Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a81c865a-a8b0-437e-b803-d35050fc3fea.roa
File: a81c865a-a8b0-437e-b803-d35050fc3fea.roa (raw, json)
Hash identifier: vNa5qt6Rg62tPGBUC6RTv8EVKnI8nMhJHqqetOngnRo=
Subject key identifier: 62:0A:0A:2A:39:7D:BF:28:A8:F3:2F:3D:F7:2C:ED:2C:A6:03:4D:6F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 02DF5D0C569F498778516ED5CDA5B66B1C6594DE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a81c865a-a8b0-437e-b803-d35050fc3fea.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.121.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:df:5d:0c:56:9f:49:87:78:51:6e:d5:cd:a5:b6:6b:1c:65:94:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:3e:b0:cd:88:3d:61:3b:c1:fa:de:59:61:
91:8d:55:33:61:87:08:25:53:90:93:48:96:a8:d5:
e1:bd:cb:96:9f:be:2c:20:7e:fb:15:77:25:be:33:
7f:af:42:90:ad:bd:ec:82:da:05:e3:d1:fd:c7:de:
fb:4d:47:85:2a:d2:60:39:6e:bd:a1:7d:eb:e3:38:
87:48:a9:a9:c0:9c:5a:88:74:fc:53:1f:c8:2a:f7:
9c:ee:db:0f:89:76:0a:6b:6b:53:b2:b0:b1:b2:6e:
5b:23:08:60:7a:f0:5b:2c:75:44:cf:9e:74:f1:6d:
de:d2:22:f8:f3:ba:48:c7:54:6a:8d:80:2d:90:b9:
5c:5c:a8:4c:c6:92:9f:1c:b3:60:02:c2:23:8c:c3:
b9:6a:81:c5:58:fb:01:a1:a8:67:fd:9e:bd:c4:e3:
38:13:e6:f9:34:eb:d7:79:7a:b8:8a:34:ef:87:7a:
09:67:59:25:0a:4b:e7:35:87:96:1b:9b:b5:59:9b:
15:81:85:e2:95:09:69:07:20:f1:fd:dc:68:cb:46:
2e:c6:af:f6:f7:88:f3:47:3a:cd:28:6f:be:97:77:
37:bb:87:37:6c:ca:c8:6a:e6:55:54:12:13:e7:5d:
b9:e9:4c:bf:8c:49:04:14:5f:c2:41:20:80:95:7d:
d3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0A:0A:2A:39:7D:BF:28:A8:F3:2F:3D:F7:2C:ED:2C:A6:03:4D:6F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a81c865a-a8b0-437e-b803-d35050fc3fea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.121.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:e6:0e:d5:4a:eb:58:96:89:c6:cc:a7:ea:f9:6b:36:ab:e0:
f9:6a:b2:11:d7:6e:b3:c1:89:ae:65:8f:65:92:d1:bb:65:3e:
0b:07:63:ff:37:78:6a:d9:ef:ff:49:2c:c3:df:ee:db:b9:f9:
52:1b:31:0a:13:b2:f6:5d:f6:93:63:f0:34:ff:a0:85:9a:9c:
5f:36:98:f7:0e:1a:64:ea:e7:55:75:5a:6f:69:c5:6d:46:4c:
8f:6c:d2:3b:86:01:22:7d:10:e6:e3:a5:21:f1:77:8f:33:8a:
fb:2c:8a:23:f6:b7:30:33:94:23:d1:ab:78:d9:4d:b9:08:16:
84:44:22:6a:67:42:ce:14:19:65:50:ed:81:8a:0b:77:1b:6a:
d2:13:70:38:0d:95:c8:08:bc:6f:df:0e:44:47:09:4e:53:78:
d8:a3:c5:14:d5:ed:e9:06:cd:25:d9:de:71:d1:c1:da:1b:7e:
1c:f7:f3:8a:f2:0c:61:c4:1a:66:88:2f:ca:81:79:bf:02:10:
a3:90:94:6b:d0:76:c8:cd:1e:73:17:b0:6d:dc:b8:cb:f1:07:
e5:27:72:ea:82:e3:70:05:5d:f9:5f:e2:cb:fc:9f:a7:d2:79:
85:9e:ea:9b:9d:78:00:67:0c:a5:db:d2:e4:c6:a2:c7:2d:27:
42:19:12:43
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUAt9dDFafSYd4UW7VzaW2axxllN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAxMDcwMDAwMDBaFw0yNTAyMTEyMzU5NTlaMHoxSTBHBgNV
BAUTQDZlZmE5OTQzOWE5MWQ0ODQxN2QyZTBmN2M1YWVkMTQ5ZGY1OGNlYzJiMjI2
YTkzZjY1NTI4OWUzNjk4YTVmYmQxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALTLPrDNiD1hO8H63llhkY1VM2GHCCVTkJNIlqjV4b3Llp++LCB++xV3Jb4z
f69CkK297ILaBePR/cfe+01HhSrSYDluvaF96+M4h0ipqcCcWoh0/FMfyCr3nO7b
D4l2CmtrU7KwsbJuWyMIYHrwWyx1RM+edPFt3tIi+PO6SMdUao2ALZC5XFyoTMaS
nxyzYALCI4zDuWqBxVj7AaGoZ/2evcTjOBPm+TTr13l6uIo074d6CWdZJQpL5zWH
lhubtVmbFYGF4pUJaQcg8f3caMtGLsav9veI80c6zShvvpd3N7uHN2zKyGrmVVQS
E+dduelMv4xJBBRfwkEggJV9000CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRiCgoq
OX2/KKjzLz33LO0spgNNbzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YTgxYzg2NWEtYThiMC00MzdlLWI4MDMtZDM1MDUwZmMzZmVhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADN5MA0G
CSqGSIb3DQEBCwUAA4IBAQA65g7VSutYlonGzKfq+Ws2q+D5arIR126zwYmuZY9l
ktG7ZT4LB2P/N3hq2e//SSzD3+7buflSGzEKE7L2XfaTY/A0/6CFmpxfNpj3Dhpk
6udVdVpvacVtRkyPbNI7hgEifRDm46Uh8XePM4r7LIoj9rcwM5Qj0at42U25CBaE
RCJqZ0LOFBllUO2Bigt3G2rSE3A4DZXICLxv3w5ERwlOU3jYo8UU1e3pBs0l2d5x
0cHaG34c9/OK8gxhxBpmiC/KgXm/AhCjkJRr0HbIzR5zF7Bt3LjL8QflJ3LqguNw
BV35X+LL/J+n0nmFnuqbnXgAZwyl29LkxqLHLSdCGRJD
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:03:00 2025 by rpki-client