Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fe4a1cdc-1f22-4e81-a455-f69665f973f0.roa
File: fe4a1cdc-1f22-4e81-a455-f69665f973f0.roa (raw, json)
Hash identifier: PN2HPtSxkQ8LSDH3XvzoJ6b13nBBHHg+OjR7pCiTKr4=
Subject key identifier: 10:8C:68:22:B8:DF:52:BA:CE:17:1F:83:D8:47:54:44:01:B6:68:04
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 11A5E27F37C31B00E3581F65670B7CFD2AB18F72
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fe4a1cdc-1f22-4e81-a455-f69665f973f0.roa
Signing time: Wed 05 Mar 2025 17:50:28 +0000
ROA not before: Wed 05 Mar 2025 17:50:28 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.184.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:a5:e2:7f:37:c3:1b:00:e3:58:1f:65:67:0b:7c:fd:2a:b1:8f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 5 17:50:28 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:43:60:ff:66:e9:a0:d2:b2:09:12:9e:f9:
c7:b3:fb:5b:a1:e9:33:49:f2:a8:37:1f:f5:08:02:
22:41:4e:e3:cb:00:93:43:a7:9a:42:fa:eb:53:09:
15:96:bd:51:f6:16:8b:79:d9:d9:54:6b:f2:2c:6c:
82:5e:f0:de:ca:56:0a:a6:0b:e5:30:18:46:f8:57:
13:f0:50:f7:1a:a2:6c:dd:81:3b:70:b8:32:af:f6:
c5:e8:04:cf:bf:80:68:b7:ad:86:69:0c:25:7a:68:
38:17:bd:90:e5:a7:e4:5e:2d:be:e6:85:82:c5:68:
15:1b:f3:c8:eb:3d:d7:da:d4:8c:30:97:a1:f8:f8:
9e:3a:53:60:5d:b1:4d:a3:15:d3:5f:c0:ea:7e:f7:
de:66:ec:84:4d:3b:9e:5b:96:b5:67:14:de:bb:a0:
93:0f:79:42:b1:b0:3a:c2:e1:5e:ea:38:82:03:b0:
47:c9:b7:c5:c8:e3:6f:9c:7a:f6:80:6b:83:a7:91:
f5:4c:fd:c8:30:2c:1b:39:ac:15:6c:fa:35:59:a6:
6f:45:ac:c5:44:6b:c2:5d:1f:93:28:06:f1:2b:bd:
e1:f3:c2:f6:48:40:6f:db:c0:4c:05:bc:87:c7:a1:
20:95:5f:57:70:0c:2b:14:25:5c:76:50:79:96:92:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8C:68:22:B8:DF:52:BA:CE:17:1F:83:D8:47:54:44:01:B6:68:04
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fe4a1cdc-1f22-4e81-a455-f69665f973f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.184.0.0/15
Signature Algorithm: sha256WithRSAEncryption
89:5c:02:e6:28:cc:5b:4d:d9:8e:0f:8d:24:71:73:69:f5:9d:
1c:e6:ad:44:c3:4e:44:8e:ac:c9:62:82:27:55:75:21:32:af:
7f:cb:6b:00:8f:de:d5:6f:24:9e:21:60:1e:e0:8f:28:c8:03:
76:2a:13:a6:d7:43:ae:29:6b:9e:f1:4e:32:dd:c4:0c:49:10:
85:5b:66:15:25:60:2d:31:8a:52:4f:15:e4:8b:0e:4e:9c:68:
e1:f4:5f:19:dd:f7:8b:e1:24:fc:3f:0b:cc:2b:8a:48:35:9f:
e1:45:5e:0b:32:06:58:de:83:3a:ee:af:69:43:40:1b:15:71:
02:7f:a0:a0:84:2a:ee:5b:c9:f8:5c:94:c2:b2:77:db:13:08:
b9:85:cb:d8:1f:78:88:fa:86:19:a4:0b:cf:62:3f:5d:9e:ad:
77:0e:d8:29:7f:19:56:75:85:21:57:bc:3e:5a:22:62:4a:d4:
d0:5e:6e:71:03:a4:94:bd:d9:bf:9b:d4:98:90:17:41:36:f9:
83:dd:2e:2e:c8:6a:67:a1:56:ee:9c:17:c6:66:ca:9b:00:95:
75:af:df:04:74:7e:d0:fc:44:1e:74:94:ed:8c:8c:e8:2e:11:
33:45:11:4d:49:de:68:40:f0:8b:90:ca:ef:a2:69:a3:41:b1:
91:3c:ce:86
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUEaXifzfDGwDjWB9lZwt8/Sqxj3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAzMDUxNzUwMjhaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDVkOTljYzhlM2YzMjM1N2Y5NTQ3MTUwODIzYWQ0MGRiNmY5YzJlOGViOTEz
YjYyYjFhNjcyN2M0MjU3NTZjY2QxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKwEQ2D/Zumg0rIJEp75x7P7W6HpM0nyqDcf9QgCIkFO48sAk0OnmkL661MJ
FZa9UfYWi3nZ2VRr8ixsgl7w3spWCqYL5TAYRvhXE/BQ9xqibN2BO3C4Mq/2xegE
z7+AaLethmkMJXpoOBe9kOWn5F4tvuaFgsVoFRvzyOs919rUjDCXofj4njpTYF2x
TaMV01/A6n733mbshE07nluWtWcU3rugkw95QrGwOsLhXuo4ggOwR8m3xcjjb5x6
9oBrg6eR9Uz9yDAsGzmsFWz6NVmmb0WsxURrwl0fkygG8Su94fPC9khAb9vATAW8
h8ehIJVfV3AMKxQlXHZQeZaSDSUCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQQjGgi
uN9Sus4XH4PYR1REAbZoBDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZmU0YTFjZGMtMWYyMi00ZTgxLWE0NTUtZjY5NjY1Zjk3M2YwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATO4MA0G
CSqGSIb3DQEBCwUAA4IBAQCJXALmKMxbTdmOD40kcXNp9Z0c5q1Ew05EjqzJYoIn
VXUhMq9/y2sAj97VbySeIWAe4I8oyAN2KhOm10OuKWue8U4y3cQMSRCFW2YVJWAt
MYpSTxXkiw5OnGjh9F8Z3feL4ST8PwvMK4pINZ/hRV4LMgZY3oM67q9pQ0AbFXEC
f6CghCruW8n4XJTCsnfbEwi5hcvYH3iI+oYZpAvPYj9dnq13DtgpfxlWdYUhV7w+
WiJiStTQXm5xA6SUvdm/m9SYkBdBNvmD3S4uyGpnoVbunBfGZsqbAJV1r98EdH7Q
/EQedJTtjIzoLhEzRRFNSd5oQPCLkMrvommjQbGRPM6G
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:13 2025 by rpki-client