Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80e298e3-975b-4cea-9586-8d04a37a53a2.roa
File: 80e298e3-975b-4cea-9586-8d04a37a53a2.roa (raw, json)
Hash identifier: tDw9XnLRFfQRFrF9d57JlmCQBW/cfdwKi8yjQpZmunU=
Subject key identifier: 36:21:F3:9C:F3:95:29:4A:36:FE:80:A5:DC:27:3C:90:9D:7D:F2:9B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 423A2B91B471D063571E768085EF2547E8F96551
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80e298e3-975b-4cea-9586-8d04a37a53a2.roa
Signing time: Tue 28 Jan 2025 00:00:00 +0000
ROA not before: Tue 28 Jan 2025 00:00:00 +0000
ROA not after: Tue 04 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 57.93.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:3a:2b:91:b4:71:d0:63:57:1e:76:80:85:ef:25:47:e8:f9:65:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 28 00:00:00 2025 GMT
Not After : Mar 4 23:59:59 2025 GMT
Subject: serialNumber=e356d249ac372f6148cbedb048af1b07f9a7dd06db3fd5b3ea2154ce94ff7c79, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:91:45:f5:21:67:8f:95:05:d3:8d:24:cc:
70:48:19:f1:ee:99:64:d2:ba:77:cc:26:20:2a:91:
22:5e:d6:16:23:fa:74:35:f3:62:3f:24:d7:7c:8f:
09:2e:1e:e3:f2:94:cf:9c:61:02:eb:6f:01:b0:19:
e4:52:f0:ce:c4:b0:80:c6:5f:22:58:1e:79:af:f7:
10:5b:75:a2:7c:4f:a6:a6:27:07:03:79:c5:1b:fa:
9f:db:59:2b:e2:c1:fc:07:2e:d2:3b:fe:f0:d4:c6:
cd:e4:19:bc:55:4c:9c:a6:60:a2:41:85:d9:3f:08:
50:f2:8e:7f:ed:28:b7:f7:9b:48:c3:62:0c:dc:46:
f1:95:09:9b:06:52:0e:d3:78:cb:57:51:d6:8d:34:
3d:0b:e7:15:f1:30:3b:70:9a:4e:37:a5:33:83:93:
29:3c:08:1f:67:a2:fe:2a:1d:96:6a:0b:05:8b:b5:
80:36:ab:d0:00:30:6e:68:a6:f7:ac:bb:3a:b3:37:
88:0c:07:69:53:1d:42:cb:6d:63:67:b5:2d:29:ab:
75:a8:ca:dc:fc:ad:0f:22:a7:56:79:76:14:b5:07:
b6:7a:24:40:fe:10:98:21:7e:29:d6:b5:09:3f:bc:
dc:8a:e3:12:c8:c0:03:7a:f4:99:26:a5:db:35:5a:
ce:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:21:F3:9C:F3:95:29:4A:36:FE:80:A5:DC:27:3C:90:9D:7D:F2:9B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80e298e3-975b-4cea-9586-8d04a37a53a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.93.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:2f:ef:61:83:1f:77:22:68:4e:11:cf:db:e9:54:c8:4c:d1:
19:9d:5f:2a:43:26:46:4d:11:27:89:0c:85:58:b1:ee:f5:83:
d6:c3:2e:85:dd:5b:c7:96:a7:19:ff:78:92:f2:1f:50:90:3c:
08:d1:2d:a7:50:90:ec:90:0e:5d:21:48:b6:ab:f6:b7:c6:db:
fd:c5:da:8f:b9:db:cb:91:1e:c6:c5:23:a1:1e:46:99:9f:a6:
61:2e:a0:94:33:5b:07:4e:c5:d3:9b:79:be:b6:34:62:82:e0:
5b:b4:01:3f:97:ad:a7:a7:d7:00:43:38:01:2b:35:41:e3:45:
7a:f5:b1:40:78:29:16:49:06:10:52:fd:0b:2e:4a:f2:64:f3:
a7:09:ea:2b:a5:30:6a:a1:1e:f3:db:bf:d2:b3:d2:14:1a:50:
6d:37:1e:1c:54:ab:e2:ba:28:91:68:81:45:fb:e7:54:99:50:
d1:50:fd:55:33:a1:63:a0:68:68:6f:60:ae:cd:86:25:13:74:
f8:50:f2:b3:32:b0:ac:61:49:da:34:c5:82:bb:57:16:ba:b2:
c4:8f:b2:2c:32:05:78:9c:65:9b:32:d1:f7:97:83:ba:a5:57:
02:33:d0:5c:b0:33:94:38:0f:71:86:26:7b:e0:87:9a:46:a7:
28:a1:eb:30
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUQjorkbRx0GNXHnaAhe8lR+j5ZVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAxMjgwMDAwMDBaFw0yNTAzMDQyMzU5NTlaMHoxSTBHBgNV
BAUTQGUzNTZkMjQ5YWMzNzJmNjE0OGNiZWRiMDQ4YWYxYjA3ZjlhN2RkMDZkYjNm
ZDViM2VhMjE1NGNlOTRmZjdjNzkxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL/IkUX1IWePlQXTjSTMcEgZ8e6ZZNK6d8wmICqRIl7WFiP6dDXzYj8k13yP
CS4e4/KUz5xhAutvAbAZ5FLwzsSwgMZfIlgeea/3EFt1onxPpqYnBwN5xRv6n9tZ
K+LB/Acu0jv+8NTGzeQZvFVMnKZgokGF2T8IUPKOf+0ot/ebSMNiDNxG8ZUJmwZS
DtN4y1dR1o00PQvnFfEwO3CaTjelM4OTKTwIH2ei/iodlmoLBYu1gDar0AAwbmim
96y7OrM3iAwHaVMdQsttY2e1LSmrdajK3PytDyKnVnl2FLUHtnokQP4QmCF+Kda1
CT+83IrjEsjAA3r0mSal2zVazvkCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQ2IfOc
85UpSjb+gKXcJzyQnX3ymzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ODBlMjk4ZTMtOTc1Yi00Y2VhLTk1ODYtOGQwNGEzN2E1M2EyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADldMA0G
CSqGSIb3DQEBCwUAA4IBAQAiL+9hgx93ImhOEc/b6VTITNEZnV8qQyZGTREniQyF
WLHu9YPWwy6F3VvHlqcZ/3iS8h9QkDwI0S2nUJDskA5dIUi2q/a3xtv9xdqPudvL
kR7GxSOhHkaZn6ZhLqCUM1sHTsXTm3m+tjRiguBbtAE/l62np9cAQzgBKzVB40V6
9bFAeCkWSQYQUv0LLkryZPOnCeorpTBqoR7z27/Ss9IUGlBtNx4cVKviuiiRaIFF
++dUmVDRUP1VM6FjoGhob2CuzYYlE3T4UPKzMrCsYUnaNMWCu1cWurLEj7IsMgV4
nGWbMtH3l4O6pVcCM9BcsDOUOA9xhiZ74IeaRqcooesw
-----END CERTIFICATE-----
Generated at Sun May 4 02:13:30 2025 by rpki-client