Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/46eb8bb9-8a91-491d-8f3f-9cc4afcf5ecd.roa
File: 46eb8bb9-8a91-491d-8f3f-9cc4afcf5ecd.roa (raw, json)
Hash identifier: QpQ0+jg03Njm6uk4taiUjXTeiaL5sK21OBf/wfLXUsk=
Subject key identifier: 88:52:36:D0:21:4A:0D:04:F4:7F:E3:69:B7:8F:30:8D:D3:02:D2:5B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 21797D08DD12D7F2CE70A8DCE95A5F1AD14F5B85
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/46eb8bb9-8a91-491d-8f3f-9cc4afcf5ecd.roa
Signing time: Fri 11 Apr 2025 00:50:13 +0000
ROA not before: Fri 11 Apr 2025 00:50:13 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.108.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:79:7d:08:dd:12:d7:f2:ce:70:a8:dc:e9:5a:5f:1a:d1:4f:5b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 11 00:50:13 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=448958a5c4a0a92626201a0ed821c837b84e96e05fa462992f4915383f1b7709, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:83:a3:92:e1:a7:d8:87:7e:cd:03:59:97:
7a:45:31:0e:29:0b:78:1c:3e:d2:eb:08:90:e6:7e:
42:4c:00:e8:50:2d:e1:3a:53:5c:3a:9f:d3:7c:62:
a9:9b:43:d7:0c:00:f4:df:a5:d5:66:57:4a:92:7f:
44:75:d6:fd:27:02:49:6b:2d:d3:c6:2a:73:b7:87:
98:68:48:83:5d:ac:c9:6d:c3:18:2b:e2:fe:f2:75:
12:dc:7f:8d:a3:d6:c8:13:7e:f4:ea:7c:8b:32:24:
93:01:a6:4a:a4:ac:fe:b8:1e:10:fa:33:cc:5c:29:
ed:b7:5e:80:2c:95:66:44:11:af:f6:47:a8:09:60:
62:c6:d6:46:6e:a1:b6:4d:5b:5e:1b:6a:9b:f1:d5:
28:8a:b7:4d:b0:8d:d6:50:47:0d:dd:aa:bc:40:79:
33:b7:ac:98:9f:65:79:58:4d:c0:1a:af:66:53:7c:
dc:f1:1a:e4:17:ec:89:8d:65:de:a8:79:0e:c9:da:
03:81:7b:28:ad:78:a3:a8:14:78:29:17:53:7e:e6:
84:6c:f6:67:5e:fd:58:19:ba:09:a8:76:d6:69:4c:
c5:af:00:98:b5:b6:76:8a:57:57:10:50:fc:31:f2:
10:be:ed:88:ba:09:9e:6d:a5:87:dd:32:3c:59:6e:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:52:36:D0:21:4A:0D:04:F4:7F:E3:69:B7:8F:30:8D:D3:02:D2:5B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/46eb8bb9-8a91-491d-8f3f-9cc4afcf5ecd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.108.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:9c:72:59:59:6b:ee:64:ca:e2:d0:36:9d:85:3e:a3:bf:0b:
22:34:ff:97:78:15:76:3e:70:4b:e6:8d:f5:6a:8c:df:2c:6e:
1e:b5:69:1b:f2:12:6b:22:b6:45:f9:ae:c2:d8:14:27:75:1f:
30:b6:6e:da:c2:b8:ac:4d:ad:34:9b:6c:7b:01:93:77:74:c8:
da:4b:2b:20:8b:9a:97:a5:99:b1:38:a5:d9:0f:74:39:b8:71:
ef:ed:22:d8:9c:e6:2f:f2:db:44:13:b6:8f:9a:35:dd:cf:40:
3c:b4:18:68:41:32:be:ab:37:87:d2:81:f3:cf:20:98:2f:a7:
95:ae:6c:4d:08:bb:02:b6:bc:33:7b:af:7f:96:77:c3:75:76:
52:d1:bf:9c:9a:a3:96:c8:94:b6:93:c9:f5:af:e7:c8:2f:b4:
34:09:09:21:4b:7f:5f:36:04:0b:53:2a:80:5c:a1:26:0c:4f:
c2:a7:36:1c:b6:5e:4d:fe:00:40:55:8e:36:b8:b8:01:79:83:
3f:a5:2e:c0:85:5e:11:23:a7:21:b8:fd:f9:b1:bc:07:b8:02:
57:85:da:d3:73:fb:39:8a:1b:e9:73:82:fe:bc:eb:34:43:01:
28:eb:93:15:f8:07:4a:5c:7c:f9:45:ee:89:07:d2:0c:31:eb:
b4:01:69:1f
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUIXl9CN0S1/LOcKjc6VpfGtFPW4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA0MTEwMDUwMTNaFw0yNTA1MTYyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ0ODk1OGE1YzRhMGE5MjYyNjIwMWEwZWQ4MjFjODM3Yjg0ZTk2ZTA1ZmE0
NjI5OTJmNDkxNTM4M2YxYjc3MDkxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK0Zg6OS4afYh37NA1mXekUxDikLeBw+0usIkOZ+QkwA6FAt4TpTXDqf03xi
qZtD1wwA9N+l1WZXSpJ/RHXW/ScCSWst08Yqc7eHmGhIg12syW3DGCvi/vJ1Etx/
jaPWyBN+9Op8izIkkwGmSqSs/rgeEPozzFwp7bdegCyVZkQRr/ZHqAlgYsbWRm6h
tk1bXhtqm/HVKIq3TbCN1lBHDd2qvEB5M7esmJ9leVhNwBqvZlN83PEa5BfsiY1l
3qh5DsnaA4F7KK14o6gUeCkXU37mhGz2Z179WBm6Cah21mlMxa8AmLW2dopXVxBQ
/DHyEL7tiLoJnm2lh90yPFluhlECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSIUjbQ
IUoNBPR/42m3jzCN0wLSWzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NDZlYjhiYjktOGE5MS00OTFkLThmM2YtOWNjNGFmY2Y1ZWNkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNsMA0G
CSqGSIb3DQEBCwUAA4IBAQCanHJZWWvuZMri0DadhT6jvwsiNP+XeBV2PnBL5o31
aozfLG4etWkb8hJrIrZF+a7C2BQndR8wtm7awrisTa00m2x7AZN3dMjaSysgi5qX
pZmxOKXZD3Q5uHHv7SLYnOYv8ttEE7aPmjXdz0A8tBhoQTK+qzeH0oHzzyCYL6eV
rmxNCLsCtrwze69/lnfDdXZS0b+cmqOWyJS2k8n1r+fIL7Q0CQkhS39fNgQLUyqA
XKEmDE/CpzYctl5N/gBAVY42uLgBeYM/pS7AhV4RI6chuP35sbwHuAJXhdrTc/s5
ihvpc4L+vOs0QwEo65MV+AdKXHz5Re6JB9IMMeu0AWkf
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net