Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/18d9a632-05fe-446e-aca9-1adb271dcda8.roa
File: 18d9a632-05fe-446e-aca9-1adb271dcda8.roa (raw, json)
Hash identifier: N2mBI8Ls+aM8E71jWxAhl6iQHaXgwK1smi98PzUCa/A=
Subject key identifier: B2:57:83:47:D0:00:B9:AE:9C:2E:96:14:32:63:2D:F8:03:3A:69:79
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1465F311046FF7DE9A3FAE697CE832811898F3F7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/18d9a632-05fe-446e-aca9-1adb271dcda8.roa
Signing time: Mon 31 Mar 2025 21:30:54 +0000
ROA not before: Mon 31 Mar 2025 21:30:54 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.196.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:65:f3:11:04:6f:f7:de:9a:3f:ae:69:7c:e8:32:81:18:98:f3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:30:54 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=c1e184d7301ccf3722a0df6ca2e2a89c320957f9687f6d1a21f5c859fa0be61c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c6:53:f1:fd:b8:02:e3:d5:9f:fa:01:ff:e0:
9d:e6:5d:b3:07:6b:75:c8:8b:78:37:b7:85:71:7d:
74:8f:9c:53:94:5d:fa:65:41:42:cb:70:4c:f3:2d:
2f:5e:80:a9:29:88:e9:20:8d:2a:14:be:b3:4d:eb:
67:fc:20:4d:0b:27:ed:cd:36:76:33:7f:11:a2:9f:
40:f6:a2:86:64:0c:3c:6d:d9:33:46:c2:0c:1d:f8:
36:4a:00:37:23:80:bf:02:1c:13:ac:87:62:de:bf:
8e:9c:08:e8:c5:fe:aa:5b:8c:00:97:12:a4:77:2c:
3f:f7:a1:e6:c3:e2:89:f4:cf:47:36:7f:7d:f4:6b:
15:ec:90:0f:d9:a8:1e:f9:ca:a3:90:65:24:3c:ab:
15:bd:df:88:5a:a4:ca:7a:78:9d:a1:0a:73:4b:6d:
b5:5e:7b:e0:35:9b:ca:e3:54:60:28:d4:d3:0f:7c:
d4:f6:da:7d:0d:65:71:6a:a1:e6:e3:b4:29:de:39:
f7:2c:76:8f:e0:d1:e4:a3:7f:39:58:8f:3f:a7:e6:
c9:25:4a:2e:b9:0a:12:a2:1c:07:52:aa:48:79:8d:
d7:17:da:2a:fe:2a:61:90:78:aa:32:d4:52:3b:09:
92:30:26:ad:42:a2:43:f1:ae:3f:05:e2:d2:7b:4b:
f4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:57:83:47:D0:00:B9:AE:9C:2E:96:14:32:63:2D:F8:03:3A:69:79
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/18d9a632-05fe-446e-aca9-1adb271dcda8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.196.0.0/15
Signature Algorithm: sha256WithRSAEncryption
61:51:03:3f:fa:7e:fa:1c:c5:e4:4e:28:5c:0c:c7:05:cf:7d:
3f:23:5f:af:89:f8:ad:fd:a1:8c:6b:8a:dd:56:6a:56:f0:74:
7d:e5:07:df:e9:dd:c6:8f:9d:e0:d5:b2:47:b5:c3:24:da:04:
99:f9:86:a0:02:15:12:72:92:3b:31:10:2c:b3:ca:94:a9:1a:
d1:d8:5e:a4:95:b7:06:53:d3:95:45:ae:0d:25:30:59:ea:45:
53:95:fc:ce:7d:f2:7f:57:0d:67:78:0d:90:ce:e6:82:52:73:
39:ed:24:d9:39:02:25:5f:6f:7a:e0:50:c6:f3:0d:c9:25:4f:
d0:ed:59:0e:52:cb:50:cd:00:1f:bf:3d:86:ee:3b:05:f7:e6:
70:00:d1:cc:fe:78:bc:e6:79:0d:00:b0:28:59:d4:07:5e:c3:
12:e2:75:36:2f:fa:90:58:01:10:79:db:9b:a4:72:db:5b:c3:
f2:c5:cc:9a:e0:fb:9c:46:1d:ba:5f:c7:80:d7:22:bc:96:ae:
2e:42:5a:f0:cd:c1:f4:da:21:06:6c:26:17:69:32:52:c2:18:
10:9b:e6:9d:56:6e:77:be:08:f4:ad:9e:04:00:c1:22:0c:83:
c2:13:11:46:2e:a3:ea:87:ec:00:c2:6f:d3:f8:2e:b2:62:1b:
e0:33:35:0a
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUFGXzEQRv996aP65pfOgygRiY8/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAzMzEyMTMwNTRaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGMxZTE4NGQ3MzAxY2NmMzcyMmEwZGY2Y2EyZTJhODljMzIwOTU3Zjk2ODdm
NmQxYTIxZjVjODU5ZmEwYmU2MWMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOTGU/H9uALj1Z/6Af/gneZdswdrdciLeDe3hXF9dI+cU5Rd+mVBQstwTPMt
L16AqSmI6SCNKhS+s03rZ/wgTQsn7c02djN/EaKfQPaihmQMPG3ZM0bCDB34NkoA
NyOAvwIcE6yHYt6/jpwI6MX+qluMAJcSpHcsP/eh5sPiifTPRzZ/ffRrFeyQD9mo
HvnKo5BlJDyrFb3fiFqkynp4naEKc0tttV574DWbyuNUYCjU0w981PbafQ1lcWqh
5uO0Kd459yx2j+DR5KN/OViPP6fmySVKLrkKEqIcB1KqSHmN1xfaKv4qYZB4qjLU
UjsJkjAmrUKiQ/GuPwXi0ntL9IsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSyV4NH
0AC5rpwulhQyYy34AzppeTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MThkOWE2MzItMDVmZS00NDZlLWFjYTktMWFkYjI3MWRjZGE4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPEMA0G
CSqGSIb3DQEBCwUAA4IBAQBhUQM/+n76HMXkTihcDMcFz30/I1+vifit/aGMa4rd
VmpW8HR95Qff6d3Gj53g1bJHtcMk2gSZ+YagAhUScpI7MRAss8qUqRrR2F6klbcG
U9OVRa4NJTBZ6kVTlfzOffJ/Vw1neA2QzuaCUnM57STZOQIlX2964FDG8w3JJU/Q
7VkOUstQzQAfvz2G7jsF9+ZwANHM/ni85nkNALAoWdQHXsMS4nU2L/qQWAEQedub
pHLbW8Pyxcya4PucRh26X8eA1yK8lq4uQlrwzcH02iEGbCYXaTJSwhgQm+adVm53
vgj0rZ4EAMEiDIPCExFGLqPqh+wAwm/T+C6yYhvgMzUK
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net