Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/67568c6a-cd1a-4586-a397-580b374dbdb0.roa
File: 67568c6a-cd1a-4586-a397-580b374dbdb0.roa (raw, json)
Hash identifier: UUWGESPdDoXVMKoFthAfB9FvgHbs6CMYAIQkxcRkEoc=
Subject key identifier: 68:B2:81:A0:A4:88:30:B8:A9:EC:E2:8E:A2:93:23:86:BA:90:25:18
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7EE81E57351AE3ADF4F157342C2A50E3B424FD46
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/67568c6a-cd1a-4586-a397-580b374dbdb0.roa
Signing time: Mon 31 Mar 2025 21:40:05 +0000
ROA not before: Mon 31 Mar 2025 21:40:05 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.60.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e8:1e:57:35:1a:e3:ad:f4:f1:57:34:2c:2a:50:e3:b4:24:fd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:40:05 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=9e12746bb4fd65985e4db3fcc63ec284838fefc30fb75fb198ac220e5a63c202, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:15:81:41:e9:2b:10:ee:65:3d:6e:7c:fb:d8:
93:e3:b8:54:f6:69:df:57:db:4b:74:f9:9f:61:0d:
4a:cd:5b:4a:ee:e6:07:0f:66:04:de:76:ac:2c:42:
26:ee:f8:ee:4b:01:3e:06:93:b6:74:b0:9a:71:b1:
2c:d2:6d:c7:94:16:c6:7a:6b:a7:c3:ec:cf:26:0d:
fb:3b:a4:dc:36:8a:80:a6:93:08:21:ac:af:d7:42:
d9:e9:7e:d0:c8:34:94:57:57:f7:48:70:35:68:f8:
3e:58:69:d6:9a:a9:4a:9b:a6:24:df:3f:34:7a:a7:
ee:3b:bb:6b:ae:d0:6b:d1:03:0c:50:a6:a1:61:86:
94:b6:d3:3f:9c:ce:cc:6e:ee:21:02:ab:a0:4a:db:
79:0c:d4:56:bf:ff:31:fe:87:71:1f:2f:67:0b:f2:
de:49:60:92:cc:de:f7:5c:60:d8:aa:a6:1e:ee:0f:
ad:d0:b2:e1:a2:d1:d6:14:e3:06:93:2c:84:0e:40:
02:ba:fd:b3:c6:dd:c7:51:ce:34:83:7f:b2:b2:c1:
bf:6a:6f:03:0f:1e:36:8a:75:db:46:68:6f:66:f3:
7a:4b:bd:a5:a9:c6:e7:b7:d2:e8:93:97:60:b8:cf:
f8:c5:83:8b:80:73:6e:bc:e3:14:0e:db:db:74:a2:
75:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B2:81:A0:A4:88:30:B8:A9:EC:E2:8E:A2:93:23:86:BA:90:25:18
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/67568c6a-cd1a-4586-a397-580b374dbdb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.60.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d3:02:c1:fa:37:9b:76:b3:49:a3:35:80:34:60:06:96:97:2f:
50:9c:47:82:81:4d:c8:a3:b2:9e:4f:5d:9f:84:71:67:72:52:
71:cc:1c:f4:8c:08:1a:17:23:3e:31:60:fe:04:20:fe:4c:d9:
c0:93:bf:7b:ac:05:10:27:2d:61:68:a3:0a:28:19:72:68:22:
04:22:81:f7:2a:22:c2:2e:85:e7:8e:26:d8:2d:78:a7:66:dc:
67:dd:74:19:39:5d:c0:f4:88:c2:97:f0:e1:58:f4:0a:f8:0e:
f2:4b:c0:1d:7f:be:d4:a8:84:99:75:e3:2d:6d:68:90:5c:18:
3e:b7:09:83:a5:e0:90:62:a9:1b:13:d1:98:ca:cb:7e:f6:d9:
b9:16:36:4d:47:b6:7a:25:49:4b:34:db:e4:b6:a2:bd:75:33:
41:83:cf:8e:ab:19:8a:37:c2:37:04:c7:27:29:2d:6e:87:2d:
93:23:69:10:6f:4d:1d:9f:f9:42:93:4b:fd:5a:7b:82:0e:e2:
a1:d0:cf:9e:0d:b6:f5:d9:38:d1:61:69:ba:32:35:a7:ea:85:
13:93:ad:26:0e:8b:08:75:3c:d4:cb:53:5d:93:63:67:e2:77:
69:55:ff:ba:aa:fe:e6:eb:ef:58:87:ca:9f:96:87:6c:ec:fe:
9d:4f:5a:64
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUfugeVzUa46308Vc0LCpQ47Qk/UYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAzMzEyMTQwMDVaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDllMTI3NDZiYjRmZDY1OTg1ZTRkYjNmY2M2M2VjMjg0ODM4ZmVmYzMwZmI3
NWZiMTk4YWMyMjBlNWE2M2MyMDIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKQVgUHpKxDuZT1ufPvYk+O4VPZp31fbS3T5n2ENSs1bSu7mBw9mBN52rCxC
Ju747ksBPgaTtnSwmnGxLNJtx5QWxnprp8PszyYN+zuk3DaKgKaTCCGsr9dC2el+
0Mg0lFdX90hwNWj4Plhp1pqpSpumJN8/NHqn7ju7a67Qa9EDDFCmoWGGlLbTP5zO
zG7uIQKroErbeQzUVr//Mf6HcR8vZwvy3klgksze91xg2KqmHu4PrdCy4aLR1hTj
BpMshA5AArr9s8bdx1HONIN/srLBv2pvAw8eNop120Zob2bzeku9panG57fS6JOX
YLjP+MWDi4BzbrzjFA7b23SidYECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRosoGg
pIgwuKns4o6ikyOGupAlGDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
Njc1NjhjNmEtY2QxYS00NTg2LWEzOTctNTgwYjM3NGRiZGIwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADM8MA0G
CSqGSIb3DQEBCwUAA4IBAQDTAsH6N5t2s0mjNYA0YAaWly9QnEeCgU3Io7KeT12f
hHFnclJxzBz0jAgaFyM+MWD+BCD+TNnAk797rAUQJy1haKMKKBlyaCIEIoH3KiLC
LoXnjibYLXinZtxn3XQZOV3A9IjCl/DhWPQK+A7yS8Adf77UqISZdeMtbWiQXBg+
twmDpeCQYqkbE9GYyst+9tm5FjZNR7Z6JUlLNNvktqK9dTNBg8+OqxmKN8I3BMcn
KS1uhy2TI2kQb00dn/lCk0v9WnuCDuKh0M+eDbb12TjRYWm6MjWn6oUTk60mDosI
dTzUy1Ndk2Nn4ndpVf+6qv7m6+9Yh8qflods7P6dT1pk
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net