9a:77:32:08:cd:98:25:
ac:86:7e:f1:8f:64:0e:e4:67:5b:eb:d0:b9:3e:0f:
bf:63:b6:65:34:74:5a:b8:21:f0:bf:0c:91:76:f2:
56:c8:7b:75:0a:86:4a:9b:6e:78:f0:cb:3c:c6:85:
07:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:57:FC:3B:D0:B7:71:2B:72:57:F7:31:2E:B0:44:FB:5F:69:4E:53
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/51429a37-e3fd-4b49-a184-1e07ed522f97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:2b:94:b4:9d:a6:ab:e4:fa:f1:b7:61:1f:01:08:68:71:c7:
8d:b2:ef:47:21:40:0b:1e:a5:08:65:78:40:10:33:56:25:a6:
82:1f:80:03:5f:1d:07:ba:38:9e:63:5b:8b:bc:11:36:4d:c6:
9f:4c:b8:ff:af:81:41:06:cf:58:1a:6e:3e:84:6e:1b:62:3d:
2c:69:48:75:3e:58:10:72:e3:86:1a:58:4c:14:82:27:79:eb:
9b:b8:7f:52:c7:9c:e0:c1:37:38:dd:a1:7d:3b:6d:9f:99:57:
df:2b:2c:bc:24:9b:3f:5d:20:1a:61:04:86:73:de:d8:10:52:
c4:60:41:09:a0:45:65:4b:52:0e:3d:32:66:f1:39:0b:7d:73:
7b:59:26:70:47:f5:df:f0:f8:37:24:35:51:b1:bd:35:99:5d:
f5:a7:83:1b:f2:7d:6f:11:8b:39:01:f8:56:71:c3:9c:f2:9e:
23:b8:f0:8f:9e:8d:b2:53:48:7c:7f:36:bb:9e:f7:82:4f:80:
20:c6:02:3a:e8:4c:b5:78:bb:9d:29:9d:86:73:3a:2f:54:cf:
56:5a:15:bf:46:86:59:8f:48:8c:fb:8d:77:ba:90:98:99:e3:
8b:fe:5d:3d:28:79:e2:d1:30:97:7c:38:11:fc:2d:8f:72:ae:
15:db:0a:1a
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUPEMksUa1fMGXUHhPz78WGOWQk+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAzMDUxNzUxNTBaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQGIyYjliYWU5NGFlYTZlZmQ5N2E5ZDNjNjZlYTg4MGY0NzBkNTg0ZmU4ZDA5
OTYyYmY0YTUwZTg3ZDRmMzhkZWUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANLGalPlZhZ+9gfWjsLq60uekRZxww8rw9JmMLc6QilZSqFh6z5PzI/hhvqC
7z7v1pwcrukkT99i0GCuvLGR4gnvR6iHpoTC2ocXRfLxUEB1ROdajK6/aAEiwG+X
PU7InDXHpjeE3RPuLoGDeO9PWMQyQBuLUr94cFSozDAGPVU9eCVlboiXspZfv5nj
btBkmMZsElQCyO7/pXPEKlAx0fDyrivJW/bIqex5UBxykM8EnjvJ15RZfdnpZeA0
9LEzaOIpimc2Xim7rO6adzIIzZglrIZ+8Y9kDuRnW+vQuT4Pv2O2ZTR0Wrgh8L8M
kXbyVsh7dQqGSptuePDLPMaFB50CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTYV/w7
0LdxK3JX9zEusET7X2lOUzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NTE0MjlhMzctZTNmZC00YjQ5LWExODQtMWUwN2VkNTIyZjk3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADMDMA0G
CSqGSIb3DQEBCwUAA4IBAQBBK5S0naar5Prxt2EfAQhocceNsu9HIUALHqUIZXhA
EDNWJaaCH4ADXx0HujieY1uLvBE2TcafTLj/r4FBBs9YGm4+hG4bYj0saUh1PlgQ
cuOGGlhMFIIneeubuH9Sx5zgwTc43aF9O22fmVffKyy8JJs/XSAaYQSGc97YEFLE
YEEJoEVlS1IOPTJm8TkLfXN7WSZwR/Xf8Pg3JDVRsb01mV31p4Mb8n1vEYs5AfhW
ccOc8p4juPCPno2yU0h8fza7nveCT4AgxgI66Ey1eLudKZ2GczovVM9WWhW/RoZZ
j0iM+413upCYmeOL/l09KHni0TCXfDgR/C2Pcq4V2woa
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:47:13 2025 by rpki-client