Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/795bae65-e494-4497-8c64-6c78c5a4b388.roa
File: 795bae65-e494-4497-8c64-6c78c5a4b388.roa (raw, json)
Hash identifier: kEmrVaECFZINBHM/ieJ7H8hLhZpbmGS1hUcZE4xx0UA=
Subject key identifier: 76:77:B3:42:DB:7E:C9:B3:90:80:50:4F:71:B3:22:DD:EB:71:3B:E5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7DE06D7491627C8BDFDC73648106FB145F9759DA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/795bae65-e494-4497-8c64-6c78c5a4b388.roa
Signing time: Tue 01 Apr 2025 15:10:18 +0000
ROA not before: Tue 01 Apr 2025 15:10:18 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e0:6d:74:91:62:7c:8b:df:dc:73:64:81:06:fb:14:5f:97:59:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 15:10:18 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=4558d5d6e35fcb0960c65e779218b662f44b42d2d132a96e3c2d9a013ff8f314, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:02:ab:f4:d6:e1:5e:df:51:02:bf:81:d3:
c4:5b:b7:7a:f5:02:24:25:67:44:be:58:3f:9d:76:
87:56:25:d3:b0:c5:fd:4c:c7:4b:11:16:7d:22:98:
84:4f:40:34:52:77:f7:5c:54:99:fe:7e:18:49:01:
6a:33:76:3f:5c:02:ec:13:50:28:43:92:24:f0:61:
a9:76:2b:2d:48:42:0d:53:99:be:5a:fc:03:7d:a8:
4b:36:fd:b0:3b:05:00:b2:69:37:c6:d9:56:d7:fe:
76:59:16:a7:f5:67:72:78:da:47:ae:42:9f:f8:bb:
d7:53:c5:3c:12:87:8f:c3:fc:d4:15:34:44:2d:c2:
fb:08:1d:c7:3d:d3:b9:a5:a5:86:85:46:20:fa:ce:
29:95:ea:4f:64:0e:0d:1e:81:c0:b5:c1:55:45:4e:
82:66:7a:66:6d:ed:7a:94:6b:40:fe:05:ab:40:a2:
9c:2b:ac:4d:8a:bd:67:37:b1:7d:ef:1e:27:94:73:
e0:bd:49:22:69:ac:f7:e9:b7:2a:ab:13:86:fe:7a:
2e:7a:ab:14:97:06:f9:a1:ce:9d:24:58:fd:a0:20:
18:05:e4:0c:d5:7e:b3:f0:c3:43:f9:9e:31:8f:5c:
21:7c:c9:19:27:b3:e5:75:43:4d:09:13:8f:a9:5d:
89:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:77:B3:42:DB:7E:C9:B3:90:80:50:4F:71:B3:22:DD:EB:71:3B:E5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/795bae65-e494-4497-8c64-6c78c5a4b388.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.104.0/21
Signature Algorithm: sha256WithRSAEncryption
18:1e:dd:7d:26:73:10:d8:3a:3c:5c:07:d4:24:18:49:12:1d:
d2:5c:71:77:89:5e:13:a8:77:96:80:6f:e2:f6:23:d9:e6:5f:
d8:4f:2a:7c:76:74:47:cd:e6:39:f5:00:c0:de:d7:2c:4f:b3:
e1:9a:66:94:59:e9:f3:06:2f:bb:98:52:41:38:c2:78:3f:32:
c4:b1:12:d6:9e:62:89:89:d6:e4:94:f4:67:d4:92:f3:88:2a:
e0:4c:2e:c8:44:83:ca:2f:db:f0:01:76:f4:5a:cb:e4:3e:af:
9d:c3:24:dc:31:0c:f3:04:13:64:08:e9:af:9c:ce:2b:1a:95:
5d:64:d9:80:71:a4:60:a5:c8:54:20:4d:1d:c4:28:0b:4c:9b:
ec:89:21:c7:de:20:1e:ef:01:56:d4:79:52:41:30:33:7a:99:
75:e6:7b:d8:93:a7:ea:6a:b9:58:05:43:a7:04:15:d0:ba:f6:
e3:fe:bc:79:56:21:69:a6:89:5d:cc:3a:32:e4:bb:ef:d2:cf:
40:9a:77:e5:eb:b0:87:25:f4:e2:50:fc:e6:fa:4c:aa:74:92:
e8:8a:e3:66:9b:eb:87:c0:a3:7a:f9:d8:29:d6:3d:51:24:42:
cd:6e:e7:26:53:9c:b6:57:c7:8f:11:eb:c8:8a:e8:5b:ff:a8:
0b:51:9f:da
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUfeBtdJFifIvf3HNkgQb7FF+XWdowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA0MDExNTEwMThaFw0yNTA1MDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ1NThkNWQ2ZTM1ZmNiMDk2MGM2NWU3NzkyMThiNjYyZjQ0YjQyZDJkMTMy
YTk2ZTNjMmQ5YTAxM2ZmOGYzMTQxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK3iAqv01uFe31ECv4HTxFu3evUCJCVnRL5YP512h1Yl07DF/UzHSxEWfSKY
hE9ANFJ391xUmf5+GEkBajN2P1wC7BNQKEOSJPBhqXYrLUhCDVOZvlr8A32oSzb9
sDsFALJpN8bZVtf+dlkWp/VncnjaR65Cn/i711PFPBKHj8P81BU0RC3C+wgdxz3T
uaWlhoVGIPrOKZXqT2QODR6BwLXBVUVOgmZ6Zm3tepRrQP4Fq0CinCusTYq9Zzex
fe8eJ5Rz4L1JImms9+m3KqsThv56LnqrFJcG+aHOnSRY/aAgGAXkDNV+s/DDQ/me
MY9cIXzJGSez5XVDTQkTj6ldiccCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBR2d7NC
237Js5CAUE9xsyLd63E75TAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
Nzk1YmFlNjUtZTQ5NC00NDk3LThjNjQtNmM3OGM1YTRiMzg4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAzMAaDAN
BgkqhkiG9w0BAQsFAAOCAQEAGB7dfSZzENg6PFwH1CQYSRId0lxxd4leE6h3loBv
4vYj2eZf2E8qfHZ0R83mOfUAwN7XLE+z4ZpmlFnp8wYvu5hSQTjCeD8yxLES1p5i
iYnW5JT0Z9SS84gq4EwuyESDyi/b8AF29FrL5D6vncMk3DEM8wQTZAjpr5zOKxqV
XWTZgHGkYKXIVCBNHcQoC0yb7Ikhx94gHu8BVtR5UkEwM3qZdeZ72JOn6mq5WAVD
pwQV0Lr24/68eVYhaaaJXcw6MuS779LPQJp35euwhyX04lD85vpMqnSS6IrjZpvr
h8CjevnYKdY9USRCzW7nJlOctlfHjxHryIroW/+oC1Gf2g==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net