Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/286f881c-8fa0-4200-ada2-20a0cc49038e.roa
File: 286f881c-8fa0-4200-ada2-20a0cc49038e.roa (raw, json)
Hash identifier: gRTRJuejon/r0Q3DV/799MOGbZkIB36Q4YgHemjHrF0=
Subject key identifier: 71:5B:82:2E:FE:30:66:36:40:43:D6:AE:7B:4E:C3:8E:53:34:87:25
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4BB564D5EBCC0C77AFA61CEE0A898A240AE70130
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/286f881c-8fa0-4200-ada2-20a0cc49038e.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.166.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:b5:64:d5:eb:cc:0c:77:af:a6:1c:ee:0a:89:8a:24:0a:e7:01:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=a388079cc6b3077a860a728328389304165ccab1d08e1b472a4ef3fe2f9d1c9e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:67:3f:1d:05:c1:18:17:85:d7:7d:bf:df:
ca:0e:c9:ae:fd:b3:32:9c:5f:8e:e2:6f:78:13:8f:
ec:00:1a:61:21:68:67:d4:27:5e:32:f5:0b:5a:56:
4f:12:bf:7d:90:5f:84:0f:93:f7:57:17:0b:45:ec:
9e:b2:33:73:5f:2a:ad:b6:a0:f6:62:cf:ad:06:e9:
e8:69:ba:79:6a:56:50:e3:d6:9b:80:45:ed:26:78:
00:69:f8:5e:f1:d0:33:66:93:62:79:88:44:0b:fd:
f9:fb:88:c7:5f:dc:f2:af:a7:83:e2:e4:33:e7:29:
6b:0e:09:ac:62:7d:c9:2c:ee:2f:bc:30:40:89:9e:
53:26:9a:26:21:1d:9b:c8:37:e5:8a:ed:da:ba:94:
ad:c0:17:e4:74:21:cb:bf:86:01:b6:95:b3:57:91:
10:0a:1c:a8:84:a5:44:e8:8e:ae:12:c7:c0:1e:df:
b3:f2:d4:0f:b9:91:7a:ca:d9:aa:5d:f5:82:db:63:
d9:77:a8:5d:7e:f8:31:3e:3c:a6:8e:b2:77:d0:f5:
40:b8:47:c3:4f:7d:b7:cc:e1:11:bf:32:41:2a:60:
1d:99:2d:54:08:e8:09:1d:85:3f:06:17:1b:17:85:
63:26:09:3e:00:78:68:c2:9f:8b:1f:ed:a1:c9:d0:
ef:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5B:82:2E:FE:30:66:36:40:43:D6:AE:7B:4E:C3:8E:53:34:87:25
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/286f881c-8fa0-4200-ada2-20a0cc49038e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.166.0.0/15
Signature Algorithm: sha256WithRSAEncryption
7e:c6:40:a8:7c:40:d3:5d:4c:31:eb:bd:2e:02:b4:ec:77:b5:
e7:61:b2:30:f1:e4:4f:24:90:37:ad:1a:96:6d:0d:59:6e:15:
50:cd:5a:54:b1:4c:83:4e:34:7c:1b:51:32:f7:10:ba:cb:1d:
ef:4d:be:23:26:0c:6e:78:db:08:7c:ee:57:ac:c6:81:82:02:
f3:fe:4e:b8:d3:19:84:a8:c5:cc:62:e6:0e:9c:b5:7c:1c:36:
4f:d6:d0:c5:c0:f7:f6:19:62:64:ca:41:54:a7:ec:ad:0d:df:
77:ff:20:3e:cf:66:a8:97:41:03:71:b4:ff:85:e3:37:44:06:
26:34:3c:43:10:2c:1b:0c:5b:e9:0c:17:78:73:f3:91:01:f0:
2f:ed:42:ec:ab:74:61:8d:ab:f8:3f:90:38:41:40:53:39:ad:
88:64:4e:4e:69:fb:c7:00:b4:e1:7d:a6:34:1e:b1:72:dd:bd:
7e:1f:aa:48:1e:f0:6f:dc:be:75:13:73:bc:c4:30:1b:69:f0:
68:58:d3:97:2b:f6:8f:55:93:85:c1:b2:88:8d:37:d5:40:96:
88:09:04:b5:6e:f1:66:41:7d:f7:e6:02:0e:60:62:01:ba:ab:
b8:c2:ca:98:5d:f2:54:64:d9:a5:a6:44:e0:64:5d:de:55:d5:
32:fa:cf:7c
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUS7Vk1evMDHevphzuComKJArnATAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAxMDcwMDAwMDBaFw0yNTAyMTEyMzU5NTlaMHoxSTBHBgNV
BAUTQGEzODgwNzljYzZiMzA3N2E4NjBhNzI4MzI4Mzg5MzA0MTY1Y2NhYjFkMDhl
MWI0NzJhNGVmM2ZlMmY5ZDFjOWUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKmiZz8dBcEYF4XXfb/fyg7Jrv2zMpxfjuJveBOP7AAaYSFoZ9QnXjL1C1pW
TxK/fZBfhA+T91cXC0XsnrIzc18qrbag9mLPrQbp6Gm6eWpWUOPWm4BF7SZ4AGn4
XvHQM2aTYnmIRAv9+fuIx1/c8q+ng+LkM+cpaw4JrGJ9ySzuL7wwQImeUyaaJiEd
m8g35Yrt2rqUrcAX5HQhy7+GAbaVs1eREAocqISlROiOrhLHwB7fs/LUD7mResrZ
ql31gttj2XeoXX74MT48po6yd9D1QLhHw099t8zhEb8yQSpgHZktVAjoCR2FPwYX
GxeFYyYJPgB4aMKfix/tocnQ74sCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRxW4Iu
/jBmNkBD1q57TsOOUzSHJTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
Mjg2Zjg4MWMtOGZhMC00MjAwLWFkYTItMjBhMGNjNDkwMzhlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATOmMA0G
CSqGSIb3DQEBCwUAA4IBAQB+xkCofEDTXUwx670uArTsd7XnYbIw8eRPJJA3rRqW
bQ1ZbhVQzVpUsUyDTjR8G1Ey9xC6yx3vTb4jJgxueNsIfO5XrMaBggLz/k640xmE
qMXMYuYOnLV8HDZP1tDFwPf2GWJkykFUp+ytDd93/yA+z2aol0EDcbT/heM3RAYm
NDxDECwbDFvpDBd4c/ORAfAv7ULsq3Rhjav4P5A4QUBTOa2IZE5OafvHALThfaY0
HrFy3b1+H6pIHvBv3L51E3O8xDAbafBoWNOXK/aPVZOFwbKIjTfVQJaICQS1bvFm
QX335gIOYGIBuqu4wsqYXfJUZNmlpkTgZF3eVdUy+s98
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:04:20 2025 by rpki-client