Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/73ed1ee7-6ac5-4ab1-90b4-41a0fe75ac58.roa
File: 73ed1ee7-6ac5-4ab1-90b4-41a0fe75ac58.roa (raw, json)
Hash identifier: 5GfvwKeI+gt9Lw6gSgFPndZtDvwj3222nhT5zJcsSdo=
Subject key identifier: 05:F1:DE:7E:C8:95:6F:F4:48:01:4D:FB:35:C7:32:FA:61:20:E8:43
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 51A77C0D0E30ACC5348DD131459A0578E974CBD9
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/73ed1ee7-6ac5-4ab1-90b4-41a0fe75ac58.roa
Signing time: Tue 11 Mar 2025 15:07:36 +0000
ROA not before: Tue 11 Mar 2025 15:07:36 +0000
ROA not after: Tue 15 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:b000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:a7:7c:0d:0e:30:ac:c5:34:8d:d1:31:45:9a:05:78:e9:74:cb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Mar 11 15:07:36 2025 GMT
Not After : Apr 15 23:59:59 2025 GMT
Subject: CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:c1:7c:96:9d:36:05:d7:05:5c:67:7b:99:
b7:5b:22:46:60:a2:d3:3d:a3:aa:ad:26:78:0a:5d:
dc:0e:1b:36:fc:52:90:cd:83:27:22:dc:b2:38:74:
2d:65:36:76:3e:e0:92:68:a4:48:f7:68:66:88:89:
1a:86:08:a5:e3:55:38:b0:80:a7:28:5c:13:2f:f9:
51:88:43:f0:54:3f:0e:68:c9:b6:f5:39:7d:8c:e5:
b6:65:b7:cf:43:4b:fa:87:ed:07:83:69:7d:74:b7:
98:d3:f3:03:07:17:a4:24:50:42:72:aa:43:63:8f:
56:26:f0:28:53:b3:37:4b:71:31:00:7b:29:00:af:
b1:b0:64:54:a5:17:26:ab:c1:7d:a7:56:98:af:90:
6e:26:d0:9d:43:39:c6:66:bb:98:8b:28:22:1b:fc:
04:11:e0:96:f3:0f:9f:1b:89:71:cf:47:7d:14:8e:
94:5b:a2:a2:a8:ef:4c:a2:cc:bd:f6:cc:6a:70:89:
7f:63:ce:50:76:54:ec:36:e7:4a:46:53:2b:b1:d6:
f0:31:88:5a:7c:ae:61:3d:27:85:56:47:18:25:87:
d3:c5:96:cb:d2:81:e6:95:cb:68:a2:0b:8b:7d:46:
5e:a2:f9:57:3a:82:47:be:0a:a9:8a:c3:52:3c:5e:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F1:DE:7E:C8:95:6F:F4:48:01:4D:FB:35:C7:32:FA:61:20:E8:43
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/73ed1ee7-6ac5-4ab1-90b4-41a0fe75ac58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:b000::/36
Signature Algorithm: sha256WithRSAEncryption
5b:39:79:0c:0a:ba:b2:19:85:75:cd:c2:43:cd:5f:e7:8c:06:
0d:b8:99:22:28:70:b6:cf:c5:ab:f6:ac:da:cd:33:66:47:5a:
65:92:46:05:23:31:52:b4:28:d3:ee:8f:bb:2e:cf:d0:8b:82:
56:d7:2a:3c:d9:8e:8b:3c:6b:33:9f:d3:0d:90:fd:f1:8b:fb:
89:a7:6b:ac:48:bc:f8:d7:01:c0:d8:37:6d:6f:23:19:9d:1f:
