Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8551266c-ef98-4dd7-801f-d816ee2eeade.roa
File: 8551266c-ef98-4dd7-801f-d816ee2eeade.roa (raw, json)
Hash identifier: f9gZymB3FxjYf1Dzv35yL4bR8DcSz8CsCSln2WTsxhM=
Subject key identifier: B1:B9:AB:56:59:9E:25:9D:B5:E0:2A:26:29:40:30:11:08:BA:F9:E4
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: DAAD97AF613AF7F12BF6BDA8D26955A1B694F1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8551266c-ef98-4dd7-801f-d816ee2eeade.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.176.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
da:ad:97:af:61:3a:f7:f1:2b:f6:bd:a8:d2:69:55:a1:b6:94:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=d015185488a996e1eb51d277561ce09c5ad8f6602642834e7efa569c3fd20521, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6c:9f:4a:b6:22:be:7b:1e:0d:89:b2:8a:3b:
09:0c:a1:7a:ae:c6:bb:cc:ca:41:d3:46:de:b5:25:
28:f6:77:be:c7:0e:7e:be:b6:f4:3a:07:c9:5d:9b:
5f:f5:37:17:0f:8f:bb:22:ed:9f:ee:b1:33:fe:ce:
bc:72:8a:71:01:d1:09:71:5b:c4:a8:3d:a5:2b:f5:
e2:44:58:77:5f:0a:39:c0:7d:71:aa:7a:e1:da:43:
27:26:6e:d8:a7:92:84:be:67:47:3a:b2:3c:22:9d:
46:88:2f:11:0d:62:90:1b:9e:43:29:22:72:89:56:
ce:fc:2a:52:09:0c:e2:f8:7c:db:c3:4b:7d:49:bd:
e7:f3:ce:92:95:c0:57:f3:f2:87:21:b2:f0:f6:64:
1c:4b:6a:2b:68:7a:b5:3f:70:e3:9f:08:ea:b6:2c:
32:85:74:d4:09:7b:ce:5e:ef:fb:54:27:f2:f4:61:
27:a1:9b:4f:f8:17:ed:32:ef:97:18:c8:6e:30:50:
89:03:c0:29:7f:fd:ad:ee:a8:03:a3:9e:f8:04:81:
e4:55:32:0f:25:78:ec:92:5b:b6:80:70:30:72:6e:
84:1d:8d:4c:dc:d0:20:f5:03:a5:9e:fc:dd:98:32:
f4:a4:00:af:c2:59:8a:ef:dd:9e:1f:02:80:8e:a3:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B9:AB:56:59:9E:25:9D:B5:E0:2A:26:29:40:30:11:08:BA:F9:E4
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8551266c-ef98-4dd7-801f-d816ee2eeade.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.176.0.0/15
Signature Algorithm: sha256WithRSAEncryption
45:83:16:c4:0a:3d:02:ff:1e:74:87:8d:91:c0:4e:38:f8:86:
6b:98:b0:14:79:dc:8b:00:4f:ba:29:12:33:82:57:7c:1e:ec:
ca:b8:95:37:be:85:2c:c4:7f:d8:e3:cf:73:1e:c7:51:26:85:
0d:1b:1c:57:94:49:f9:58:14:52:81:4e:9e:cb:66:9f:82:ad:
f1:f4:85:46:c8:0c:8e:42:38:76:46:3d:ce:8b:69:93:44:e0:
91:f5:80:d8:eb:0a:65:38:62:25:fc:6a:52:56:52:67:3d:02:
cb:c7:be:99:ff:21:6b:12:05:e2:bd:b6:3f:f4:b3:6f:1f:eb:
80:aa:5e:c5:db:79:41:00:cc:cb:4e:1e:73:0f:fe:e8:22:e5:
8c:36:45:75:f7:71:23:af:f8:d0:db:c8:71:f5:92:5e:41:f4:
39:99:48:32:81:2e:60:89:7e:90:91:1e:fb:d1:54:1c:e2:d3:
c7:54:33:16:af:98:5c:f0:1a:79:df:e4:48:f9:17:bb:8e:30:
a2:01:b9:48:2f:cf:e1:09:e5:af:b1:0e:b2:e7:d0:c5:7c:2f:
5c:db:ae:c9:91:48:ac:07:d2:60:77:92:76:07:db:ec:25:7d:
4b:94:ac:43:ad:b1:fc:ba:49:52:08:b7:50:f1:e0:ea:bd:92:
af:d0:8c:4e
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUANqtl69hOvfxK/a9qNJpVaG2lPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAxMDcwMDAwMDBaFw0yNTAyMTEyMzU5NTlaMHoxSTBHBgNV
BAUTQGQwMTUxODU0ODhhOTk2ZTFlYjUxZDI3NzU2MWNlMDljNWFkOGY2NjAyNjQy
ODM0ZTdlZmE1NjljM2ZkMjA1MjExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOBsn0q2Ir57Hg2Jsoo7CQyheq7Gu8zKQdNG3rUlKPZ3vscOfr629DoHyV2b
X/U3Fw+PuyLtn+6xM/7OvHKKcQHRCXFbxKg9pSv14kRYd18KOcB9cap64dpDJyZu
2KeShL5nRzqyPCKdRogvEQ1ikBueQykicolWzvwqUgkM4vh828NLfUm95/POkpXA
V/PyhyGy8PZkHEtqK2h6tT9w458I6rYsMoV01Al7zl7v+1Qn8vRhJ6GbT/gX7TLv
lxjIbjBQiQPAKX/9re6oA6Oe+ASB5FUyDyV47JJbtoBwMHJuhB2NTNzQIPUDpZ78
3Zgy9KQAr8JZiu/dnh8CgI6jRRkCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSxuatW
WZ4lnbXgKiYpQDARCLr55DAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ODU1MTI2NmMtZWY5OC00ZGQ3LTgwMWYtZDgxNmVlMmVlYWRlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATOwMA0G
CSqGSIb3DQEBCwUAA4IBAQBFgxbECj0C/x50h42RwE44+IZrmLAUedyLAE+6KRIz
gld8HuzKuJU3voUsxH/Y489zHsdRJoUNGxxXlEn5WBRSgU6ey2afgq3x9IVGyAyO
Qjh2Rj3Oi2mTROCR9YDY6wplOGIl/GpSVlJnPQLLx76Z/yFrEgXivbY/9LNvH+uA
ql7F23lBAMzLTh5zD/7oIuWMNkV193Ejr/jQ28hx9ZJeQfQ5mUgygS5giX6QkR77
0VQc4tPHVDMWr5hc8Bp53+RI+Re7jjCiAblIL8/hCeWvsQ6y59DFfC9c267JkUis
B9Jgd5J2B9vsJX1LlKxDrbH8uklSCLdQ8eDqvZKv0IxO
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:05:33 2025 by rpki-client