Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ca9dc172-c5c5-48fd-a801-9f7f050aa67b.roa
File: ca9dc172-c5c5-48fd-a801-9f7f050aa67b.roa (raw, json)
Hash identifier: HRCbr/5rm1DBoL4+aPPaYnXhRthZkteQ/TKOM191iLo=
Subject key identifier: 59:D6:7B:E4:AD:2E:D9:12:72:19:30:54:7A:3E:84:89:31:55:58:20
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 01D394387390A12FA2CDD420B66EF76AC4658CAA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ca9dc172-c5c5-48fd-a801-9f7f050aa67b.roa
Signing time: Fri 07 Mar 2025 15:10:21 +0000
ROA not before: Fri 07 Mar 2025 15:10:21 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.24.0.0/13 maxlen: 13
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:d3:94:38:73:90:a1:2f:a2:cd:d4:20:b6:6e:f7:6a:c4:65:8c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 7 15:10:21 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:07:0b:e8:f2:b6:5e:45:d6:4f:ec:12:d5:4c:
16:57:f8:5a:40:fb:73:42:1b:73:53:6a:17:64:2e:
6b:68:7e:eb:8c:80:c7:04:a2:42:d4:46:aa:6c:2a:
dd:72:27:76:b0:7f:cf:f7:72:ac:4c:cd:d1:6c:47:
f6:9e:bb:c2:47:6f:04:01:dc:4f:f7:fc:bd:d2:bc:
f6:f1:ad:39:6b:53:5e:e7:28:1e:a2:09:c1:1e:cc:
d0:1f:82:5d:50:a8:26:de:90:3d:8d:e6:e2:a5:c5:
a8:90:0e:cf:ab:72:08:e0:8f:95:a1:0f:13:b5:03:
75:17:7c:e0:39:b9:3b:9c:16:70:a1:0e:4f:b9:95:
c8:81:47:33:60:03:ec:32:41:df:5f:41:e7:7d:f2:
9d:78:74:cd:06:37:8b:43:b7:75:cf:ff:0d:e7:8f:
76:30:91:3e:b5:ed:ca:6f:f2:f9:60:34:9b:ba:90:
e5:15:39:0c:6d:15:c4:e7:9e:a4:08:aa:33:e5:6b:
22:80:20:bd:96:b0:26:8f:b9:e3:03:3a:ac:86:24:
c0:10:71:17:25:de:91:7c:33:36:27:41:8e:4d:69:
8f:d7:8f:d5:53:99:da:8d:eb:f9:9b:1c:8e:96:1b:
5d:0a:e9:05:f4:26:92:bf:b7:d4:74:7c:49:b4:56:
4e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D6:7B:E4:AD:2E:D9:12:72:19:30:54:7A:3E:84:89:31:55:58:20
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ca9dc172-c5c5-48fd-a801-9f7f050aa67b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.24.0.0/13
Signature Algorithm: sha256WithRSAEncryption
16:55:cf:8b:4e:81:d2:c9:a9:0d:21:b0:f6:db:44:ec:ff:cf:
64:01:03:78:1f:ab:eb:ef:4c:02:3c:06:4a:cc:40:75:89:e9:
4b:8e:36:cb:3b:2c:af:92:c0:a3:a1:16:f8:a8:1a:26:b2:10:
93:b0:de:36:87:04:a4:ea:18:dd:56:40:6e:4c:f4:63:c4:aa:
2f:56:5c:31:29:34:1d:fc:36:5c:07:10:3a:6d:5b:40:86:35:
f2:6a:da:03:d6:64:e1:8a:19:7a:97:86:da:61:fb:ac:29:ff:
6b:fd:f6:b3:b5:42:0d:3c:bf:da:35:48:5a:dd:ab:18:fa:8d:
6a:3c:87:2b:17:d1:b8:3f:f0:67:b8:09:74:66:b6:07:bb:0b:
81:e1:eb:c7:b6:52:32:53:75:fe:83:ef:2f:00:96:87:84:42:
12:e8:e5:47:eb:a1:71:e9:34:4c:84:df:3b:a0:41:54:85:9d:
c5:e5:fd:b2:0f:91:25:5d:ee:ff:7e:50:75:8d:6a:ed:95:a0:
00:75:ee:59:e3:0a:7b:0f:65:42:27:77:88:75:64:c9:70:17:
f8:cd:57:09:02:59:80:95:dd:9d:68:54:45:fa:09:64:07:51:
c4:b3:b4:fe:ff:17:9c:1e:c6:12:57:68:dc:07:c8:c8:2d:9e:
8a:25:53:32
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUAdOUOHOQoS+izdQgtm73asRljKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAzMDcxNTEwMjFaFw0yNTA0MTEyMzU5NTlaMHoxSTBHBgNV
BAUTQGFjODNiNDJhNTAyZGFmMDU2NDMxYjAwNjIwNDg0YjNlMjJmOWEwMTA3ZTRm
YWY1MDkyYzMyZGJjNTRhN2I4YjUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJMHC+jytl5F1k/sEtVMFlf4WkD7c0Ibc1NqF2Qua2h+64yAxwSiQtRGqmwq
3XIndrB/z/dyrEzN0WxH9p67wkdvBAHcT/f8vdK89vGtOWtTXucoHqIJwR7M0B+C
XVCoJt6QPY3m4qXFqJAOz6tyCOCPlaEPE7UDdRd84Dm5O5wWcKEOT7mVyIFHM2AD
7DJB319B533ynXh0zQY3i0O3dc//DeePdjCRPrXtym/y+WA0m7qQ5RU5DG0VxOee
pAiqM+VrIoAgvZawJo+54wM6rIYkwBBxFyXekXwzNidBjk1pj9eP1VOZ2o3r+Zsc
jpYbXQrpBfQmkr+31HR8SbRWTtcCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRZ1nvk
rS7ZEnIZMFR6PoSJMVVYIDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
Y2E5ZGMxNzItYzVjNS00OGZkLWE4MDEtOWY3ZjA1MGFhNjdiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAzMYMA0G
CSqGSIb3DQEBCwUAA4IBAQAWVc+LToHSyakNIbD220Ts/89kAQN4H6vr70wCPAZK
zEB1ielLjjbLOyyvksCjoRb4qBomshCTsN42hwSk6hjdVkBuTPRjxKovVlwxKTQd
/DZcBxA6bVtAhjXyatoD1mThihl6l4baYfusKf9r/faztUINPL/aNUha3asY+o1q
PIcrF9G4P/BnuAl0ZrYHuwuB4evHtlIyU3X+g+8vAJaHhEIS6OVH66Fx6TRMhN87
oEFUhZ3F5f2yD5ElXe7/flB1jWrtlaAAde5Z4wp7D2VCJ3eIdWTJcBf4zVcJAlmA
ld2daFRF+glkB1HEs7T+/xecHsYSV2jcB8jILZ6KJVMy
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:30 2025 by rpki-client