Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/81bd2649-ad60-4c6a-bdf9-7b775e3d060e.roa
File: 81bd2649-ad60-4c6a-bdf9-7b775e3d060e.roa (raw, json)
Hash identifier: tzHSTPDnn3/ezRhjkCL42sUDfeqN4fEydzN7aJevlto=
Subject key identifier: AC:01:1D:EB:2A:C1:BA:FB:80:24:1A:74:2D:C8:C3:F8:F7:28:75:BC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5720954FC7E7B43617917BD89BCA2D648BB2890C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/81bd2649-ad60-4c6a-bdf9-7b775e3d060e.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a01:578::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:20:95:4f:c7:e7:b4:36:17:91:7b:d8:9b:ca:2d:64:8b:b2:89:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: serialNumber=378cbf5b677ecf66f36196963e50b140593891e8d5e0392db0ae99f2084e40b6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bb:18:d7:2e:61:ae:36:3c:0e:7e:b0:8d:6f:
f4:a9:54:94:ef:3c:fc:c3:f3:4d:55:d8:c1:78:c7:
04:c0:a1:dd:03:1d:9b:e7:a4:74:bc:3c:dd:96:b3:
60:f1:16:82:80:7e:a3:e4:f0:37:61:31:30:da:8a:
87:23:ab:42:49:db:84:ab:9d:f4:0c:af:a1:3b:46:
1f:25:7f:69:c2:4f:ef:ae:db:eb:37:c0:ef:a7:13:
0e:0e:37:db:68:ec:f7:64:da:4f:35:7d:2d:25:3c:
dd:11:e8:d9:c1:4f:ef:55:1e:4d:d4:ae:3d:4a:2b:
6a:66:1b:ec:77:c6:af:84:51:f4:55:68:8a:7b:3e:
ca:7e:78:53:28:21:e2:3c:1b:80:26:82:9c:6e:cd:
45:1a:5f:12:57:b6:9e:c4:16:e1:35:74:64:4e:d6:
52:58:78:4e:b3:21:c9:fc:1c:3c:22:b3:4d:84:cd:
40:6b:03:ad:7d:9f:6b:ac:29:29:15:6b:cf:6f:c5:
53:05:3e:d4:14:fc:86:be:06:9f:cb:4e:32:2b:77:
55:95:17:4a:1d:9e:58:d3:f5:99:ed:99:6c:bf:70:
06:32:5b:12:7e:73:2b:b1:5b:92:81:cf:5e:4c:08:
cf:88:aa:49:c1:94:74:5e:80:93:e1:1f:f7:c8:4c:
72:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:01:1D:EB:2A:C1:BA:FB:80:24:1A:74:2D:C8:C3:F8:F7:28:75:BC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/81bd2649-ad60-4c6a-bdf9-7b775e3d060e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578::/32
Signature Algorithm: sha256WithRSAEncryption
5e:36:53:4e:17:54:f5:e2:05:f8:0b:7e:c4:31:29:d2:e4:78:
2f:ee:bc:b2:d9:03:8b:80:78:e2:d1:cc:50:85:82:57:54:8a:
66:35:14:3b:19:ac:f8:82:38:5b:65:5c:72:68:da:9d:f5:f7:
29:87:af:42:c8:84:e8:7e:a5:75:26:ce:76:09:d5:75:06:c7:
bf:8d:3b:32:fd:57:e3:89:1c:05:b5:08:c3:b2:08:88:f4:85:
20:31:d8:42:b8:04:fd:20:d6:9e:89:41:f6:49:ad:50:9a:64:
27:9b:bf:f0:94:bd:84:15:54:d1:60:77:fe:bb:91:ce:6d:f4:
90:15:c8:5a:c2:50:47:a9:90:d0:04:8b:a8:94:08:dc:5e:93:
52:3a:89:0a:ca:14:4f:59:9c:ef:b3:8a:eb:7f:ae:eb:fc:3e:
f2:ba:67:19:f3:ee:95:75:6a:15:1f:5e:b8:f9:fc:6f:35:09:
59:1e:71:98:77:6b:4d:cb:58:2a:b7:77:af:61:60:ef:c6:58:
ce:b9:c0:b4:f2:6f:77:17:4d:32:52:7c:fa:6c:35:5e:2c:af:
f1:03:99:cd:83:79:7c:29:d3:f3:5e:1c:5a:4f:53:ac:59:3e:
3c:8e:11:8e:2b:55:47:53:8b:70:9f:b0:26:e0:99:c7:79:03:
49:3c:0c:37
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUVyCVT8fntDYXkXvYm8otZIuyiQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAxMjQwMDAwMDBaFw0yNTAyMjgyMzU5NTlaMHoxSTBHBgNV
BAUTQDM3OGNiZjViNjc3ZWNmNjZmMzYxOTY5NjNlNTBiMTQwNTkzODkxZThkNWUw
MzkyZGIwYWU5OWYyMDg0ZTQwYjYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMS7GNcuYa42PA5+sI1v9KlUlO88/MPzTVXYwXjHBMCh3QMdm+ekdLw83Zaz
YPEWgoB+o+TwN2ExMNqKhyOrQknbhKud9AyvoTtGHyV/acJP767b6zfA76cTDg43
22js92TaTzV9LSU83RHo2cFP71UeTdSuPUoramYb7HfGr4RR9FVoins+yn54Uygh
4jwbgCaCnG7NRRpfEle2nsQW4TV0ZE7WUlh4TrMhyfwcPCKzTYTNQGsDrX2fa6wp
KRVrz2/FUwU+1BT8hr4Gn8tOMit3VZUXSh2eWNP1me2ZbL9wBjJbEn5zK7FbkoHP
XkwIz4iqScGUdF6Ak+Ef98hMcqkCAwEAAaOCAiIwggIeMB0GA1UdDgQWBBSsAR3r
KsG6+4AkGnQtyMP49yh1vDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ODFiZDI2NDktYWQ2MC00YzZhLWJkZjktN2I3NzVlM2QwNjBlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoBBXgw
DQYJKoZIhvcNAQELBQADggEBAF42U04XVPXiBfgLfsQxKdLkeC/uvLLZA4uAeOLR
zFCFgldUimY1FDsZrPiCOFtlXHJo2p319ymHr0LIhOh+pXUmznYJ1XUGx7+NOzL9
V+OJHAW1CMOyCIj0hSAx2EK4BP0g1p6JQfZJrVCaZCebv/CUvYQVVNFgd/67kc5t
9JAVyFrCUEepkNAEi6iUCNxek1I6iQrKFE9ZnO+ziut/ruv8PvK6Zxnz7pV1ahUf
Xrj5/G81CVkecZh3a03LWCq3d69hYO/GWM65wLTyb3cXTTJSfPpsNV4sr/EDmc2D
eXwp0/NeHFpPU6xZPjyOEY4rVUdTi3CfsCbgmcd5A0k8DDc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:09:43 2025 by rpki-client