Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4f9d3c39-ae76-4f22-9df9-c6501acbcc84.roa
File: 4f9d3c39-ae76-4f22-9df9-c6501acbcc84.roa (raw, json)
Hash identifier: KcD5BeMXIRQD6+OiPhWfN3OAyRbIsAt2W/xfUBEzmbo=
Subject key identifier: 8A:10:9C:FE:2F:27:80:57:D4:28:88:67:CD:BD:00:B5:BD:29:68:29
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 49F073389B4F6D4BA2378C557FE9E05033084861
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4f9d3c39-ae76-4f22-9df9-c6501acbcc84.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:f0:73:38:9b:4f:6d:4b:a2:37:8c:55:7f:e9:e0:50:33:08:48:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=b04995ce0991783f92d352670823b8c1d5925eebb0f1c730f2b376c12c11deb1, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:7a:5f:37:28:b1:96:51:67:ae:30:e5:7e:
fa:d0:21:bd:13:8d:dc:80:cb:23:38:94:32:b9:c4:
9c:fd:43:1f:4b:a8:0f:c8:3e:1d:5a:f0:9b:fd:a1:
01:62:04:b0:bf:35:0c:9c:c4:be:4f:40:b6:86:b8:
8a:56:48:ef:aa:76:a3:a2:45:f1:79:6e:0f:08:d9:
87:9e:75:6c:9e:0a:f8:80:5c:06:5d:d0:7e:a3:e1:
60:f8:f4:5d:2b:0b:9b:b9:fc:5c:bc:8f:cf:6e:54:
d2:33:d9:32:d0:fb:5b:8e:e2:61:3e:ac:bf:7d:17:
72:fe:51:16:5a:ad:8e:28:83:ec:09:40:9c:f9:19:
7c:84:07:0f:53:29:7f:1f:5a:b3:a2:39:70:cd:e8:
b7:15:bf:76:de:93:c9:5c:40:b2:ff:ce:f6:f1:7e:
9e:f8:88:98:41:9b:b0:f9:66:3b:97:9b:aa:68:5f:
a1:e3:40:07:23:6a:f6:83:8e:87:77:92:06:ca:c4:
76:3d:20:ee:5a:54:e6:e0:83:58:10:78:ad:37:81:
d7:2b:56:ec:5e:0a:ff:af:f0:d4:b3:0b:cc:37:24:
36:74:bc:08:ce:7a:2a:be:a3:a9:2c:46:cb:ff:aa:
f6:79:e6:8c:0a:f9:7d:84:df:36:1e:4f:1e:10:4f:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:10:9C:FE:2F:27:80:57:D4:28:88:67:CD:BD:00:B5:BD:29:68:29
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4f9d3c39-ae76-4f22-9df9-c6501acbcc84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.88.0/21
Signature Algorithm: sha256WithRSAEncryption
c8:52:39:51:b1:29:46:ce:62:d2:22:25:cf:90:b0:13:bf:99:
a7:a8:52:22:00:38:83:9e:4a:84:45:2b:43:74:12:e3:27:16:
aa:1d:2a:71:bb:cb:1a:13:61:0e:41:00:3d:c7:72:42:06:8b:
78:2a:49:05:b0:46:40:68:88:16:ca:7a:f5:57:4b:1b:f3:68:
b4:2e:20:e2:9f:8c:cd:cf:66:2f:44:2a:e7:ef:e7:61:a2:5e:
98:76:a5:e1:ea:ea:45:78:3e:0a:81:6a:ac:3f:05:31:b7:22:
ae:a6:65:b4:b9:59:9a:51:69:30:54:f3:43:95:5a:fe:9b:64:
e5:59:61:a1:df:0e:d8:41:6c:d5:43:1d:47:56:fd:3e:58:31:
2e:d8:a3:b9:9e:79:79:c8:e4:ae:b1:1f:c1:e7:3b:e4:2e:4e:
2c:b6:f9:3d:eb:e5:44:2e:a9:f8:4a:85:31:cc:5e:bd:0d:dc:
5d:01:90:cb:f9:3f:ed:8f:c1:b6:11:d9:34:d1:34:6a:07:ae:
cc:df:1b:50:5c:4b:0f:94:c6:08:1c:b0:c0:2f:be:8c:c2:12:
9d:6c:74:75:70:50:b2:a5:cb:d3:72:29:3f:a4:8d:bd:50:6b:
eb:8a:27:a9:c4:91:59:26:aa:15:e0:85:a9:26:3e:86:7a:4f:
a0:8e:bb:c5
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUSfBzOJtPbUuiN4xVf+ngUDMISGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAxMTQwMDAwMDBaFw0yNTAyMTgyMzU5NTlaMHoxSTBHBgNV
BAUTQGIwNDk5NWNlMDk5MTc4M2Y5MmQzNTI2NzA4MjNiOGMxZDU5MjVlZWJiMGYx
YzczMGYyYjM3NmMxMmMxMWRlYjExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ9Cel83KLGWUWeuMOV++tAhvRON3IDLIziUMrnEnP1DH0uoD8g+HVrwm/2h
AWIEsL81DJzEvk9Atoa4ilZI76p2o6JF8XluDwjZh551bJ4K+IBcBl3QfqPhYPj0
XSsLm7n8XLyPz25U0jPZMtD7W47iYT6sv30Xcv5RFlqtjiiD7AlAnPkZfIQHD1Mp
fx9as6I5cM3otxW/dt6TyVxAsv/O9vF+nviImEGbsPlmO5ebqmhfoeNAByNq9oOO
h3eSBsrEdj0g7lpU5uCDWBB4rTeB1ytW7F4K/6/w1LMLzDckNnS8CM56Kr6jqSxG
y/+q9nnmjAr5fYTfNh5PHhBPHDMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSKEJz+
LyeAV9QoiGfNvQC1vSloKTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NGY5ZDNjMzktYWU3Ni00ZjIyLTlkZjktYzY1MDFhY2JjYzg0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAzMAWDAN
BgkqhkiG9w0BAQsFAAOCAQEAyFI5UbEpRs5i0iIlz5CwE7+Zp6hSIgA4g55KhEUr
Q3QS4ycWqh0qcbvLGhNhDkEAPcdyQgaLeCpJBbBGQGiIFsp69VdLG/NotC4g4p+M
zc9mL0Qq5+/nYaJemHal4erqRXg+CoFqrD8FMbcirqZltLlZmlFpMFTzQ5Va/ptk
5Vlhod8O2EFs1UMdR1b9PlgxLtijuZ55ecjkrrEfwec75C5OLLb5PevlRC6p+EqF
McxevQ3cXQGQy/k/7Y/BthHZNNE0ageuzN8bUFxLD5TGCBywwC++jMISnWx0dXBQ
sqXL03IpP6SNvVBr64onqcSRWSaqFeCFqSY+hnpPoI67xQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:10 2025 by rpki-client