Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16466217-dced-4a5a-a70d-36ae6ab6acbe.roa
File: 16466217-dced-4a5a-a70d-36ae6ab6acbe.roa (raw, json)
Hash identifier: 7OQeu5qg6aJLyxjQoMrbVhYnYFHe0ene6+ASKrht5Eg=
Subject key identifier: BC:A3:70:37:D8:04:94:8A:47:DF:B4:C3:58:13:95:CB:65:ED:38:6B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 50D6B93237EC2328FD5900FEEAACB7897E240819
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16466217-dced-4a5a-a70d-36ae6ab6acbe.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.92.0.0/14 maxlen: 14
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d6:b9:32:37:ec:23:28:fd:59:00:fe:ea:ac:b7:89:7e:24:08:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=ce074da5d5087f98e4da1ee5b28b7b7d3fbbcb854123e9e60bd7f17c551384c6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c3:81:57:94:be:b7:79:7f:c4:76:94:74:96:
94:44:41:e0:31:f3:f4:d1:be:02:d5:c8:bc:6b:34:
09:d0:4d:8e:49:80:4a:51:e6:20:1a:4f:e8:e8:1e:
bc:9f:66:5d:53:20:0b:6c:e2:9c:29:43:e8:f3:2c:
0d:fe:29:41:0f:48:2d:8c:40:88:ad:80:6a:05:6d:
0b:31:82:4f:a2:af:25:ce:b2:33:9b:7e:c3:14:2b:
04:ab:24:20:43:de:14:45:41:ab:50:fe:8f:4f:80:
9f:26:09:76:f1:16:e2:72:98:1d:3c:ee:d3:15:cf:
25:5f:73:b5:e2:ea:e1:2a:8d:34:d4:98:cf:cc:7a:
ce:78:08:f7:50:4a:b1:29:ed:f5:db:2e:d0:31:f8:
b8:0b:ca:dd:73:62:10:90:c2:19:82:f7:d6:4a:a9:
ea:43:90:cd:fd:13:dd:3e:a9:cb:d6:64:e2:01:91:
81:6a:04:19:8a:ea:27:60:99:38:a9:18:6c:95:b2:
20:97:27:dd:71:0a:51:b5:2e:fd:8b:3b:6c:9a:f3:
37:b2:3b:85:7c:bb:5f:61:4b:b2:ea:d3:a2:f0:cf:
56:3b:30:f0:ea:d8:36:e8:f6:8f:6c:d9:fe:2d:72:
dc:5b:41:43:eb:28:58:4d:05:66:fe:1b:8a:2d:ff:
4a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A3:70:37:D8:04:94:8A:47:DF:B4:C3:58:13:95:CB:65:ED:38:6B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16466217-dced-4a5a-a70d-36ae6ab6acbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.92.0.0/14
Signature Algorithm: sha256WithRSAEncryption
5b:96:c0:6f:95:92:64:20:fb:fc:ff:5c:88:e5:ab:e0:75:59:
01:9c:dc:77:7f:2d:4e:ed:c7:26:36:dd:0c:fd:b7:71:79:55:
a3:63:c9:81:10:f5:27:c1:f7:5b:fa:75:14:c1:a1:bb:fe:7c:
3e:68:f2:1b:40:4f:0d:ee:51:e7:06:a0:80:86:73:5b:8f:18:
d9:2e:3d:01:7c:e6:3c:87:46:46:2e:bd:47:c7:58:27:c2:b4:
b0:89:ae:4b:6e:6b:b0:88:ee:76:f2:fe:56:74:18:1c:9f:42:
f9:b1:1c:ce:7c:f8:82:c6:40:b4:c3:4a:c5:09:25:e0:79:e5:
12:b2:b5:aa:99:e9:6a:f6:68:1b:a1:5b:91:28:0e:37:ef:25:
fe:a8:e8:39:b6:18:5c:4f:5b:04:34:a8:f6:cc:b2:b0:48:27:
d6:d4:d0:0f:6d:1d:9a:81:64:29:46:c3:66:90:62:b0:d1:62:
6b:6e:b6:0d:9e:7a:dd:48:ed:09:bf:9c:40:9f:2e:20:4e:e0:
e0:05:5e:e2:23:1d:6d:e8:2c:8a:4e:ca:c7:62:72:34:de:24:
55:6a:98:35:64:f9:02:90:fb:a0:b1:7a:70:05:86:ea:3a:74:
c5:2a:9e:4e:43:c0:db:42:30:c8:03:4b:71:7f:50:8f:83:e8:
82:e0:fe:81
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUUNa5MjfsIyj9WQD+6qy3iX4kCBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAxMTQwMDAwMDBaFw0yNTAyMTgyMzU5NTlaMHoxSTBHBgNV
BAUTQGNlMDc0ZGE1ZDUwODdmOThlNGRhMWVlNWIyOGI3YjdkM2ZiYmNiODU0MTIz
ZTllNjBiZDdmMTdjNTUxMzg0YzYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOjDgVeUvrd5f8R2lHSWlERB4DHz9NG+AtXIvGs0CdBNjkmASlHmIBpP6Oge
vJ9mXVMgC2zinClD6PMsDf4pQQ9ILYxAiK2AagVtCzGCT6KvJc6yM5t+wxQrBKsk
IEPeFEVBq1D+j0+AnyYJdvEW4nKYHTzu0xXPJV9zteLq4SqNNNSYz8x6zngI91BK
sSnt9dsu0DH4uAvK3XNiEJDCGYL31kqp6kOQzf0T3T6py9Zk4gGRgWoEGYrqJ2CZ
OKkYbJWyIJcn3XEKUbUu/Ys7bJrzN7I7hXy7X2FLsurTovDPVjsw8OrYNuj2j2zZ
/i1y3FtBQ+soWE0FZv4bii3/SscCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBS8o3A3
2ASUikfftMNYE5XLZe04azAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MTY0NjYyMTctZGNlZC00YTVhLWE3MGQtMzZhZTZhYjZhY2JlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAjNcMA0G
CSqGSIb3DQEBCwUAA4IBAQBblsBvlZJkIPv8/1yI5avgdVkBnNx3fy1O7ccmNt0M
/bdxeVWjY8mBEPUnwfdb+nUUwaG7/nw+aPIbQE8N7lHnBqCAhnNbjxjZLj0BfOY8
h0ZGLr1Hx1gnwrSwia5LbmuwiO528v5WdBgcn0L5sRzOfPiCxkC0w0rFCSXgeeUS
srWqmelq9mgboVuRKA437yX+qOg5thhcT1sENKj2zLKwSCfW1NAPbR2agWQpRsNm
kGKw0WJrbrYNnnrdSO0Jv5xAny4gTuDgBV7iIx1t6CyKTsrHYnI03iRVapg1ZPkC
kPugsXpwBYbqOnTFKp5OQ8DbQjDIA0txf1CPg+iC4P6B
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:26 2025 by rpki-client