Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dbc88f4b-781b-45e4-8402-e6b216deacc3.roa
File: dbc88f4b-781b-45e4-8402-e6b216deacc3.roa (raw, json)
Hash identifier: ERQOG8jxjekhGp0tKUxS2HUU3LBOKdgeObkQL3aladA=
Subject key identifier: E9:FD:01:9B:9F:E5:1B:1F:B6:F1:6C:54:9D:B3:25:1C:80:AA:04:C0
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 15C7695316E59448E555755FE2984A8AAD868255
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dbc88f4b-781b-45e4-8402-e6b216deacc3.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 151.176.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c7:69:53:16:e5:94:48:e5:55:75:5f:e2:98:4a:8a:ad:86:82:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=4ebe792ee11638e2bc41d4517c0d46fb82a49f2061ba06115b5d23f147c15151, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:cb:db:86:b2:61:bc:25:4d:f7:5b:31:d2:0c:
ca:bc:05:94:08:d3:20:22:75:ba:88:6f:9d:ab:a5:
c5:96:af:a9:d1:4c:32:3a:1e:b4:39:b0:72:dc:78:
6d:c2:34:53:3c:13:67:ae:c8:46:9c:34:37:db:ae:
bc:c2:88:8f:3b:ce:04:10:01:9b:ea:a3:49:3b:77:
2f:f1:cd:96:e2:54:83:25:e4:37:ed:3e:8b:0c:d3:
36:39:68:17:e5:13:3d:62:ef:22:58:34:0b:41:03:
99:2c:a7:a6:ce:79:77:2a:8c:97:e0:2b:e1:19:01:
3c:b4:ee:b5:49:45:15:e3:aa:f2:7f:1d:7b:60:85:
87:44:dc:9a:38:57:79:b5:8a:5e:2e:75:3f:b4:a7:
75:64:bc:e3:27:73:78:3b:ea:dd:13:d5:f8:44:88:
8d:bd:9e:78:d9:72:05:cc:1f:fe:39:3c:3a:1c:4f:
a8:19:e1:35:95:0e:ff:da:e1:d9:1c:f9:e0:e0:b6:
6e:f8:53:e9:2f:29:01:68:b7:79:88:56:d1:9c:e7:
81:f9:41:76:e2:e4:11:9b:85:9a:ca:89:c9:ba:ca:
ca:1c:e5:7f:b8:cc:53:92:75:75:f9:c0:1f:92:8c:
6a:9f:b9:3b:89:b8:88:37:d6:03:19:2c:97:22:99:
d0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FD:01:9B:9F:E5:1B:1F:B6:F1:6C:54:9D:B3:25:1C:80:AA:04:C0
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dbc88f4b-781b-45e4-8402-e6b216deacc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.176.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:41:a3:19:bb:90:54:99:77:2b:ff:ee:8f:26:c3:a8:4f:4a:
00:49:69:27:dc:26:b6:f9:8e:e1:11:c9:2e:26:86:2c:0a:6c:
3f:aa:63:3b:81:84:51:e3:03:52:0d:1f:fb:9e:54:a1:8f:66:
df:11:9e:e0:66:38:8d:5c:da:20:11:c4:b1:b4:92:79:ea:8b:
ea:67:27:3b:6e:8a:69:d8:f4:45:87:89:61:c2:dd:65:1b:e1:
1a:4f:7a:05:81:ac:07:c9:3d:c8:85:54:3d:9d:ce:1a:49:cf:
20:38:58:ab:a8:42:e0:33:3a:24:40:e4:bf:31:83:1b:6d:18:
c2:da:da:e8:e3:04:62:d9:41:48:b9:d0:43:19:b5:80:8b:bb:
5d:65:92:2d:2d:76:e8:b4:47:2c:4c:4e:f2:c2:30:9e:09:e3:
ba:de:f8:53:65:58:83:62:f5:c9:01:99:56:60:6b:75:26:12:
7a:0d:2a:c4:48:8a:90:64:e3:93:a9:04:42:3b:c9:17:e0:d3:
23:59:1f:b4:a3:18:3c:a3:ae:6a:93:c5:96:25:fc:b8:3c:67:
32:d7:06:a5:70:4e:33:aa:74:09:ec:b7:84:c3:8b:38:15:fe:
99:3a:0d:3c:d7:3c:79:23:65:70:57:79:79:dc:84:ad:81:4a:
13:9b:56:fd
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUFcdpUxbllEjlVXVf4phKiq2GglUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAxMDcwMDAwMDBaFw0yNTAyMTEyMzU5NTlaMHoxSTBHBgNV
BAUTQDRlYmU3OTJlZTExNjM4ZTJiYzQxZDQ1MTdjMGQ0NmZiODJhNDlmMjA2MWJh
MDYxMTViNWQyM2YxNDdjMTUxNTExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAP3L24ayYbwlTfdbMdIMyrwFlAjTICJ1uohvnaulxZavqdFMMjoetDmwctx4
bcI0UzwTZ67IRpw0N9uuvMKIjzvOBBABm+qjSTt3L/HNluJUgyXkN+0+iwzTNjlo
F+UTPWLvIlg0C0EDmSynps55dyqMl+Ar4RkBPLTutUlFFeOq8n8de2CFh0TcmjhX
ebWKXi51P7SndWS84ydzeDvq3RPV+ESIjb2eeNlyBcwf/jk8OhxPqBnhNZUO/9rh
2Rz54OC2bvhT6S8pAWi3eYhW0ZzngflBduLkEZuFmsqJybrKyhzlf7jMU5J1dfnA
H5KMap+5O4m4iDfWAxkslyKZ0HMCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTp/QGb
n+UbH7bxbFSdsyUcgKoEwDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZGJjODhmNGItNzgxYi00NWU0LTg0MDItZTZiMjE2ZGVhY2MzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAJewMA0G
CSqGSIb3DQEBCwUAA4IBAQA4QaMZu5BUmXcr/+6PJsOoT0oASWkn3Ca2+Y7hEcku
JoYsCmw/qmM7gYRR4wNSDR/7nlShj2bfEZ7gZjiNXNogEcSxtJJ56ovqZyc7bopp
2PRFh4lhwt1lG+EaT3oFgawHyT3IhVQ9nc4aSc8gOFirqELgMzokQOS/MYMbbRjC
2tro4wRi2UFIudBDGbWAi7tdZZItLXbotEcsTE7ywjCeCeO63vhTZViDYvXJAZlW
YGt1JhJ6DSrESIqQZOOTqQRCO8kX4NMjWR+0oxg8o65qk8WWJfy4PGcy1walcE4z
qnQJ7LeEw4s4Ff6ZOg081zx5I2VwV3l53IStgUoTm1b9
-----END CERTIFICATE-----
Generated at Sun May 4 06:42:25 2025 by rpki-client