Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/397b5a86-52b0-4a8c-87de-e6da77812b46.roa
File: 397b5a86-52b0-4a8c-87de-e6da77812b46.roa (raw, json)
Hash identifier: K/YPqh90RxvP48Xt6qQT9HUmJE4pHURz/bQw4xioSAI=
Subject key identifier: 6F:37:E8:71:28:89:EB:30:AB:68:CB:66:8F:DA:09:9A:14:EB:94:CF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 100666A01C305633539A1419B6CC8CCF414692DB
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/397b5a86-52b0-4a8c-87de-e6da77812b46.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.248.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:06:66:a0:1c:30:56:33:53:9a:14:19:b6:cc:8c:cf:41:46:92:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=0abdc1fb122e1853dfb2cfcf4697480e623f5e9f41c6ce36187d0ffa0c227d2e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:53:bb:27:67:95:4c:83:9f:9f:4f:76:86:
fd:70:22:40:90:cd:05:22:dd:ca:87:bd:8a:07:be:
df:b4:83:0e:10:6b:cb:16:f0:6e:d5:8e:97:d7:7a:
8a:35:36:93:76:97:c3:15:93:96:e7:8d:47:7f:2e:
8f:5f:a2:c8:dc:3f:21:75:bd:84:cb:75:fb:c6:da:
a7:3d:dc:e1:9c:27:16:5b:74:1a:f2:aa:37:1e:22:
d5:4b:e3:ed:b0:f7:7b:a8:0a:13:c5:0e:c4:f7:f6:
74:d0:65:74:c7:b3:8b:00:7a:67:a5:a2:c1:c2:87:
5d:21:43:77:a0:fc:69:03:96:91:f8:53:cd:7f:21:
e1:4a:22:66:64:7f:aa:98:66:90:43:92:1b:04:bf:
4f:f4:15:f3:56:90:d1:8d:51:e3:20:3f:de:cf:67:
3b:98:32:50:a7:6a:ae:84:bd:fc:0b:e5:6c:fb:5f:
78:e3:33:3b:57:97:f1:d5:b2:bf:3e:7f:80:28:d4:
6e:c9:75:82:cc:ef:69:76:35:db:38:fb:e4:10:42:
98:15:11:51:10:6e:57:d7:ce:ef:72:e3:6d:c3:36:
15:a3:0e:3f:59:9f:c5:14:88:2d:d3:33:1a:dd:99:
4d:4a:96:c5:22:0b:40:e4:79:9c:4a:6f:fb:9a:eb:
d9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:37:E8:71:28:89:EB:30:AB:68:CB:66:8F:DA:09:9A:14:EB:94:CF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/397b5a86-52b0-4a8c-87de-e6da77812b46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.248.0.0/15
Signature Algorithm: sha256WithRSAEncryption
25:16:e5:f6:74:17:7c:d6:cf:fa:dc:d2:24:30:fb:22:0f:b3:
06:8a:ea:3c:96:49:51:c6:c0:13:87:26:f5:e1:0c:b9:5a:7d:
3f:5a:82:27:10:be:f0:3c:d4:ff:88:98:65:eb:c6:57:b9:33:
4e:b8:a9:fd:b9:59:24:6c:32:c0:f9:2d:ae:48:4e:de:1b:ab:
65:35:62:5f:55:11:fa:59:25:6d:0b:d5:cb:41:eb:f9:90:41:
b4:0b:d8:f3:7d:b4:47:82:bb:38:e5:94:99:a5:3d:b5:8a:62:
c4:d6:86:3f:a7:9d:32:df:79:8c:05:a5:51:bf:9b:13:e9:dc:
3d:cf:00:25:b3:2a:f6:f3:eb:7f:30:48:9c:62:f8:9d:97:1f:
57:96:38:cc:ad:2a:af:71:38:8d:a3:43:f2:28:87:0b:90:a4:
70:81:8a:3e:a3:bc:8a:a6:8d:2c:e3:e5:9d:cb:1d:bb:94:af:
3f:05:2c:c8:f6:7e:d3:33:14:d5:b1:4e:f4:74:68:4d:9a:d8:
14:da:e8:c0:19:36:65:49:2e:27:46:e5:61:6f:c8:9f:1d:e1:
4a:f4:14:67:7d:ce:48:59:d8:29:f2:d7:42:d6:fb:f1:f3:52:
46:c7:44:20:6e:4c:de:d2:65:2c:69:3b:bd:56:3d:c1:2a:49:
2a:31:e5:8e
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUEAZmoBwwVjNTmhQZtsyMz0FGktswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAxMDcwMDAwMDBaFw0yNTAyMTEyMzU5NTlaMHoxSTBHBgNV
BAUTQDBhYmRjMWZiMTIyZTE4NTNkZmIyY2ZjZjQ2OTc0ODBlNjIzZjVlOWY0MWM2
Y2UzNjE4N2QwZmZhMGMyMjdkMmUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALpzU7snZ5VMg5+fT3aG/XAiQJDNBSLdyoe9ige+37SDDhBryxbwbtWOl9d6
ijU2k3aXwxWTlueNR38uj1+iyNw/IXW9hMt1+8bapz3c4ZwnFlt0GvKqNx4i1Uvj
7bD3e6gKE8UOxPf2dNBldMeziwB6Z6WiwcKHXSFDd6D8aQOWkfhTzX8h4UoiZmR/
qphmkEOSGwS/T/QV81aQ0Y1R4yA/3s9nO5gyUKdqroS9/AvlbPtfeOMzO1eX8dWy
vz5/gCjUbsl1gszvaXY12zj75BBCmBURURBuV9fO73LjbcM2FaMOP1mfxRSILdMz
Gt2ZTUqWxSILQOR5nEpv+5rr2dsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRvN+hx
KInrMKtoy2aP2gmaFOuUzzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
Mzk3YjVhODYtNTJiMC00YThjLTg3ZGUtZTZkYTc3ODEyYjQ2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATP4MA0G
CSqGSIb3DQEBCwUAA4IBAQAlFuX2dBd81s/63NIkMPsiD7MGiuo8lklRxsAThyb1
4Qy5Wn0/WoInEL7wPNT/iJhl68ZXuTNOuKn9uVkkbDLA+S2uSE7eG6tlNWJfVRH6
WSVtC9XLQev5kEG0C9jzfbRHgrs45ZSZpT21imLE1oY/p50y33mMBaVRv5sT6dw9
zwAlsyr28+t/MEicYvidlx9XljjMrSqvcTiNo0PyKIcLkKRwgYo+o7yKpo0s4+Wd
yx27lK8/BSzI9n7TMxTVsU70dGhNmtgU2ujAGTZlSS4nRuVhb8ifHeFK9BRnfc5I
Wdgp8tdC1vvx81JGx0Qgbkze0mUsaTu9Vj3BKkkqMeWO
-----END CERTIFICATE-----
Generated at Sat May 3 11:47:41 2025 by rpki-client