Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1b39e9a7-4f3d-4cfc-975f-d9eaceed0ed2.roa
File: 1b39e9a7-4f3d-4cfc-975f-d9eaceed0ed2.roa (raw, json)
Hash identifier: q5D/gmubLi7BKk2MvMJiODzgv5Xg1a1HOTwu8zQlukQ=
Subject key identifier: 33:3C:61:78:95:C1:27:B3:24:3C:23:C9:1A:6F:37:88:1B:B1:7B:6D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7CC9399D65A48162608E07A50F0C2F9C11D39C76
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1b39e9a7-4f3d-4cfc-975f-d9eaceed0ed2.roa
Signing time: Fri 25 Apr 2025 20:30:12 +0000
ROA not before: Fri 25 Apr 2025 20:30:12 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.134.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:c9:39:9d:65:a4:81:62:60:8e:07:a5:0f:0c:2f:9c:11:d3:9c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 25 20:30:12 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=5ca1c2f4fbcc76f7ff28d8b7659b7dfddc6942130b9cc1ad30f22d0ec49fbed6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:36:c8:c1:bf:64:cb:1b:7a:61:02:10:d3:
5f:b5:09:0e:cf:69:2c:1c:47:95:e4:72:fd:0b:0b:
14:27:d8:a0:19:49:b5:c7:cf:84:29:14:a1:0c:06:
e5:6b:76:89:c7:e2:fa:89:2d:8d:2e:93:14:7d:5c:
e7:48:53:dc:36:a7:79:68:bd:8b:c4:ac:c7:a4:8b:
15:1d:57:75:e1:dc:a4:e7:9c:bf:b3:19:60:5c:15:
ca:72:e5:69:72:c0:a2:86:48:e8:e1:49:6a:6e:0d:
51:af:b2:dd:32:10:7c:a0:2b:78:dc:3c:0f:31:54:
6b:8b:f4:24:d5:2b:c0:4f:31:c3:19:a5:ef:28:3b:
c4:62:8d:21:16:4d:34:9f:56:db:58:2b:ed:66:71:
c9:c3:1c:6b:2a:4d:e0:99:43:46:35:57:af:30:94:
59:15:2d:84:87:be:53:3a:4c:91:e3:52:87:de:93:
2f:1c:8e:40:e5:5e:7c:20:6b:22:14:55:fe:2d:d9:
fd:50:12:ba:0e:17:9d:e1:8a:fd:cd:09:76:b2:f1:
89:04:a9:98:11:12:e2:83:8b:51:bb:19:59:05:23:
42:b4:e3:20:f7:31:55:8b:7c:36:7a:0e:43:30:7d:
61:fc:c1:0e:4c:28:6c:00:ae:1e:b8:c7:e1:bd:79:
8b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3C:61:78:95:C1:27:B3:24:3C:23:C9:1A:6F:37:88:1B:B1:7B:6D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1b39e9a7-4f3d-4cfc-975f-d9eaceed0ed2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.134.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4d:fc:13:16:67:6e:35:c7:a0:f8:d0:e7:94:f1:22:ec:ae:d1:
b3:dc:3d:e6:b2:a0:40:fc:f7:69:94:a8:94:68:18:31:8c:b7:
0f:c4:61:bb:27:59:80:ee:2e:87:a3:c5:01:6e:16:5b:f0:00:
50:81:5a:90:48:41:07:f7:c7:78:8f:fa:e9:0c:02:55:da:3c:
28:26:00:40:96:0f:cb:9a:62:47:d6:43:c2:3c:ee:6f:77:62:
88:47:2d:01:08:ae:99:5b:4c:af:e2:90:1e:5a:0c:37:de:9f:
d1:ea:1c:45:05:6c:a3:a5:16:5e:4d:6d:18:af:28:f2:0b:8e:
e2:ee:92:d5:7a:69:21:7e:86:50:08:c3:73:9b:b6:4f:35:a7:
2a:e4:ec:5c:8e:1f:f4:5d:19:2f:f5:4c:06:0d:aa:0c:1f:82:
d2:7d:43:fa:f2:37:21:0f:aa:84:67:f6:ed:97:f2:35:8b:da:
9b:f6:a3:24:f5:e1:3e:28:b4:64:08:dd:54:fb:f1:eb:84:4d:
24:f7:14:65:0f:ee:91:48:77:99:11:95:e3:56:a7:f5:3c:ca:
44:83:9b:16:ed:98:cf:53:60:e9:d3:3e:c1:b5:e4:53:96:f6:
94:90:4b:79:d4:54:ee:04:46:d7:df:86:51:8d:f8:c4:79:ec:
a0:72:66:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:44:20 2025 by rpki-client