Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/63e023f1-83fd-412f-8365-33afe1ac80af.roa
File: 63e023f1-83fd-412f-8365-33afe1ac80af.roa (raw, json)
Hash identifier: CUAWcqWgB7ChS2uWeBHf5PtBcPPfZgJc0YQMsMW/OCI=
Subject key identifier: 46:A5:0E:98:0F:7B:5B:6B:C8:08:CB:97:0D:7F:C9:E2:C4:F4:E6:27
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7B06A1353902E0F539D79EF55F7F9EC627C1A9C8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/63e023f1-83fd-412f-8365-33afe1ac80af.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.160.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:06:a1:35:39:02:e0:f5:39:d7:9e:f5:5f:7f:9e:c6:27:c1:a9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=41c0799562bfc827a7bd58b52cfa508eedc33de3a676a817a1d57a171b41dffa, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:60:2e:79:7d:ef:fa:ec:e3:c0:35:dc:b5:
2c:56:fb:73:84:cc:42:9e:d5:94:64:ce:a2:47:d1:
67:77:ad:91:ed:d4:76:8c:c3:ae:f9:bc:f2:c4:22:
d4:07:eb:47:0c:83:a5:da:21:0c:01:85:2a:07:33:
ed:3c:3b:7e:c0:b0:e2:61:f1:f1:f7:ef:68:51:02:
f1:5c:72:29:34:06:68:17:db:de:13:81:94:c1:6f:
b4:91:b4:69:de:39:bb:c3:e7:6d:32:f3:69:c3:0f:
39:15:66:26:1d:02:81:43:a7:5e:3d:98:85:c8:99:
32:f5:1a:84:83:6e:ca:61:ed:5f:4e:d5:83:75:22:
96:d6:ed:3f:54:a6:9c:c7:2d:5c:71:3b:cf:8b:e2:
4a:f8:dd:98:90:ac:1d:61:9c:7b:c9:c1:77:af:7a:
16:72:f6:aa:4f:6a:45:be:20:72:21:d7:44:a7:c1:
54:cf:62:b4:44:26:22:19:bd:ef:95:9a:f1:c6:00:
1b:59:fa:7a:4f:16:1b:89:c5:83:18:0c:dc:59:ee:
3f:d7:f7:63:66:17:e1:79:85:f4:f6:53:6d:90:53:
0d:0d:85:43:bd:96:82:ba:b2:21:8d:4a:0c:59:e1:
7f:b5:d8:1d:4a:e6:3e:88:20:61:91:64:68:50:b4:
77:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A5:0E:98:0F:7B:5B:6B:C8:08:CB:97:0D:7F:C9:E2:C4:F4:E6:27
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/63e023f1-83fd-412f-8365-33afe1ac80af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.160.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:3b:25:61:79:d6:38:e0:b0:c5:77:47:75:a9:ae:7d:bd:5a:
a4:5c:7e:e8:30:ee:76:ca:72:e3:d3:ff:f2:91:40:37:94:66:
69:77:8a:3c:bb:08:a4:c0:c3:9e:99:6f:7d:94:6e:e9:35:97:
47:2d:c0:8c:11:34:5c:37:f7:de:0d:7c:16:57:c6:a4:90:4c:
82:1c:f5:9b:03:98:bc:34:0a:88:85:f1:da:00:97:d3:48:fa:
8d:37:20:93:d0:f0:7a:df:0c:8f:43:14:28:46:b6:7c:58:8b:
03:fe:af:57:c6:b8:c1:f2:75:1c:a9:fd:04:df:2d:40:fe:70:
fe:de:ee:60:d5:76:41:f6:e1:63:35:44:f7:62:86:e1:2f:a8:
6d:b6:0c:d5:8e:7b:ea:7b:5a:a7:ee:26:bc:de:82:de:66:3f:
40:b4:bf:02:4d:09:51:6b:be:ff:b7:ec:db:ee:de:e8:a1:9a:
fa:6b:03:4e:6c:fe:42:da:85:1d:6c:59:b6:83:c2:ff:a2:c6:
2a:b9:f6:95:a2:3f:8e:54:e7:69:89:48:f0:db:5d:7e:60:6a:
74:41:00:ba:90:56:82:09:25:03:fd:49:f7:65:f1:ab:41:f5:
a0:63:43:9d:cc:95:eb:1b:22:3c:34:62:82:99:dc:84:34:23:
20:32:d7:c1
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUewahNTkC4PU51571X3+exifBqcgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAxMDcwMDAwMDBaFw0yNTAyMTEyMzU5NTlaMHoxSTBHBgNV
BAUTQDQxYzA3OTk1NjJiZmM4MjdhN2JkNThiNTJjZmE1MDhlZWRjMzNkZTNhNjc2
YTgxN2ExZDU3YTE3MWI0MWRmZmExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMLNYC55fe/67OPANdy1LFb7c4TMQp7VlGTOokfRZ3etke3UdozDrvm88sQi
1AfrRwyDpdohDAGFKgcz7Tw7fsCw4mHx8ffvaFEC8VxyKTQGaBfb3hOBlMFvtJG0
ad45u8PnbTLzacMPORVmJh0CgUOnXj2YhciZMvUahINuymHtX07Vg3UiltbtP1Sm
nMctXHE7z4viSvjdmJCsHWGce8nBd696FnL2qk9qRb4gciHXRKfBVM9itEQmIhm9
75Wa8cYAG1n6ek8WG4nFgxgM3FnuP9f3Y2YX4XmF9PZTbZBTDQ2FQ72WgrqyIY1K
DFnhf7XYHUrmPoggYZFkaFC0dx0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRGpQ6Y
D3tba8gIy5cNf8nixPTmJzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NjNlMDIzZjEtODNmZC00MTJmLTgzNjUtMzNhZmUxYWM4MGFmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADOgMA0G
CSqGSIb3DQEBCwUAA4IBAQCsOyVhedY44LDFd0d1qa59vVqkXH7oMO52ynLj0//y
kUA3lGZpd4o8uwikwMOemW99lG7pNZdHLcCMETRcN/feDXwWV8akkEyCHPWbA5i8
NAqIhfHaAJfTSPqNNyCT0PB63wyPQxQoRrZ8WIsD/q9XxrjB8nUcqf0E3y1A/nD+
3u5g1XZB9uFjNUT3YobhL6httgzVjnvqe1qn7ia83oLeZj9AtL8CTQlRa77/t+zb
7t7ooZr6awNObP5C2oUdbFm2g8L/osYqufaVoj+OVOdpiUjw211+YGp0QQC6kFaC
CSUD/Un3ZfGrQfWgY0OdzJXrGyI8NGKCmdyENCMgMtfB
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:27:52 2025 by rpki-client