Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1b39e9a7-4f3d-4cfc-975f-d9eaceed0ed2.roa
File: 1b39e9a7-4f3d-4cfc-975f-d9eaceed0ed2.roa (raw, json)
Hash identifier: QkCsAhGC3DjWDIQu2AFdoPUgnhb6yce7dd7+VnqbSRE=
Subject key identifier: B8:90:B5:73:43:06:8E:67:32:52:85:94:25:E1:DE:52:0A:48:7E:24
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2B4B5419FA2D5F830B9800D4C96CB1F74F0401CE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1b39e9a7-4f3d-4cfc-975f-d9eaceed0ed2.roa
Signing time: Tue 20 May 2025 20:40:10 +0000
ROA not before: Tue 20 May 2025 20:40:10 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.134.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:4b:54:19:fa:2d:5f:83:0b:98:00:d4:c9:6c:b1:f7:4f:04:01:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 20 20:40:10 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=e396c663054f72e4f5d3dd83fde1b5fa939db75646b4e520e8e6e4dd320f0ad2, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:e8:a5:9a:48:c0:0f:ab:96:97:03:35:3e:
48:d7:20:a7:00:1c:aa:ad:c5:80:09:f5:3c:fd:41:
e6:23:36:af:65:f9:e4:c9:f7:02:87:7c:48:aa:a1:
b3:90:9e:20:1c:63:f7:84:03:08:1c:cd:62:d5:1d:
92:11:33:e9:1f:81:3a:84:07:31:28:df:b3:33:6e:
a0:f2:6d:f1:46:8e:c7:ea:63:90:89:11:2a:a2:99:
90:97:7c:9c:92:b1:08:76:60:75:05:d7:12:c2:5b:
ce:35:66:32:34:fe:d3:0a:c9:c7:bf:f8:ac:64:9e:
72:2c:65:e4:fe:d6:a6:ec:73:03:1d:9f:85:7c:51:
50:20:cd:d5:87:8d:7b:7c:f9:0c:53:60:c8:63:ba:
ca:ba:91:36:a5:da:2f:3f:96:0b:df:ce:8f:11:13:
98:b1:92:75:27:7c:10:ab:97:15:e6:b6:b6:1c:0e:
8a:9f:80:c5:1b:8e:b5:11:17:50:4e:e8:26:77:01:
2f:9b:b2:94:0a:79:62:a7:b4:9b:e3:e2:81:85:00:
85:0e:f7:c7:67:ad:e9:ab:fe:b0:4b:d4:54:09:32:
51:1e:bf:61:61:ad:f3:e4:bc:2e:42:43:9b:67:7a:
c9:10:14:3f:56:7a:7f:2f:1c:d8:fa:db:0d:69:68:
cc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:90:B5:73:43:06:8E:67:32:52:85:94:25:E1:DE:52:0A:48:7E:24
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1b39e9a7-4f3d-4cfc-975f-d9eaceed0ed2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.134.0.0/16
Signature Algorithm: sha256WithRSAEncryption
54:69:1d:7e:92:96:9f:7d:7d:62:33:2e:cb:7c:22:2d:8c:0c:
8f:6a:68:b5:88:89:d9:2e:60:ab:d2:9f:c8:ec:f2:e2:96:90:
10:bb:f5:2f:ba:7d:84:bc:d4:af:f3:cd:f7:f4:75:ef:5a:ea:
57:b0:5b:e7:4d:f3:d1:fe:98:e3:c1:28:9b:d1:60:64:1b:cc:
4f:1b:7b:99:7f:3c:2b:00:72:b2:85:f0:49:80:a2:b6:58:7b:
32:05:c7:fc:79:b0:4c:e4:c1:30:a7:f0:72:5f:26:30:42:00:
64:04:87:b5:42:1c:de:5e:5c:eb:60:62:94:59:e7:5d:86:da:
ee:d0:1c:57:1e:80:c2:16:85:0f:91:af:a6:ec:1b:90:c7:7a:
9b:13:3e:19:3c:27:65:14:79:18:1f:cf:74:fa:46:70:33:e9:
0a:98:21:88:8d:36:ee:97:f4:f9:70:27:1c:e8:50:59:6f:54:
5e:62:6c:08:09:d9:d3:55:1f:e0:4e:5f:16:ab:ec:68:32:73:
b7:7b:1b:d3:e6:b0:e1:5b:b9:52:b8:a9:5d:50:9c:9e:af:da:
73:4c:27:8d:59:f9:4a:13:ee:8a:9f:81:1a:26:a7:a6:69:23:
5c:6d:b3:3d:09:f1:a6:d4:da:2e:4c:82:74:97:7f:f2:76:83:
e1:f4:c4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:42:25 2025 by rpki-client