Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac15d5af-b90d-456e-b53e-55f7c17fc512.roa
File: ac15d5af-b90d-456e-b53e-55f7c17fc512.roa (raw, json)
Hash identifier: SU9TM44qFXmjdzrn7SXkPSnjdTBWRZzPq2W0rJnAw/U=
Subject key identifier: 51:E6:F8:9D:1A:75:B2:2E:41:88:31:9B:0B:FD:DA:6F:6E:1F:23:92
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 625A2C5252924C2A9BE833DDF731F00CECC301A1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac15d5af-b90d-456e-b53e-55f7c17fc512.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 51.151.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:5a:2c:52:52:92:4c:2a:9b:e8:33:dd:f7:31:f0:0c:ec:c3:01:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:48:c0:25:20:f7:42:51:a0:a9:20:03:96:
66:b2:58:a7:e7:52:8e:75:6d:33:06:f1:12:68:8d:
30:e1:0b:79:99:a2:9c:d2:ef:93:70:27:e0:bf:84:
48:a9:c8:76:94:81:38:52:04:0c:55:db:72:53:19:
3a:6a:8b:58:93:10:e8:a1:4f:8b:e8:02:be:09:ac:
80:b1:a7:ff:f5:3a:fe:0f:63:fa:fc:4a:e5:0b:aa:
b1:cf:e5:f6:07:61:ce:90:30:89:30:cd:e2:3f:12:
eb:b8:30:42:6d:7d:cf:ad:a9:7f:a5:4f:2c:1f:79:
8a:9e:56:ff:4d:9c:fa:2b:de:21:42:da:f9:e1:06:
dd:b4:89:0d:cd:f4:1e:e6:36:6f:e3:42:e0:a2:29:
1c:2b:fc:1f:a8:8a:0c:76:b8:1a:be:3b:b4:18:a7:
b8:7e:23:67:cd:59:46:bd:31:15:c0:5b:5f:1c:fb:
b1:ec:dd:13:ff:ea:c5:80:d1:c3:03:d8:bb:a5:22:
9f:9c:15:27:89:d2:c4:e3:e7:d5:7a:38:95:0a:cc:
a2:ba:7f:17:4c:32:68:0c:18:74:17:32:ea:ca:94:
8f:8f:86:c1:32:9e:40:bf:ea:b8:09:be:db:70:82:
11:9b:53:74:12:80:29:15:1d:53:8d:5c:f3:54:d1:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E6:F8:9D:1A:75:B2:2E:41:88:31:9B:0B:FD:DA:6F:6E:1F:23:92
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac15d5af-b90d-456e-b53e-55f7c17fc512.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:3a:72:37:18:93:36:18:9e:de:28:e7:43:2a:10:78:c9:aa:
ec:d7:1d:42:87:78:70:7d:f5:65:e8:8b:2f:82:34:8d:07:63:
06:cd:44:f9:e2:f3:1f:e3:2c:8d:11:8d:09:31:a6:a9:de:3e:
b9:64:67:1d:76:4f:07:e2:15:af:c4:b0:83:e8:77:66:c3:ad:
77:92:cb:2f:e4:40:4d:c8:15:f3:af:7c:75:87:62:be:1a:c5:
89:24:2f:ea:6a:c7:48:ba:87:56:06:83:ce:c6:37:87:dd:e0:
14:15:41:0d:9d:6b:6f:bf:99:c1:29:30:3c:a8:c6:2a:b8:e2:
3d:83:5b:9c:d4:b5:52:3a:da:f8:fe:7a:b8:f8:49:98:e7:b0:
94:31:ab:b7:a9:cd:76:0e:96:2d:1d:89:88:47:38:15:ee:49:
6b:a6:67:93:f5:ba:0a:d8:b0:72:9d:73:28:7e:ad:48:89:20:
b9:db:b0:7f:c3:ec:e2:c8:98:99:2d:66:bd:83:53:98:da:d7:
ba:d2:a2:c4:78:f0:ad:a4:a5:9d:3d:f1:ac:de:5c:34:b3:53:
02:b6:cf:9d:8e:79:5f:ff:53:1f:4b:8e:0c:9a:cb:14:1e:b3:
d1:cf:55:10:ec:c2:c7:1c:a5:18:be:a4:2a:7e:8c:5a:9a:be:
e3:11:38:70
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUYlosUlKSTCqb6DPd9zHwDOzDAaEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAxMDcwMDAwMDBaFw0yNTAyMTEyMzU5NTlaMHoxSTBHBgNV
BAUTQDhlMzNjY2I5ZTEwNGEwMmUwMGU3NTFkOWRmNWIzNDU2Yzg5MmQwYjNkZGU4
OWI1YmMxMDIxN2ZmOTAwNTJjNzYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK7lSMAlIPdCUaCpIAOWZrJYp+dSjnVtMwbxEmiNMOELeZminNLvk3An4L+E
SKnIdpSBOFIEDFXbclMZOmqLWJMQ6KFPi+gCvgmsgLGn//U6/g9j+vxK5Quqsc/l
9gdhzpAwiTDN4j8S67gwQm19z62pf6VPLB95ip5W/02c+iveIULa+eEG3bSJDc30
HuY2b+NC4KIpHCv8H6iKDHa4Gr47tBinuH4jZ81ZRr0xFcBbXxz7sezdE//qxYDR
wwPYu6Uin5wVJ4nSxOPn1Xo4lQrMorp/F0wyaAwYdBcy6sqUj4+GwTKeQL/quAm+
23CCEZtTdBKAKRUdU41c81TRX+0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRR5vid
GnWyLkGIMZsL/dpvbh8jkjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YWMxNWQ1YWYtYjkwZC00NTZlLWI1M2UtNTVmN2MxN2ZjNTEyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADOXMA0G
CSqGSIb3DQEBCwUAA4IBAQCWOnI3GJM2GJ7eKOdDKhB4yars1x1Ch3hwffVl6Isv
gjSNB2MGzUT54vMf4yyNEY0JMaap3j65ZGcddk8H4hWvxLCD6Hdmw613kssv5EBN
yBXzr3x1h2K+GsWJJC/qasdIuodWBoPOxjeH3eAUFUENnWtvv5nBKTA8qMYquOI9
g1uc1LVSOtr4/nq4+EmY57CUMau3qc12DpYtHYmIRzgV7klrpmeT9boK2LBynXMo
fq1IiSC527B/w+ziyJiZLWa9g1OY2te60qLEePCtpKWdPfGs3lw0s1MCts+djnlf
/1MfS44MmssUHrPRz1UQ7MLHHKUYvqQqfoxamr7jEThw
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:03:04 2025 by rpki-client