Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9b3e8478-a5b4-4d3b-b43b-8d6daef39324.roa
File: 9b3e8478-a5b4-4d3b-b43b-8d6daef39324.roa (raw, json)
Hash identifier: zcGmW/qZUBFOj0wTkLilJwKZszgLA//cX9TJ5k8i5/M=
Subject key identifier: 6B:C2:AA:05:4F:F1:A7:8E:E9:EA:88:7F:BE:B7:F7:A0:E4:42:AF:66
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 45F7DAAE218C78128579058AD8757BC5EF81F0E8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9b3e8478-a5b4-4d3b-b43b-8d6daef39324.roa
Signing time: Fri 29 Nov 2024 00:00:00 +0000
ROA not before: Fri 29 Nov 2024 00:00:00 +0000
ROA not after: Fri 03 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.0.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:f7:da:ae:21:8c:78:12:85:79:05:8a:d8:75:7b:c5:ef:81:f0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 29 00:00:00 2024 GMT
Not After : Jan 3 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:3d:d3:d8:7b:ee:4f:f9:2c:1c:0f:c8:1e:
b7:65:b1:b7:9e:cf:7e:f9:ee:d3:8a:3f:ef:3e:18:
4c:5d:35:7e:80:04:30:38:fc:a9:99:17:36:b8:a4:
de:98:fa:4b:22:9d:d3:48:2a:ec:27:7e:14:53:2a:
1b:64:15:93:0f:02:51:ec:e0:fa:ba:06:02:f5:43:
00:ff:c4:37:bd:be:52:ef:97:09:17:36:17:f4:8b:
bc:4e:d7:e3:76:0e:72:a2:5d:29:a3:cd:0b:34:e3:
9f:58:6f:45:55:39:d7:3b:f6:c2:3c:1f:38:70:84:
4b:1f:9b:6b:c6:33:78:f1:4b:00:50:ef:5d:b5:c7:
8b:a7:f9:96:d1:01:4c:65:d6:5c:1a:b6:10:13:14:
be:d0:96:46:e7:fa:ef:42:6c:1f:74:96:79:b1:56:
0e:b9:cd:b0:a9:1f:e6:2a:7b:27:25:f9:0b:cb:ee:
b6:fd:9a:92:c4:24:05:ec:bb:8c:79:77:59:a0:63:
05:59:65:06:4b:f1:57:db:0e:a1:3d:bf:36:b7:6e:
5f:50:a7:2b:67:15:d2:20:6b:84:f9:37:f0:7e:8d:
b6:27:96:c0:ec:40:26:c4:f1:36:b3:d2:c4:19:0f:
e9:a1:d0:d4:3d:91:16:9b:f9:b6:6e:95:dc:50:56:
6d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C2:AA:05:4F:F1:A7:8E:E9:EA:88:7F:BE:B7:F7:A0:E4:42:AF:66
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9b3e8478-a5b4-4d3b-b43b-8d6daef39324.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
cf:43:5b:16:84:f8:4a:89:18:54:a8:40:3b:86:48:72:52:cd:
ea:9c:af:d6:7c:4a:2d:7a:bf:42:2a:d8:b1:6b:07:ab:a6:b6:
aa:10:ba:2d:46:3c:d4:f5:ad:59:e1:2c:07:05:4f:76:b6:4c:
13:b4:7e:52:fa:ea:bc:03:ba:7f:18:1e:d1:4d:1b:d3:03:ee:
2b:43:07:8a:6b:77:65:1d:c3:59:0e:2a:7a:9b:a2:80:ce:08:
3a:08:0c:99:8e:5b:a5:3f:43:45:a6:f0:b8:a8:a6:e6:30:8b:
06:a2:85:85:e5:1d:56:10:4d:69:c4:ab:e8:88:d7:a1:7f:e6:
f3:7f:9d:79:d1:44:82:c6:06:0b:34:b6:fe:11:04:67:fb:47:
89:48:3e:d0:21:83:50:62:b4:a2:86:21:81:d6:5e:c4:34:ea:
cf:44:79:10:a5:79:5a:cb:11:da:f9:35:91:bb:87:31:55:b6:
fc:bf:3d:f3:19:56:25:f3:71:d7:0b:84:a3:af:38:7b:0f:14:
09:03:2f:c7:f4:02:25:9d:73:96:93:15:c8:aa:c8:0e:92:70:
69:be:1b:d1:b5:c3:9d:a7:07:20:c3:b2:69:0d:eb:28:62:0d:
bf:ad:49:59:66:80:aa:97:03:44:08:3c:13:8d:4a:5d:bd:8f:
ab:06:83:21
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIURffariGMeBKFeQWK2HV7xe+B8OgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDExMjkwMDAwMDBaFw0yNTAxMDMyMzU5NTlaMHoxSTBHBgNV
BAUTQDFkOTdlYzUwMDg4YzcxYTI5MTk0ODc0MGJlMzQ2ODAzNDhjNzAwYmI4Yzky
NjgwMWY1OTIzNTRkYzUzMDFjMjkxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL9APdPYe+5P+SwcD8get2Wxt57Pfvnu04o/7z4YTF01foAEMDj8qZkXNrik
3pj6SyKd00gq7Cd+FFMqG2QVkw8CUezg+roGAvVDAP/EN72+Uu+XCRc2F/SLvE7X
43YOcqJdKaPNCzTjn1hvRVU51zv2wjwfOHCESx+ba8YzePFLAFDvXbXHi6f5ltEB
TGXWXBq2EBMUvtCWRuf670JsH3SWebFWDrnNsKkf5ip7JyX5C8vutv2aksQkBey7
jHl3WaBjBVllBkvxV9sOoT2/NrduX1CnK2cV0iBrhPk38H6NtieWwOxAJsTxNrPS
xBkP6aHQ1D2RFpv5tm6V3FBWbT8CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRrwqoF
T/GnjunqiH++t/eg5EKvZjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
OWIzZTg0NzgtYTViNC00ZDNiLWI0M2ItOGQ2ZGFlZjM5MzI0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBjMAQDAN
BgkqhkiG9w0BAQsFAAOCAQEAz0NbFoT4SokYVKhAO4ZIclLN6pyv1nxKLXq/QirY
sWsHq6a2qhC6LUY81PWtWeEsBwVPdrZME7R+UvrqvAO6fxge0U0b0wPuK0MHimt3
ZR3DWQ4qepuigM4IOggMmY5bpT9DRabwuKim5jCLBqKFheUdVhBNacSr6IjXoX/m
83+dedFEgsYGCzS2/hEEZ/tHiUg+0CGDUGK0ooYhgdZexDTqz0R5EKV5WssR2vk1
kbuHMVW2/L898xlWJfNx1wuEo684ew8UCQMvx/QCJZ1zlpMVyKrIDpJwab4b0bXD
nacHIMOyaQ3rKGINv61JWWaAqpcDRAg8E41KXb2PqwaDIQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:58 2025 by rpki-client