Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa
File: 83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa (raw, json)
Hash identifier: T9k456TdaguUm1irwVoZ83WVhZrKzB2oVjY0R+ih668=
Subject key identifier: 72:07:6D:93:1E:B1:A1:BF:89:0C:94:CE:64:79:47:A7:51:65:9D:C3
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4B59C6D11F59C04154CF9FFB615D17EBBB67B238
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa
Signing time: Wed 05 Mar 2025 17:51:34 +0000
ROA not before: Wed 05 Mar 2025 17:51:34 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 213.72.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:59:c6:d1:1f:59:c0:41:54:cf:9f:fb:61:5d:17:eb:bb:67:b2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 5 17:51:34 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:57:b4:6a:ea:82:31:03:db:7c:2d:ad:82:a4:
81:3b:f3:e7:61:69:bc:49:03:17:37:26:17:9c:4c:
62:5a:d9:0e:bb:65:47:4a:17:d7:42:fe:72:14:ab:
3f:bb:a9:da:ea:60:70:01:c6:d2:99:cc:9c:eb:6f:
b8:7b:8a:94:a1:fe:55:ce:75:f5:83:b7:f5:7b:c6:
cc:5a:db:60:af:64:10:4f:89:a7:8c:b9:d8:65:be:
cf:20:44:5b:ab:a4:6a:40:02:cf:79:31:a2:29:5a:
2c:07:f5:d5:32:43:5d:99:55:4d:2c:9e:0d:6b:97:
a3:9f:63:f6:7f:15:ab:91:13:1e:cd:a2:9c:99:5d:
b1:2f:97:0c:56:0a:96:10:c6:9a:fe:0c:ae:16:a8:
e3:aa:b8:ad:0c:4c:e3:2b:6a:99:28:cd:9a:57:ff:
6f:12:20:6a:81:51:3f:4f:c6:61:da:cb:88:6c:7d:
2c:8b:c5:7e:40:15:93:26:1b:2a:03:13:40:3a:da:
b5:bd:cd:6f:2f:c5:4a:98:0a:1d:5f:3f:bb:f9:3a:
92:53:f5:80:d3:97:87:83:d4:5c:fb:86:31:9c:1d:
31:0e:ad:00:6f:25:92:c5:2e:49:1a:97:f2:18:d0:
4e:b1:79:05:73:0d:ff:51:56:00:b2:49:1a:e0:ed:
b9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:07:6D:93:1E:B1:A1:BF:89:0C:94:CE:64:79:47:A7:51:65:9D:C3
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.72.0.0/17
Signature Algorithm: sha256WithRSAEncryption
37:09:44:cf:48:41:1e:b9:9f:7d:40:6e:f2:be:6c:f6:cb:c3:
50:a2:47:01:4d:b1:dd:17:15:07:bd:71:ae:df:b5:ce:e8:be:
19:b7:af:12:ca:9a:cb:8e:15:5f:c9:87:fd:1a:74:62:59:21:
fa:19:5e:3c:02:d7:8d:01:f0:c9:7a:a8:fb:5d:a8:57:1f:43:
62:5a:8d:70:47:91:53:16:33:eb:e2:2a:0e:f8:7a:25:ac:36:
c4:86:ab:23:51:09:e0:c2:c3:25:cc:a1:1a:14:4b:ca:cf:d5:
76:e7:46:ce:fc:ee:45:06:d7:00:6a:34:8d:ba:24:2c:7a:04:
b3:d9:e8:71:b1:1d:79:07:d3:dd:7c:26:fd:8d:35:4c:68:9a:
ad:f0:6b:08:70:3a:04:0b:3e:2b:7a:d1:53:5f:05:08:c5:9a:
27:5c:99:25:a3:62:c1:01:c2:4e:f7:8e:b5:e2:93:89:a4:1e:
de:51:7c:2d:e7:82:92:c2:75:8d:f3:b4:21:b3:68:4a:bb:dd:
9f:05:05:24:b8:f7:13:02:66:40:3d:9d:c8:b5:5d:eb:e4:c9:
f3:f7:19:a3:cf:59:54:53:42:b8:31:e2:64:3c:32:a9:53:4e:
a0:35:57:5a:94:ff:e2:ef:31:92:6c:f3:76:e6:14:89:c9:b1:
e6:47:58:cc
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUS1nG0R9ZwEFUz5/7YV0X67tnsjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAzMDUxNzUxMzRaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQGI3NmMyMDEwMTM0NWMyMjM2ZGFjYWNhZjhkOGFhODFmZTEwNzJmOGM2Yjdi
Y2M1MzJlZGM5YjBhMDZiNmM1NGYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMVXtGrqgjED23wtrYKkgTvz52FpvEkDFzcmF5xMYlrZDrtlR0oX10L+chSr
P7up2upgcAHG0pnMnOtvuHuKlKH+Vc519YO39XvGzFrbYK9kEE+Jp4y52GW+zyBE
W6ukakACz3kxoilaLAf11TJDXZlVTSyeDWuXo59j9n8Vq5ETHs2inJldsS+XDFYK
lhDGmv4Mrhao46q4rQxM4ytqmSjNmlf/bxIgaoFRP0/GYdrLiGx9LIvFfkAVkyYb
KgMTQDratb3Nby/FSpgKHV8/u/k6klP1gNOXh4PUXPuGMZwdMQ6tAG8lksUuSRqX
8hjQTrF5BXMN/1FWALJJGuDtuUUCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRyB22T
HrGhv4kMlM5keUenUWWdwzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ODNhM2RiZDUtMDU5YS00Zjk1LWI1NWItMjZjNzg2ZjkxZTNiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9VIADAN
BgkqhkiG9w0BAQsFAAOCAQEANwlEz0hBHrmffUBu8r5s9svDUKJHAU2x3RcVB71x
rt+1zui+GbevEsqay44VX8mH/Rp0Ylkh+hlePALXjQHwyXqo+12oVx9DYlqNcEeR
UxYz6+IqDvh6Jaw2xIarI1EJ4MLDJcyhGhRLys/VdudGzvzuRQbXAGo0jbokLHoE
s9nocbEdeQfT3Xwm/Y01TGiarfBrCHA6BAs+K3rRU18FCMWaJ1yZJaNiwQHCTveO
teKTiaQe3lF8LeeCksJ1jfO0IbNoSrvdnwUFJLj3EwJmQD2dyLVd6+TJ8/cZo89Z
VFNCuDHiZDwyqVNOoDVXWpT/4u8xkmzzduYUicmx5kdYzA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:32 2025 by rpki-client