Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/207ef309-dcb5-4264-bf57-0d52fea079cd.roa
File: 207ef309-dcb5-4264-bf57-0d52fea079cd.roa (raw, json)
Hash identifier: plutpOmAQRocbOYmUP5ejG5xEHxdNiRo7J0DUZinD1c=
Subject key identifier: 81:88:4E:4F:24:11:98:D0:2C:D4:7C:3D:41:BA:CA:74:78:41:06:42
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 03A3ED0116C9CCD13BD8F96E5224C8DA1114A2BE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/207ef309-dcb5-4264-bf57-0d52fea079cd.roa
Signing time: Fri 31 Oct 2025 02:00:04 +0000
ROA not before: Fri 31 Oct 2025 02:00:04 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.24.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:a3:ed:01:16:c9:cc:d1:3b:d8:f9:6e:52:24:c8:da:11:14:a2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 31 02:00:04 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=b14cbd8b461c3127a63a59fdfb94244f99872ecb4c1f43636f0773b00b95ed7e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:a3:b6:95:a2:4f:67:87:df:27:ec:2f:3e:
43:22:d5:26:25:d0:8f:c7:cf:a1:cf:be:b0:9f:6b:
d5:00:29:b6:44:29:9a:30:3c:5a:09:d1:56:c6:b7:
84:8a:58:23:c7:d5:30:0e:c5:b8:a7:d9:7f:8e:eb:
c5:b6:23:64:c6:3e:e8:39:78:36:d7:2f:da:19:7c:
d3:42:e8:bd:d6:31:48:fb:70:b1:d2:d8:e9:de:d3:
55:fd:40:b1:d1:d1:94:e9:c0:f3:62:18:23:ff:1e:
4f:2c:b0:71:5f:a9:60:36:7f:79:ac:93:62:7e:90:
6f:17:f1:95:e6:24:61:6c:86:02:c2:d6:28:83:47:
34:c7:f4:fd:da:f2:fb:05:70:bb:13:4f:b5:bf:d8:
ec:6b:94:97:0b:4f:7e:f3:7e:98:03:34:46:cb:f3:
d0:8e:0a:02:e1:fd:c9:e1:0b:b1:e8:8b:e8:83:b6:
7b:4f:8b:bf:e9:a1:46:93:a3:ab:22:a1:6b:d7:41:
f8:63:d9:dc:7f:be:84:6a:56:47:9c:4f:be:d1:af:
6d:e3:35:31:da:34:1c:67:cc:50:51:03:34:00:77:
d8:ab:b5:26:e3:cc:99:5f:b2:95:82:b5:b9:1f:1d:
c3:83:cc:76:be:41:ec:0d:a4:7e:56:92:28:f5:d3:
23:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:88:4E:4F:24:11:98:D0:2C:D4:7C:3D:41:BA:CA:74:78:41:06:42
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/207ef309-dcb5-4264-bf57-0d52fea079cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.24.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c5:97:a9:3a:45:9e:fe:6f:7d:ae:f9:cc:7d:97:08:9f:ca:96:
f5:da:dd:35:e4:54:2e:77:95:62:19:20:81:4f:12:87:31:c1:
d0:10:2f:c4:9d:1a:ce:70:c5:50:be:44:a1:5e:34:0c:9a:66:
a7:c1:4b:09:89:60:b5:f9:d8:fb:1c:8b:33:d0:44:3b:18:90:
8c:4c:37:15:b0:45:52:83:ba:00:90:e3:3a:bd:0a:ba:ee:98:
a6:5c:8e:d9:73:6d:cb:cb:76:63:39:c4:b2:90:e8:f8:97:9e:
8b:e7:6c:fa:38:ae:75:9c:de:14:9f:1a:33:5c:ec:02:26:87:
e2:5d:9b:de:57:74:8f:c1:26:4d:4b:c9:d3:30:e8:e4:57:28:
9c:8f:2f:17:df:71:0f:53:4e:ed:67:dd:e6:9c:1c:04:5d:b9:
1e:b8:61:3b:d2:f0:a0:f0:47:7a:6a:9a:8a:5e:ce:53:1b:59:
2f:72:31:73:08:85:91:5b:9f:14:07:aa:e5:b6:b2:f3:23:00:
23:93:58:08:70:bc:c2:2d:a8:b3:a4:e8:f4:b2:d6:f3:15:9b:
5c:fe:0a:7f:2a:44:26:f7:99:a3:72:c0:d4:b8:68:9b:38:05:
92:07:52:3a:8c:5c:5c:da:1c:9a:34:e3:22:3a:1b:74:36:3f:
5d:40:f0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:30:41 2025 by rpki-client