Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e91c1f40-9f81-4796-b5cc-2c1fe9202cdf.roa
File: e91c1f40-9f81-4796-b5cc-2c1fe9202cdf.roa (raw, json)
Hash identifier: 6QlZQIMZLxCnggNN9d6exdoNzofhCws6OnXuIV2gyK0=
Subject key identifier: EF:B6:96:C0:1F:4D:EC:F0:EC:5F:A9:F3:A3:F7:EA:E3:E7:B5:74:E2
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 24D8ABF7235C9C49D72FC14701C29BFF4BD2D913
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e91c1f40-9f81-4796-b5cc-2c1fe9202cdf.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 62.230.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d8:ab:f7:23:5c:9c:49:d7:2f:c1:47:01:c2:9b:ff:4b:d2:d9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: serialNumber=0084786afa7ce5deaf0593e25ec6406b6c8dbae6fb5dffa50e9c4b984d18782c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:30:a2:4e:7d:d4:59:36:fb:a0:6a:01:87:
d0:65:dc:df:55:bd:eb:ae:08:e8:ef:05:ea:09:ec:
cc:35:e5:e5:ae:95:69:a8:9f:95:14:45:b8:12:ff:
4c:81:8c:68:40:75:bf:01:76:24:88:6e:65:0d:82:
25:10:08:8b:48:71:f6:e9:fc:94:e5:1c:e8:2c:89:
37:ba:b4:15:f0:d1:e0:49:33:3f:d4:5d:2a:a5:c8:
2f:13:b7:89:47:0b:28:6a:35:35:7f:1c:6a:0d:a4:
3b:96:e8:a4:1e:9d:ab:0b:f5:21:62:1d:a9:ee:a3:
dd:18:23:74:3b:62:a9:71:42:60:79:61:5c:9e:d9:
93:5b:0e:a9:59:84:48:38:ad:0e:26:cd:41:1e:ff:
b0:64:c4:f3:84:e5:45:e1:af:a4:09:0f:4d:db:63:
17:65:4d:ed:e4:f2:5d:e4:02:0d:e5:b7:c8:3d:a0:
63:00:aa:04:6e:ae:7f:a0:24:79:52:79:c2:22:4f:
80:89:23:b3:03:9a:74:cc:29:6d:a9:0b:f5:66:de:
5c:ed:7f:ca:dd:cd:c5:29:0f:b7:b3:84:f4:5d:5b:
5a:d2:a3:82:1f:30:a9:96:8d:f4:ab:a7:7f:d5:9c:
9f:47:d7:0e:0a:cb:73:e7:56:6d:5a:76:e7:ef:6e:
0f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B6:96:C0:1F:4D:EC:F0:EC:5F:A9:F3:A3:F7:EA:E3:E7:B5:74:E2
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e91c1f40-9f81-4796-b5cc-2c1fe9202cdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.230.0.0/16
Signature Algorithm: sha256WithRSAEncryption
24:85:c4:82:00:62:5e:de:ba:25:98:92:b6:1d:40:ec:4f:6f:
3d:b0:a9:f4:85:21:da:4b:2d:ba:14:41:ef:49:54:59:b5:e7:
c4:18:a6:99:a7:10:99:1d:56:3d:49:b5:4e:16:36:53:b1:cf:
0f:c4:01:1c:73:70:c4:5f:4d:36:77:72:05:33:3c:bd:32:4a:
18:43:08:85:65:82:05:93:b0:de:1c:8a:e9:89:4b:60:73:39:
e9:bb:0f:a0:dd:0d:6e:08:f2:86:0d:dd:cd:52:fc:c3:db:56:
c3:d6:97:90:7a:9f:06:c7:83:db:f8:fb:1c:57:8e:7d:dd:21:
17:0b:7c:a8:a3:fc:7c:db:bb:ef:2e:ee:f5:89:a4:0b:e4:a8:
66:06:79:df:63:c4:bb:f4:5d:31:eb:b1:d3:b8:e8:c4:c4:86:
1f:71:3f:cd:0e:a1:9d:92:b3:1a:c0:00:31:d2:7f:94:61:08:
51:f5:c9:81:18:ce:33:6e:98:d1:3b:27:72:e3:7b:de:ac:0f:
ed:9f:bd:2b:37:34:18:b0:d6:fc:ae:f5:9e:fe:a4:26:2d:a8:
99:4e:46:28:52:78:b6:99:63:c4:d6:ba:c1:e6:dd:9d:3a:db:
9b:a5:29:de:37:61:bc:b6:b5:6d:0b:13:86:70:ad:2d:30:91:
b7:6f:14:30
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUJNir9yNcnEnXL8FHAcKb/0vS2RMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAxMjUwMDAwMDBaFw0yNTAzMDEyMzU5NTlaMHoxSTBHBgNV
BAUTQDAwODQ3ODZhZmE3Y2U1ZGVhZjA1OTNlMjVlYzY0MDZiNmM4ZGJhZTZmYjVk
ZmZhNTBlOWM0Yjk4NGQxODc4MmMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMIxMKJOfdRZNvugagGH0GXc31W9664I6O8F6gnszDXl5a6VaaiflRRFuBL/
TIGMaEB1vwF2JIhuZQ2CJRAIi0hx9un8lOUc6CyJN7q0FfDR4EkzP9RdKqXILxO3
iUcLKGo1NX8cag2kO5bopB6dqwv1IWIdqe6j3RgjdDtiqXFCYHlhXJ7Zk1sOqVmE
SDitDibNQR7/sGTE84TlReGvpAkPTdtjF2VN7eTyXeQCDeW3yD2gYwCqBG6uf6Ak
eVJ5wiJPgIkjswOadMwpbakL9WbeXO1/yt3NxSkPt7OE9F1bWtKjgh8wqZaN9Kun
f9Wcn0fXDgrLc+dWbVp25+9uDwsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTvtpbA
H03s8OxfqfOj9+rj57V04jAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZTkxYzFmNDAtOWY4MS00Nzk2LWI1Y2MtMmMxZmU5MjAyY2RmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAD7mMA0G
CSqGSIb3DQEBCwUAA4IBAQAkhcSCAGJe3rolmJK2HUDsT289sKn0hSHaSy26FEHv
SVRZtefEGKaZpxCZHVY9SbVOFjZTsc8PxAEcc3DEX002d3IFMzy9MkoYQwiFZYIF
k7DeHIrpiUtgcznpuw+g3Q1uCPKGDd3NUvzD21bD1peQep8Gx4Pb+PscV4593SEX
C3yoo/x827vvLu71iaQL5KhmBnnfY8S79F0x67HTuOjExIYfcT/NDqGdkrMawAAx
0n+UYQhR9cmBGM4zbpjROydy43verA/tn70rNzQYsNb8rvWe/qQmLaiZTkYoUni2
mWPE1rrB5t2dOtubpSneN2G8trVtCxOGcK0tMJG3bxQw
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:07:13 2025 by rpki-client