Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a1fa391-4377-44ba-a6c7-c785fc9a7733.roa
File: 9a1fa391-4377-44ba-a6c7-c785fc9a7733.roa (raw, json)
Hash identifier: 3fsNWvKCgKpnpXdjkuX4TeDBd76OiDdn1LaqZHu330w=
Subject key identifier: 55:B4:54:14:B7:85:F8:8D:7B:22:AC:BE:FE:67:B4:14:4F:CB:B4:81
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 24D77DE71F75A135BE750B344B850D83263F8641
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a1fa391-4377-44ba-a6c7-c785fc9a7733.roa
Signing time: Fri 07 Mar 2025 15:10:28 +0000
ROA not before: Fri 07 Mar 2025 15:10:28 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.84.0.0/14 maxlen: 14
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d7:7d:e7:1f:75:a1:35:be:75:0b:34:4b:85:0d:83:26:3f:86:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 7 15:10:28 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:2a:01:84:ed:da:0c:c7:22:bb:d3:f5:64:
36:f9:9f:6a:38:ea:35:22:6c:2e:a2:7c:b6:7f:de:
55:ca:c5:03:a9:62:28:8c:48:8b:5b:c6:3d:c6:b8:
7b:cc:5d:76:53:6a:bf:12:cb:72:38:f1:f1:08:fb:
09:e1:5a:c3:92:49:6e:e2:6a:39:c0:4b:5c:93:3a:
71:f8:9e:b0:11:c9:91:8b:71:7a:6c:43:8e:1b:5f:
5c:0e:ae:b8:69:2e:d0:89:34:c9:fb:d9:7a:d2:6e:
ed:61:48:66:37:1e:da:f5:de:b9:51:82:31:13:be:
7f:6a:4a:d1:0d:a0:68:22:14:4d:a1:33:89:0b:95:
28:e8:17:69:16:83:dd:bb:d4:ef:e7:32:59:af:dd:
7f:97:fd:88:94:1a:a3:7e:45:6a:50:6a:71:0d:f9:
88:bd:b5:18:81:f8:3e:9e:c9:6d:12:89:88:05:4d:
0c:8a:7c:75:1e:3f:db:5a:04:c3:15:9e:e6:c1:44:
f3:99:92:a7:56:1b:08:49:4d:ef:9d:a3:a7:a5:51:
40:a2:65:59:4c:11:76:c7:62:9d:fe:46:43:0b:3f:
c8:74:b6:3c:f6:5b:7a:67:e2:92:f3:6f:88:9a:59:
e0:bd:32:17:ae:02:ea:a9:44:b1:05:df:13:00:1c:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B4:54:14:B7:85:F8:8D:7B:22:AC:BE:FE:67:B4:14:4F:CB:B4:81
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a1fa391-4377-44ba-a6c7-c785fc9a7733.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.84.0.0/14
Signature Algorithm: sha256WithRSAEncryption
00:ef:bd:16:ac:f4:30:50:70:24:1a:c0:33:0b:12:e8:77:e8:
20:90:05:1a:bd:50:ea:33:6d:0b:94:9e:4d:3b:e0:8e:a5:bc:
f8:80:ea:9d:69:de:98:1e:85:09:48:cb:26:aa:6c:f5:15:8a:
1e:81:61:39:2b:19:bb:95:88:99:e2:65:af:c1:bb:d1:3e:0a:
1d:a4:cf:89:45:41:80:51:9d:75:be:9c:1b:30:d3:28:ba:54:
eb:b5:e5:8e:16:c6:8b:6b:4d:c1:b7:d2:83:97:5c:a6:06:52:
4a:37:fe:9c:db:b4:75:09:23:54:6b:76:d8:14:1b:36:fb:13:
b5:97:02:dd:de:0f:c4:75:b0:2d:73:86:ce:b5:d3:17:fc:75:
e3:22:2e:1e:29:46:02:91:13:3b:65:5e:e5:4b:f4:46:03:2b:
cc:61:64:d6:58:a6:0a:17:9e:96:e8:bf:46:79:58:af:4c:c3:
56:0c:c8:11:54:08:08:60:1d:fe:09:e3:5d:25:94:fb:66:e0:
a0:33:44:4f:12:5b:7e:1a:80:ff:6e:5c:86:c2:fe:07:aa:b9:
e7:32:a2:1a:ff:98:3e:8f:7e:64:bb:d1:a7:25:4f:2f:cc:41:
d5:b3:6e:1c:8b:fc:36:01:65:d3:26:d4:d4:50:84:d5:32:4d:
98:2a:5e:97
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUJNd95x91oTW+dQs0S4UNgyY/hkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAzMDcxNTEwMjhaFw0yNTA0MTEyMzU5NTlaMHoxSTBHBgNV
BAUTQDNmYzAyNWQ1NWE2MTVlZmEzYmVmZjVmZWYwYmVlOWZhMjJmZWVlOThkNGZm
ZmQzZDY5ODgwNjVmZGYyMzU4OWIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMalKgGE7doMxyK70/VkNvmfajjqNSJsLqJ8tn/eVcrFA6liKIxIi1vGPca4
e8xddlNqvxLLcjjx8Qj7CeFaw5JJbuJqOcBLXJM6cfiesBHJkYtxemxDjhtfXA6u
uGku0Ik0yfvZetJu7WFIZjce2vXeuVGCMRO+f2pK0Q2gaCIUTaEziQuVKOgXaRaD
3bvU7+cyWa/df5f9iJQao35FalBqcQ35iL21GIH4Pp7JbRKJiAVNDIp8dR4/21oE
wxWe5sFE85mSp1YbCElN752jp6VRQKJlWUwRdsdinf5GQws/yHS2PPZbemfikvNv
iJpZ4L0yF64C6qlEsQXfEwAcOW8CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRVtFQU
t4X4jXsirL7+Z7QUT8u0gTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
OWExZmEzOTEtNDM3Ny00NGJhLWE2YzctYzc4NWZjOWE3NzMzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAjNUMA0G
CSqGSIb3DQEBCwUAA4IBAQAA770WrPQwUHAkGsAzCxLod+ggkAUavVDqM20LlJ5N
O+COpbz4gOqdad6YHoUJSMsmqmz1FYoegWE5Kxm7lYiZ4mWvwbvRPgodpM+JRUGA
UZ11vpwbMNMoulTrteWOFsaLa03Bt9KDl1ymBlJKN/6c27R1CSNUa3bYFBs2+xO1
lwLd3g/EdbAtc4bOtdMX/HXjIi4eKUYCkRM7ZV7lS/RGAyvMYWTWWKYKF56W6L9G
eVivTMNWDMgRVAgIYB3+CeNdJZT7ZuCgM0RPElt+GoD/blyGwv4HqrnnMqIa/5g+
j35ku9GnJU8vzEHVs24ci/w2AWXTJtTUUITVMk2YKl6X
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:14 2025 by rpki-client