Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8dcd1031-0c8d-4ee4-9563-57ddb63e1678.roa
File: 8dcd1031-0c8d-4ee4-9563-57ddb63e1678.roa (raw, json)
Hash identifier: c5cW8euIoKYYiV0wqzV9GhyhA448Om5iK+QAtACp/OE=
Subject key identifier: D2:ED:EA:DF:0C:A5:46:4B:08:CF:C6:99:0B:8D:F0:0E:A7:B8:AB:11
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0B5912417E3D6BE9AE5BFDDAA56E89EBF0FB8919
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8dcd1031-0c8d-4ee4-9563-57ddb63e1678.roa
Signing time: Mon 31 Mar 2025 21:31:04 +0000
ROA not before: Mon 31 Mar 2025 21:31:04 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.226.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:59:12:41:7e:3d:6b:e9:ae:5b:fd:da:a5:6e:89:eb:f0:fb:89:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:31:04 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=8656fc69f5f1fdfab2d75eb0e57ba0b37c015695855419a7d70a7179be763d85, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:35:09:fd:ba:92:1f:7b:6c:ea:c9:22:42:
f1:2f:8d:76:66:9d:3c:cd:63:61:1d:24:80:33:7c:
24:1e:21:ff:f2:cc:a8:66:79:41:5e:9e:3e:b1:e3:
59:63:da:94:9b:3a:02:27:64:ab:02:46:84:8e:4b:
2b:ac:27:31:88:af:6d:1e:fa:67:96:d1:89:00:6d:
5d:4a:cd:ab:bb:3a:65:33:72:eb:8f:0d:4c:05:b0:
45:5f:20:2a:bf:9c:2e:bb:06:a9:a1:2c:f3:78:85:
72:fc:03:a4:96:46:83:c8:33:46:93:c2:b7:a9:03:
d9:96:f1:bf:26:f6:03:cd:5b:ad:4b:ff:08:7a:03:
3f:37:54:4b:e2:f1:79:b2:ad:6b:33:76:e2:c3:f7:
5f:ec:53:3d:0e:8a:c6:43:0a:75:cf:16:15:26:c8:
b7:22:5b:0b:56:f3:62:bc:2e:bc:86:dd:58:b4:ad:
5d:0e:53:61:54:e8:12:29:59:f8:f0:ec:1f:ae:40:
d1:b7:01:77:67:72:2d:23:3a:8f:32:dc:5d:52:59:
a2:85:6f:9e:5c:bb:d9:a9:79:79:55:c9:5e:ea:ef:
51:2c:07:9c:ed:08:2b:7e:68:d3:53:92:5c:16:52:
57:a2:68:3a:91:1c:cc:b5:31:5b:18:ab:11:b6:b6:
9a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:ED:EA:DF:0C:A5:46:4B:08:CF:C6:99:0B:8D:F0:0E:A7:B8:AB:11
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8dcd1031-0c8d-4ee4-9563-57ddb63e1678.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.226.0.0/15
Signature Algorithm: sha256WithRSAEncryption
ac:56:fe:5f:87:64:16:ba:ca:66:cd:c7:46:ae:34:52:a2:e7:
0a:9e:df:c2:38:b4:18:25:3a:c9:f2:c2:93:c7:e6:05:d9:d2:
51:db:ff:42:eb:2a:e7:a6:e4:d7:db:b7:ea:df:6f:49:f6:5d:
0e:c8:a8:d2:d5:ae:3b:ce:f0:53:b0:4d:2c:14:94:72:e6:d9:
7b:42:6c:69:33:dd:fa:cd:e2:71:0d:79:6e:14:80:ce:e6:7b:
b3:51:92:f2:88:7d:8f:e1:8c:9f:58:56:03:c9:ec:37:1d:89:
f3:6a:77:d0:fa:92:e3:1a:28:56:8a:5b:7a:b8:c2:8d:2f:6f:
45:57:d2:de:00:de:2f:19:39:4f:31:a4:44:bb:8c:0a:ff:3d:
6e:d1:94:13:a6:33:bb:4a:88:6c:76:47:88:16:2d:9a:72:cc:
ce:f7:14:86:ed:eb:73:01:33:13:b3:c8:b7:fd:88:ae:c2:c7:
ca:57:8e:c9:24:8c:45:f9:83:4a:47:97:81:1c:18:c8:f8:77:
f6:67:9d:91:8d:58:b0:e0:c0:43:34:9b:74:9c:7f:de:18:5e:
87:f6:6e:33:60:ba:32:3d:ee:ec:57:5e:4d:a1:bd:a2:52:9e:
5a:fd:db:5e:7e:e8:d6:83:ab:28:af:23:21:3c:ee:97:a8:59:
41:2e:5e:a8
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUC1kSQX49a+muW/3apW6J6/D7iRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAzMzEyMTMxMDRaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDg2NTZmYzY5ZjVmMWZkZmFiMmQ3NWViMGU1N2JhMGIzN2MwMTU2OTU4NTU0
MTlhN2Q3MGE3MTc5YmU3NjNkODUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMTCNQn9upIfe2zqySJC8S+NdmadPM1jYR0kgDN8JB4h//LMqGZ5QV6ePrHj
WWPalJs6AidkqwJGhI5LK6wnMYivbR76Z5bRiQBtXUrNq7s6ZTNy648NTAWwRV8g
Kr+cLrsGqaEs83iFcvwDpJZGg8gzRpPCt6kD2Zbxvyb2A81brUv/CHoDPzdUS+Lx
ebKtazN24sP3X+xTPQ6KxkMKdc8WFSbItyJbC1bzYrwuvIbdWLStXQ5TYVToEilZ
+PDsH65A0bcBd2dyLSM6jzLcXVJZooVvnly72al5eVXJXurvUSwHnO0IK35o01OS
XBZSV6JoOpEczLUxWxirEba2mj8CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTS7erf
DKVGSwjPxpkLjfAOp7irETAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
OGRjZDEwMzEtMGM4ZC00ZWU0LTk1NjMtNTdkZGI2M2UxNjc4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPiMA0G
CSqGSIb3DQEBCwUAA4IBAQCsVv5fh2QWuspmzcdGrjRSoucKnt/COLQYJTrJ8sKT
x+YF2dJR2/9C6yrnpuTX27fq329J9l0OyKjS1a47zvBTsE0sFJRy5tl7QmxpM936
zeJxDXluFIDO5nuzUZLyiH2P4YyfWFYDyew3HYnzanfQ+pLjGihWilt6uMKNL29F
V9LeAN4vGTlPMaREu4wK/z1u0ZQTpjO7SohsdkeIFi2acszO9xSG7etzATMTs8i3
/YiuwsfKV47JJIxF+YNKR5eBHBjI+Hf2Z52RjViw4MBDNJt0nH/eGF6H9m4zYLoy
Pe7sV15Nob2iUp5a/dtefujWg6soryMhPO6XqFlBLl6o
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:11 2025 by rpki-client on console.sobornost.net