Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa
File: 83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa (raw, json)
Hash identifier: Ph34QBhUTo18DnPS5pge08c9f6iNT8UCvXamv7bFCQw=
Subject key identifier: 97:07:70:03:93:59:2C:0B:D5:79:E1:09:5B:14:EF:6B:76:DF:8C:8C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 46CC942A22D22AFC9AE2B5D091200054D68C212A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 213.72.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:cc:94:2a:22:d2:2a:fc:9a:e2:b5:d0:91:20:00:54:d6:8c:21:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=094f13dd6ed9483a5f9fec3f45b407d53a703c7627f0caf1c21e988b88fd9730, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:2b:d3:67:9d:b7:a7:a9:8c:14:4f:0c:19:
c7:a0:28:5a:f2:a2:52:6f:16:37:99:39:45:82:50:
99:04:2a:3d:e2:f0:1d:d9:4c:4b:26:5d:17:33:f4:
2f:cb:66:fc:d9:8c:4c:d2:e6:fd:0a:ac:dd:9b:6b:
1a:56:c3:d8:1b:82:d6:9f:b4:8d:f3:a5:5e:59:5f:
6a:43:28:ad:18:1e:5b:03:74:0f:00:18:b3:71:11:
bb:31:a8:64:ac:d8:ec:ee:fa:4c:0c:69:96:61:51:
33:35:7f:80:a1:90:78:56:34:10:5c:82:95:21:92:
d4:5b:33:fb:08:dd:85:af:ef:61:d0:48:b4:58:d7:
12:f6:5c:c5:ab:54:ed:10:51:f3:14:40:f8:08:81:
0d:1a:34:39:15:12:3c:3f:2b:97:93:99:d7:f1:84:
c4:1f:c1:15:14:db:d2:71:4d:de:2e:f2:5d:7f:16:
d9:7b:51:d6:0b:ac:8e:1e:8a:be:77:5f:71:0e:99:
e8:62:db:3a:e3:b4:2e:08:c3:bb:40:3f:10:00:8d:
c1:3f:dd:a7:d7:e7:e1:e2:a6:d6:d1:f2:62:f7:c4:
b1:5a:e7:15:45:c0:73:3f:73:03:94:64:44:3a:44:
6c:d3:28:17:bc:69:fc:b5:7d:05:7e:1e:36:1b:e3:
18:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:07:70:03:93:59:2C:0B:D5:79:E1:09:5B:14:EF:6B:76:DF:8C:8C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.72.0.0/17
Signature Algorithm: sha256WithRSAEncryption
01:06:a9:ac:f7:8e:9f:30:08:d2:08:cb:fa:f8:38:1b:f4:a3:
5d:a5:1c:19:b5:4c:8d:aa:50:13:c8:cb:d7:d8:23:4d:cb:e6:
fe:91:4a:be:90:99:fc:9d:ab:a1:08:d4:06:04:4f:11:7c:e1:
af:5e:0b:fd:1c:5e:a2:d0:2b:cb:ec:a2:ba:a4:a7:ae:28:af:
8d:d7:87:e6:87:9f:74:11:d6:f0:2e:e5:92:1b:10:65:2b:9c:
00:32:86:c3:b2:b5:ec:c8:38:2b:a1:de:c4:a0:bb:b7:5d:93:
e3:78:6c:98:52:c0:79:ab:a6:63:95:5c:d2:cb:68:e9:b1:ad:
38:b4:cb:fc:b6:fe:82:f2:da:27:43:b2:9d:cf:ca:c2:bc:30:
4d:57:15:06:fc:f8:03:76:8d:81:78:ae:d7:52:7b:75:be:fc:
d7:c7:29:80:fb:1d:a0:ee:ea:19:df:46:6c:ca:83:a5:78:3c:
7d:8e:c4:b1:ed:e0:3c:0d:6f:ab:6e:7f:db:19:38:c0:f6:ca:
86:a3:59:c7:a0:6a:7f:b4:82:fa:da:19:18:86:36:37:0e:09:
43:a3:c6:31:7b:1c:5b:e8:50:1f:90:a2:4a:bc:3c:5d:cf:a5:
ef:86:70:71:a9:52:38:b8:fb:45:22:06:bc:d3:71:91:75:fb:
e7:42:e0:6a
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIURsyUKiLSKvya4rXQkSAAVNaMISowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAxMDcwMDAwMDBaFw0yNTAyMTEyMzU5NTlaMHoxSTBHBgNV
BAUTQDA5NGYxM2RkNmVkOTQ4M2E1ZjlmZWMzZjQ1YjQwN2Q1M2E3MDNjNzYyN2Yw
Y2FmMWMyMWU5ODhiODhmZDk3MzAxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALoOK9NnnbenqYwUTwwZx6AoWvKiUm8WN5k5RYJQmQQqPeLwHdlMSyZdFzP0
L8tm/NmMTNLm/Qqs3ZtrGlbD2BuC1p+0jfOlXllfakMorRgeWwN0DwAYs3ERuzGo
ZKzY7O76TAxplmFRMzV/gKGQeFY0EFyClSGS1Fsz+wjdha/vYdBItFjXEvZcxatU
7RBR8xRA+AiBDRo0ORUSPD8rl5OZ1/GExB/BFRTb0nFN3i7yXX8W2XtR1gusjh6K
vndfcQ6Z6GLbOuO0LgjDu0A/EACNwT/dp9fn4eKm1tHyYvfEsVrnFUXAcz9zA5Rk
RDpEbNMoF7xp/LV9BX4eNhvjGOkCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSXB3AD
k1ksC9V54QlbFO9rdt+MjDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ODNhM2RiZDUtMDU5YS00Zjk1LWI1NWItMjZjNzg2ZjkxZTNiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9VIADAN
BgkqhkiG9w0BAQsFAAOCAQEAAQaprPeOnzAI0gjL+vg4G/SjXaUcGbVMjapQE8jL
19gjTcvm/pFKvpCZ/J2roQjUBgRPEXzhr14L/RxeotAry+yiuqSnriivjdeH5oef
dBHW8C7lkhsQZSucADKGw7K17Mg4K6HexKC7t12T43hsmFLAeaumY5Vc0sto6bGt
OLTL/Lb+gvLaJ0Oync/KwrwwTVcVBvz4A3aNgXiu11J7db7818cpgPsdoO7qGd9G
bMqDpXg8fY7Ese3gPA1vq25/2xk4wPbKhqNZx6Bqf7SC+toZGIY2Nw4JQ6PGMXsc
W+hQH5CiSrw8Xc+l74ZwcalSOLj7RSIGvNNxkXX750Lgag==
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:22:28 2025 by rpki-client