Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ef3e6945-57bf-41fe-9e98-2db6c2800547.roa
File: ef3e6945-57bf-41fe-9e98-2db6c2800547.roa (raw, json)
Hash identifier: Hlnc78w5+Xgi3B8H0AO7ewEJZUR6Ct+2KUe0a60AXm4=
Subject key identifier: 1F:91:C9:0C:98:55:8B:C4:55:02:47:15:CA:85:39:EB:6B:ED:0C:4E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 13F73674B0FE6AF1911974B48BBD70CD3DE47DD8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ef3e6945-57bf-41fe-9e98-2db6c2800547.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.208.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:f7:36:74:b0:fe:6a:f1:91:19:74:b4:8b:bd:70:cd:3d:e4:7d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=6a21b6c92035309a006a6d18c0128b762bfe68f2330b785ccdaa681cbf9dc370, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:83:3d:69:0b:3b:7c:f4:2d:f8:48:ef:b0:89:
7f:6d:e5:e0:0f:76:09:38:12:2f:93:34:c0:63:bb:
39:d5:22:9d:46:32:35:2a:3a:ef:1d:a3:46:b6:b6:
d0:13:71:33:6c:d2:cb:26:67:7c:27:ad:91:aa:5c:
e8:5b:d3:f5:56:62:9e:55:ed:a3:8f:e8:d7:83:32:
c6:95:41:d6:1e:44:31:79:8b:41:96:7b:4b:df:19:
11:d2:44:a6:1f:d2:27:49:8d:b9:82:57:66:7c:a9:
b7:13:80:8e:32:a2:77:21:fb:11:2f:89:19:c9:31:
1a:a8:20:13:3a:4a:0f:19:24:5a:6a:09:81:ba:75:
47:10:f7:cf:60:ff:25:78:59:9c:27:ba:f4:a3:4d:
36:af:6f:2c:c1:82:70:aa:93:6c:79:d8:9e:24:a2:
b3:92:8d:ed:2d:c8:a6:9c:16:f9:91:35:3a:7a:e6:
a9:29:89:85:9a:9a:27:51:60:67:f1:40:a4:28:25:
fd:2c:65:a3:35:62:0c:54:3b:de:61:91:b4:57:cd:
f3:14:c7:f3:2a:25:ba:ae:55:22:5b:54:65:28:eb:
a7:a1:9e:16:1f:21:c5:92:de:69:8d:80:0a:75:e4:
02:de:c0:79:d7:e3:0c:bc:5b:8c:6c:1d:2c:62:24:
18:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:91:C9:0C:98:55:8B:C4:55:02:47:15:CA:85:39:EB:6B:ED:0C:4E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ef3e6945-57bf-41fe-9e98-2db6c2800547.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.208.0.0/15
Signature Algorithm: sha256WithRSAEncryption
5b:9c:24:d4:9f:a6:72:c7:d1:e9:32:37:ce:de:89:0a:05:11:
1d:70:be:78:d3:8f:49:f2:df:de:8c:d8:e0:04:ee:0e:29:95:
8b:f4:2f:7a:e5:d3:96:15:8a:f4:21:10:70:cc:15:3c:87:19:
93:39:eb:08:e0:85:31:6b:7b:a0:6c:b7:82:d8:1d:51:4b:4e:
8a:e7:10:a0:0d:88:b0:2c:92:4d:e1:3b:a2:8c:2c:35:2d:ba:
c6:c3:4a:5e:fc:c2:17:6f:6e:3a:f3:63:e4:2d:06:46:0a:ea:
9b:d3:33:22:86:a0:2a:c8:35:a1:69:7a:ef:e9:9d:93:d0:b8:
be:d9:2b:95:fc:7f:70:fd:48:2e:87:00:bc:24:a8:67:c6:e6:
9d:3d:1e:e1:df:f0:81:51:f2:2f:a3:8f:58:74:1f:06:9a:36:
27:a9:5a:25:51:15:4c:3c:fd:85:43:a3:c7:a7:7d:7c:09:0c:
62:3f:1b:46:39:44:d4:2a:49:80:f2:75:b9:66:c8:34:64:51:
73:3d:14:92:3f:28:e9:e7:7c:b4:2e:8f:5f:85:1f:f7:cb:27:
bd:00:62:d4:b6:12:94:c2:c3:f5:75:e0:68:00:02:c1:d7:17:
2b:b9:65:19:90:7c:30:4c:2d:f5:af:07:71:52:79:09:15:31:
7d:58:fa:0c
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUE/c2dLD+avGRGXS0i71wzT3kfdgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAxMDcwMDAwMDBaFw0yNTAyMTEyMzU5NTlaMHoxSTBHBgNV
BAUTQDZhMjFiNmM5MjAzNTMwOWEwMDZhNmQxOGMwMTI4Yjc2MmJmZTY4ZjIzMzBi
Nzg1Y2NkYWE2ODFjYmY5ZGMzNzAxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOODPWkLO3z0LfhI77CJf23l4A92CTgSL5M0wGO7OdUinUYyNSo67x2jRra2
0BNxM2zSyyZnfCetkapc6FvT9VZinlXto4/o14MyxpVB1h5EMXmLQZZ7S98ZEdJE
ph/SJ0mNuYJXZnyptxOAjjKidyH7ES+JGckxGqggEzpKDxkkWmoJgbp1RxD3z2D/
JXhZnCe69KNNNq9vLMGCcKqTbHnYniSis5KN7S3IppwW+ZE1OnrmqSmJhZqaJ1Fg
Z/FApCgl/SxlozViDFQ73mGRtFfN8xTH8yoluq5VIltUZSjrp6GeFh8hxZLeaY2A
CnXkAt7AedfjDLxbjGwdLGIkGJsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQfkckM
mFWLxFUCRxXKhTnra+0MTjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZWYzZTY5NDUtNTdiZi00MWZlLTllOTgtMmRiNmMyODAwNTQ3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPQMA0G
CSqGSIb3DQEBCwUAA4IBAQBbnCTUn6Zyx9HpMjfO3okKBREdcL54049J8t/ejNjg
BO4OKZWL9C965dOWFYr0IRBwzBU8hxmTOesI4IUxa3ugbLeC2B1RS06K5xCgDYiw
LJJN4TuijCw1LbrGw0pe/MIXb24682PkLQZGCuqb0zMihqAqyDWhaXrv6Z2T0Li+
2SuV/H9w/UguhwC8JKhnxuadPR7h3/CBUfIvo49YdB8GmjYnqVolURVMPP2FQ6PH
p318CQxiPxtGOUTUKkmA8nW5Zsg0ZFFzPRSSPyjp53y0Lo9fhR/3yye9AGLUthKU
wsP1deBoAALB1xcruWUZkHwwTC31rwdxUnkJFTF9WPoM
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:05:35 2025 by rpki-client