Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/95019996-0ef4-4f98-90e2-dd7efc004375.roa
File: 95019996-0ef4-4f98-90e2-dd7efc004375.roa (raw, json)
Hash identifier: qPdKbm6e+xYS6pCNKo1e4AJwgeQN7a91i/AExZT3fNw=
Subject key identifier: 6C:8A:4C:00:9A:C2:43:98:F3:BC:2D:0F:FA:FA:B0:F6:FF:70:E9:4C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1461F67CC63E2587471655A357253E6A0F0B3B4B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/95019996-0ef4-4f98-90e2-dd7efc004375.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 159.244.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:61:f6:7c:c6:3e:25:87:47:16:55:a3:57:25:3e:6a:0f:0b:3b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=4db5da92f2cabab06183793f2201651a64af1af6e24b029b19901a12d6d7cb66, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:e2:38:4f:f4:d3:8b:32:43:ee:ac:39:7f:
35:d3:6a:91:f8:6d:a5:cf:61:fb:0b:38:49:a7:1d:
88:06:3f:d1:1d:6e:4b:59:28:f4:0c:30:33:63:e4:
95:ef:6b:e6:87:7a:f8:36:d1:94:14:4b:2c:3a:eb:
38:d8:c7:37:31:d1:07:b2:4e:4d:f2:8f:0e:50:9e:
ee:16:e1:77:36:e3:82:54:97:a3:d3:65:24:e1:9b:
cf:9d:c8:e3:0f:28:57:6a:3e:3d:73:a0:48:6d:bc:
65:c1:0c:5b:f2:70:c0:22:04:24:67:b2:24:c8:a3:
2c:8f:16:45:cb:7c:46:0b:48:5a:ea:e7:f6:42:d9:
f1:b1:60:f8:c7:35:e2:ce:5e:14:f8:ce:a0:1b:c7:
06:22:ef:7d:e5:ab:80:6e:86:9c:d8:c7:be:50:10:
ab:ef:6c:57:74:9e:7d:64:90:04:14:24:02:7c:de:
0f:4b:c1:f7:9a:d7:87:31:4f:91:8d:9d:03:93:90:
0a:e6:e3:eb:3b:60:74:20:48:f9:71:16:76:81:68:
7c:6b:8d:50:f2:1d:36:3d:9d:e3:08:43:d8:9b:5c:
7b:4f:8a:92:3f:0c:90:ce:84:a7:72:9c:3d:29:f2:
4a:a3:3c:d4:5f:79:29:8c:0f:23:4b:20:46:fa:53:
9b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8A:4C:00:9A:C2:43:98:F3:BC:2D:0F:FA:FA:B0:F6:FF:70:E9:4C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/95019996-0ef4-4f98-90e2-dd7efc004375.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.244.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:0d:dc:34:24:bb:34:f8:3a:05:5c:83:fe:5a:01:10:93:b3:
c8:5e:90:cb:f2:cb:25:77:cb:6a:bf:9b:89:cc:4d:b7:db:fb:
0d:d3:2f:72:de:4d:50:a4:6b:8a:7b:0b:19:d6:5e:92:9a:12:
d5:12:15:1b:d3:1e:40:dc:fd:a2:f1:47:45:b5:49:d3:a5:74:
71:2d:1f:2a:39:fb:74:26:53:84:9a:a9:05:52:5c:16:24:47:
3e:78:ce:5a:af:f9:b2:46:3a:db:67:93:92:3d:a5:80:05:90:
f4:ab:89:29:fe:13:f0:28:1a:d5:8c:13:49:56:b4:09:a6:12:
bf:66:ef:81:7b:19:45:7e:84:c9:52:f6:25:15:3e:ff:ac:7f:
cd:26:e3:74:04:ab:fb:4d:38:9a:0e:d8:fb:68:f9:0d:7e:32:
9c:0a:86:65:9a:53:34:67:17:ec:8f:91:2b:fe:3b:1c:10:06:
39:eb:ca:7a:a6:b3:1b:69:81:66:0a:fe:ce:68:80:5d:66:19:
14:ce:45:b0:43:e5:14:bf:a4:b6:41:c8:9e:14:7e:e0:65:d4:
bc:1a:c0:28:50:8b:c6:0d:7c:2f:b3:f6:0b:4f:e6:26:be:65:
12:f0:a0:46:7d:9c:b9:cf:74:a0:58:67:98:c5:23:7f:ad:3c:
2c:fd:3e:63
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUFGH2fMY+JYdHFlWjVyU+ag8LO0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAxMDcwMDAwMDBaFw0yNTAyMTEyMzU5NTlaMHoxSTBHBgNV
BAUTQDRkYjVkYTkyZjJjYWJhYjA2MTgzNzkzZjIyMDE2NTFhNjRhZjFhZjZlMjRi
MDI5YjE5OTAxYTEyZDZkN2NiNjYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALV14jhP9NOLMkPurDl/NdNqkfhtpc9h+ws4SacdiAY/0R1uS1ko9AwwM2Pk
le9r5od6+DbRlBRLLDrrONjHNzHRB7JOTfKPDlCe7hbhdzbjglSXo9NlJOGbz53I
4w8oV2o+PXOgSG28ZcEMW/JwwCIEJGeyJMijLI8WRct8RgtIWurn9kLZ8bFg+Mc1
4s5eFPjOoBvHBiLvfeWrgG6GnNjHvlAQq+9sV3SefWSQBBQkAnzeD0vB95rXhzFP
kY2dA5OQCubj6ztgdCBI+XEWdoFofGuNUPIdNj2d4whD2Jtce0+Kkj8MkM6Ep3Kc
PSnySqM81F95KYwPI0sgRvpTm2UCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRsikwA
msJDmPO8LQ/6+rD2/3DpTDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
OTUwMTk5OTYtMGVmNC00Zjk4LTkwZTItZGQ3ZWZjMDA0Mzc1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAJ/0MA0G
CSqGSIb3DQEBCwUAA4IBAQCSDdw0JLs0+DoFXIP+WgEQk7PIXpDL8ssld8tqv5uJ
zE232/sN0y9y3k1QpGuKewsZ1l6SmhLVEhUb0x5A3P2i8UdFtUnTpXRxLR8qOft0
JlOEmqkFUlwWJEc+eM5ar/myRjrbZ5OSPaWABZD0q4kp/hPwKBrVjBNJVrQJphK/
Zu+BexlFfoTJUvYlFT7/rH/NJuN0BKv7TTiaDtj7aPkNfjKcCoZlmlM0Zxfsj5Er
/jscEAY568p6prMbaYFmCv7OaIBdZhkUzkWwQ+UUv6S2QcieFH7gZdS8GsAoUIvG
DXwvs/YLT+YmvmUS8KBGfZy5z3SgWGeYxSN/rTws/T5j
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:30:27 2025 by rpki-client