47:c0:3b:df:b8:1c:08:c2:e9:bc:5f:cd:9f:ba:57:0b:1f:80:
32:56:9e:27:2f:ff:cf:b3:58:e6:2b:25:0d:d2:ab:6f:f5:70:
de:69:ec:12:77:aa:72:11:b2:d9:dc:21:ac:fa:4b:75:35:76:
dd:53:9b:4a:da:6c:b1:6e:02:8b:b9:c0:31:6e:be:e2:59:2e:
31:c7:a3:2a:1d:b7:6e:db:9d:a1:8b:07:85:94:ef:19:da:8f:
a5:78:68:32:9d:c7:a5:86:84:0a:b0:bb:bc:e3:3d:42:67:57:
ea:fd:db:7e:ef:a6:bc:75:67:d2:e1:89:0d:06:12:c0:6e:24:
bd:dd:9c:c8:98:b5:fd:4d:33:56:f6:16:d5:ad:48:ba:17:84:
53:fa:3b:dc:b2:05:e0:3e:3b:eb:f1:38:9a:d2:a5:e5:0e:a8:
89:b8:f1:b7
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUUad8DQ4wrMU0jdExRZoFeOl0y9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGU5ZjQ1ZmQ2NWNlYTQ3ZmNlNTMzZjExY2ZjMTVjNDc1
NTU0ZGZiYzAeFw0yNTAzMTExNTA3MzZaFw0yNTA0MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQDdkZDkzNDQ0M2RhNzk1MWU1NzM3NjFkZjQ3MzYzOGM5ZmE3MDFlNDJlZjcy
YWM5NDljMTBiOTBjNzIzMGMxNmExLTArBgNVBAMTJGY2OTAzMTM4LTQyMGEtNGM4
NC1iZjNkLTlhZWE4MWYyM2ViNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALSowXyWnTYF1wVcZ3uZt1siRmCi0z2jqq0meApd3A4bNvxSkM2DJyLcsjh0
LWU2dj7gkmikSPdoZoiJGoYIpeNVOLCApyhcEy/5UYhD8FQ/DmjJtvU5fYzltmW3
z0NL+oftB4NpfXS3mNPzAwcXpCRQQnKqQ2OPVibwKFOzN0txMQB7KQCvsbBkVKUX
JqvBfadWmK+QbibQnUM5xma7mIsoIhv8BBHglvMPnxuJcc9HfRSOlFuioqjvTKLM
vfbManCJf2POUHZU7DbnSkZTK7HW8DGIWnyuYT0nhVZHGCWH08WWy9KB5pXLaKIL
i31GXqL5VzqCR74KqYrDUjxe9pMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQF8d5+
yJVv9EgBTfs1xzL6YSDoQzAfBgNVHSMEGDAWgBROn0X9Zc6kf85TPxHPwVxHVVTf
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RwOUZfV1hP
cEhfT1V6OFJ6OEZjUjFWVTM3dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9jZmFkYmE0ZC0xMzRjLTRhMWUtOWQ5Yy02NGU4YzVkNjEzZjMv
NzNlZDFlZTctNmFjNS00YWIxLTkwYjQtNDFhMGZlNzVhYzU4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvY2ZhZGJhNGQtMTM0Yy00YTFlLTlkOWMtNjRlOGM1ZDYx
M2YzL092LWhpczA4STk5NlJvZlQ5VUEtb3dmbG56WS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8ew
MA0GCSqGSIb3DQEBCwUAA4IBAQBbOXkMCrqyGYV1zcJDzV/njAYNuJkiKHC2z8Wr
9qzazTNmR1plkkYFIzFStCjT7o+7Ls/Qi4JW1yo82Y6LPGszn9MNkP3xi/uJp2us
SLz41wHA2DdtbyMZnR9HwDvfuBwIwum8X82fulcLH4AyVp4nL//Ps1jmKyUN0qtv
9XDeaewSd6pyEbLZ3CGs+kt1NXbdU5tK2myxbgKLucAxbr7iWS4xx6MqHbdu252h
iweFlO8Z2o+leGgyncelhoQKsLu84z1CZ1fq/dt+76a8dWfS4YkNBhLAbiS93ZzI
mLX9TTNW9hbVrUi6F4RT+jvcsgXgPjvr8Tia0qXlDqiJuPG3
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:49:59 2025 by rpki-client