Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecf71776-ef54-415b-8543-7ec55f9b1d9d.roa
File: ecf71776-ef54-415b-8543-7ec55f9b1d9d.roa (raw, json)
Hash identifier: ZE6g0J4MFZKfsi7uz+IoJNeOutMr8Mgo/OnkE06IHhI=
Subject key identifier: CB:8E:F0:43:27:27:75:D9:55:ED:26:3D:B6:4B:89:88:DC:50:C3:E4
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2A0D3AAFCAEEE876823CDA0494A512F07926A7FE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecf71776-ef54-415b-8543-7ec55f9b1d9d.roa
Signing time: Fri 07 Mar 2025 15:10:24 +0000
ROA not before: Fri 07 Mar 2025 15:10:24 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.44.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:0d:3a:af:ca:ee:e8:76:82:3c:da:04:94:a5:12:f0:79:26:a7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 7 15:10:24 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:1a:c1:79:be:5f:36:45:a6:ab:fb:53:d7:
82:dd:7a:32:0c:1b:2b:bf:01:0b:51:3d:d7:8f:56:
ce:e0:d8:1c:81:04:4b:d2:50:14:db:13:5b:87:1e:
da:11:42:8c:de:fe:51:b1:6a:40:cb:0b:5d:5b:21:
95:5c:bf:cb:a2:9c:f2:33:1a:e3:d0:22:f0:0b:5c:
1a:84:35:93:75:a7:04:d8:05:11:9a:3c:8c:01:47:
fc:5d:5a:f5:aa:d2:51:e2:16:86:6a:c2:09:29:70:
ad:22:8a:30:7f:be:d1:01:10:d2:03:e0:ca:d3:d8:
3b:cc:20:54:d2:e3:10:22:a1:3b:53:24:43:a9:55:
d1:81:5b:84:28:b9:6b:db:e2:5f:af:54:30:c5:71:
14:e6:15:07:0a:50:d7:fa:51:f1:8d:c3:1b:15:8e:
9f:fb:99:59:19:7a:f3:53:ae:67:00:06:29:1f:85:
81:55:37:5e:5c:c4:c6:52:4e:8e:28:5b:4b:9d:02:
3e:88:16:77:99:c5:fc:0c:6e:9c:20:e1:26:6d:4d:
ff:69:21:f3:5a:95:f7:e4:51:19:d7:7b:2b:36:bc:
ff:16:a1:58:48:64:fb:cd:6c:cf:08:3c:93:04:27:
53:b4:29:a0:18:ba:67:f3:c1:2a:02:15:11:2f:ee:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8E:F0:43:27:27:75:D9:55:ED:26:3D:B6:4B:89:88:DC:50:C3:E4
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecf71776-ef54-415b-8543-7ec55f9b1d9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.44.0.0/16
Signature Algorithm: sha256WithRSAEncryption
66:d7:2e:e8:de:fb:55:93:da:86:e1:c3:1e:e1:12:a4:af:85:
68:f1:e9:be:85:c2:de:7b:25:51:3b:9f:15:8a:20:d2:19:dc:
ec:bf:52:ca:19:87:57:43:4e:20:2e:e7:7e:35:55:38:8b:d3:
ac:80:8a:4a:55:0a:0a:ee:2a:56:23:df:e6:b9:d5:58:72:90:
8d:fb:22:27:0f:4f:6a:16:d0:f7:53:a1:99:01:1c:37:73:87:
00:c5:cd:d1:85:3a:c5:52:95:d6:9a:1a:c1:e8:66:c1:55:53:
43:3c:37:ee:82:ba:4b:0b:fe:25:a5:26:53:64:89:ff:a9:a4:
2b:5c:9d:64:2e:9b:8f:fd:15:c1:c4:c1:89:d5:01:ca:38:c4:
be:71:d4:06:e9:a9:4e:3a:70:cf:62:3e:cf:34:4d:e1:b8:90:
f9:9a:a9:d5:f7:69:73:e5:f8:10:05:33:37:11:7b:d2:96:9d:
21:64:a1:a7:7c:99:3e:08:ce:e3:62:07:4e:7b:e1:13:10:86:
6e:30:32:e1:3e:7c:ca:e6:38:bd:1c:70:77:7f:e9:36:7e:5d:
5f:41:94:f6:89:22:7c:41:ed:b7:7b:db:3b:b5:56:54:81:ef:
13:e9:96:34:74:1f:ec:6a:c9:de:9a:a1:f3:79:91:5e:c8:91:
de:96:d4:d5
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUKg06r8ru6HaCPNoElKUS8Hkmp/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAzMDcxNTEwMjRaFw0yNTA0MTEyMzU5NTlaMHoxSTBHBgNV
BAUTQDcyNmU4M2U2MDBmMDcxOTJhNDNjMjQ0NjU3ODJkOGJiODQ5MDVmNDdmODJj
NDE3ODA0MDRhOGZjNDY2OTA2MTAxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALN8GsF5vl82Raar+1PXgt16MgwbK78BC1E9149WzuDYHIEES9JQFNsTW4ce
2hFCjN7+UbFqQMsLXVshlVy/y6Kc8jMa49Ai8AtcGoQ1k3WnBNgFEZo8jAFH/F1a
9arSUeIWhmrCCSlwrSKKMH++0QEQ0gPgytPYO8wgVNLjECKhO1MkQ6lV0YFbhCi5
a9viX69UMMVxFOYVBwpQ1/pR8Y3DGxWOn/uZWRl681OuZwAGKR+FgVU3XlzExlJO
jihbS50CPogWd5nF/AxunCDhJm1N/2kh81qV9+RRGdd7Kza8/xahWEhk+81szwg8
kwQnU7QpoBi6Z/PBKgIVES/udHUCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTLjvBD
Jyd12VXtJj22S4mI3FDD5DAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZWNmNzE3NzYtZWY1NC00MTViLTg1NDMtN2VjNTVmOWIxZDlkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADMsMA0G
CSqGSIb3DQEBCwUAA4IBAQBm1y7o3vtVk9qG4cMe4RKkr4Vo8em+hcLeeyVRO58V
iiDSGdzsv1LKGYdXQ04gLud+NVU4i9OsgIpKVQoK7ipWI9/mudVYcpCN+yInD09q
FtD3U6GZARw3c4cAxc3RhTrFUpXWmhrB6GbBVVNDPDfugrpLC/4lpSZTZIn/qaQr
XJ1kLpuP/RXBxMGJ1QHKOMS+cdQG6alOOnDPYj7PNE3huJD5mqnV92lz5fgQBTM3
EXvSlp0hZKGnfJk+CM7jYgdOe+ETEIZuMDLhPnzK5ji9HHB3f+k2fl1fQZT2iSJ8
Qe23e9s7tVZUge8T6ZY0dB/sasnemqHzeZFeyJHeltTV
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:21 2025 by rpki-client