Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1fa61929-412c-4540-85ff-6ae53d3a9f99.roa
File: 1fa61929-412c-4540-85ff-6ae53d3a9f99.roa (raw, json)
Hash identifier: EF897+k4JbcQ9ImYvKIyVF5f7tBDVpKbHlJuc0AwswE=
Subject key identifier: A9:94:5A:F3:7B:FE:DC:43:91:DC:52:7A:3D:FB:7C:90:0C:41:75:4E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3645F2FF0D2746D48734E8CE7B4D838F22495F9D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1fa61929-412c-4540-85ff-6ae53d3a9f99.roa
Signing time: Mon 31 Mar 2025 21:31:00 +0000
ROA not before: Mon 31 Mar 2025 21:31:00 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.212.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:45:f2:ff:0d:27:46:d4:87:34:e8:ce:7b:4d:83:8f:22:49:5f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:31:00 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=27159f201a8435e4b316d2f88095ee1f474b182ea9c257ff36b02bb49f4a19a8, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:9e:16:e2:34:dc:c6:e9:8f:38:c6:fc:41:
d4:39:97:b3:99:d8:fa:ea:14:75:fe:07:ac:bf:62:
07:34:3d:9b:41:1e:4a:61:c1:17:d5:0e:02:4a:b1:
0a:47:05:05:6b:b6:05:f5:bd:47:e2:4c:71:9b:93:
a5:7d:58:6e:31:22:1f:d7:62:5a:fe:bf:12:94:23:
f3:8d:23:11:e1:74:f1:10:d8:f2:5b:2d:84:3d:92:
d1:80:06:55:da:3f:b1:c4:73:1e:01:85:07:dd:69:
53:4f:08:0d:ae:d3:5d:ba:86:48:2b:a4:cb:10:2d:
95:93:5e:70:0b:38:54:92:9e:f0:1a:d1:4b:fd:34:
cc:cb:88:b9:a8:4d:88:1c:b1:58:06:2d:c6:41:eb:
b6:69:9b:85:6d:74:73:b2:25:41:82:fa:84:a1:f6:
3b:62:17:32:79:00:d2:28:e6:77:82:3f:7a:f2:41:
c5:38:8f:e3:25:fa:2c:17:78:de:11:b3:93:b6:ef:
b4:9b:0f:2c:6f:58:4d:f9:b9:e9:f3:75:1d:cc:d8:
68:55:47:91:36:52:12:1b:27:4e:02:06:70:a4:ab:
cf:48:ca:44:ca:39:c6:fe:6c:e2:c4:40:12:fa:d3:
a3:e9:21:e4:c9:2b:c6:7a:8a:6e:00:79:8f:84:b7:
ba:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:94:5A:F3:7B:FE:DC:43:91:DC:52:7A:3D:FB:7C:90:0C:41:75:4E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1fa61929-412c-4540-85ff-6ae53d3a9f99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.212.0.0/15
Signature Algorithm: sha256WithRSAEncryption
78:c5:f7:cd:fa:6a:b7:42:f8:c7:45:d8:5b:33:1b:54:28:1a:
42:9f:0c:5d:1f:78:ed:38:9b:0b:bd:8f:06:a6:5b:1e:51:6c:
7b:9a:3d:91:26:fb:4c:ba:a7:1b:fc:af:ee:27:6b:c3:1f:b8:
f3:65:64:58:e5:15:69:39:66:87:a9:f9:fb:e3:03:c0:50:a3:
e8:1a:fc:bb:8d:56:34:62:c4:4e:83:2d:45:68:4a:af:c0:80:
be:3f:8d:81:97:2f:f4:1f:ef:26:aa:db:44:f7:f9:d0:45:54:
6e:60:48:ab:d9:12:63:71:cb:df:36:8a:dc:23:cc:60:33:d5:
95:82:30:e6:76:e8:fa:17:f0:d6:77:bb:ef:8b:d6:40:95:76:
2e:57:8e:83:bb:9a:fd:a7:91:9d:18:d2:2b:33:15:63:38:e8:
e1:a6:01:44:65:cb:02:1d:f9:8a:0d:fe:86:f2:33:f2:62:60:
ea:3c:4f:2d:eb:ce:97:dd:c4:de:0b:89:9e:20:98:da:a1:35:
2d:75:56:05:47:a2:f8:a4:fa:d1:d7:a5:1c:7c:d5:03:6d:ec:
08:e0:f2:d7:ca:9a:f2:a3:df:60:87:01:94:6c:ae:5c:d7:85:
95:2d:b9:bb:7f:8d:fe:b7:7f:e2:b9:86:84:58:53:3e:ca:20:
fd:ba:ac:05
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUNkXy/w0nRtSHNOjOe02DjyJJX50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAzMzEyMTMxMDBaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDI3MTU5ZjIwMWE4NDM1ZTRiMzE2ZDJmODgwOTVlZTFmNDc0YjE4MmVhOWMy
NTdmZjM2YjAyYmI0OWY0YTE5YTgxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKWenhbiNNzG6Y84xvxB1DmXs5nY+uoUdf4HrL9iBzQ9m0EeSmHBF9UOAkqx
CkcFBWu2BfW9R+JMcZuTpX1YbjEiH9diWv6/EpQj840jEeF08RDY8lsthD2S0YAG
Vdo/scRzHgGFB91pU08IDa7TXbqGSCukyxAtlZNecAs4VJKe8BrRS/00zMuIuahN
iByxWAYtxkHrtmmbhW10c7IlQYL6hKH2O2IXMnkA0ijmd4I/evJBxTiP4yX6LBd4
3hGzk7bvtJsPLG9YTfm56fN1HczYaFVHkTZSEhsnTgIGcKSrz0jKRMo5xv5s4sRA
EvrTo+kh5MkrxnqKbgB5j4S3ujECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSplFrz
e/7cQ5HcUno9+3yQDEF1TjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MWZhNjE5MjktNDEyYy00NTQwLTg1ZmYtNmFlNTNkM2E5Zjk5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPUMA0G
CSqGSIb3DQEBCwUAA4IBAQB4xffN+mq3QvjHRdhbMxtUKBpCnwxdH3jtOJsLvY8G
plseUWx7mj2RJvtMuqcb/K/uJ2vDH7jzZWRY5RVpOWaHqfn74wPAUKPoGvy7jVY0
YsROgy1FaEqvwIC+P42Bly/0H+8mqttE9/nQRVRuYEir2RJjccvfNorcI8xgM9WV
gjDmduj6F/DWd7vvi9ZAlXYuV46Du5r9p5GdGNIrMxVjOOjhpgFEZcsCHfmKDf6G
8jPyYmDqPE8t686X3cTeC4meIJjaoTUtdVYFR6L4pPrR16UcfNUDbewI4PLXypry
o99ghwGUbK5c14WVLbm7f43+t3/iuYaEWFM+yiD9uqwF
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net