Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/70bc7703-020e-4153-b340-cced3a436951.roa
File: 70bc7703-020e-4153-b340-cced3a436951.roa (raw, json)
Hash identifier: ZMal/foT2QxyfL6E1RRWkK4pDylsvTwKFAHj2q/SRbU=
Subject key identifier: 80:AA:97:DE:DA:F2:EB:89:21:05:AF:F6:22:A7:C6:3D:6B:9E:8F:36
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5620EECE408DD385B2CCFB98E7F7377BE6B5D316
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/70bc7703-020e-4153-b340-cced3a436951.roa
Signing time: Fri 23 May 2025 00:51:17 +0000
ROA not before: Fri 23 May 2025 00:51:17 +0000
ROA not after: Fri 27 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.96.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:20:ee:ce:40:8d:d3:85:b2:cc:fb:98:e7:f7:37:7b:e6:b5:d3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 23 00:51:17 2025 GMT
Not After : Jun 27 23:59:59 2025 GMT
Subject: serialNumber=40dcf7cd8d8b9ce2b5173fbe1a78d2bd1cad91ed9e0def2335e70cb94f68d50a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:5a:1f:78:1b:3c:5f:98:62:b4:e9:f1:c0:
ca:83:78:c9:d6:d3:ad:22:54:be:ee:d1:59:fa:83:
ca:fc:9b:4b:83:e2:4d:f9:51:bc:26:5d:be:0e:66:
01:fb:1c:8c:76:70:1f:67:0c:e7:a7:63:81:09:2d:
d4:30:b3:08:16:6c:5c:f9:ec:1d:55:96:20:e8:a8:
84:65:48:1d:aa:39:f2:ca:fa:bf:e2:f5:17:5a:1c:
2a:0d:b0:fd:64:f9:88:03:53:b6:a0:4c:94:ff:15:
60:31:c6:51:10:91:42:16:80:fa:e9:ee:93:5c:87:
66:2c:fa:26:cd:f8:63:3a:a4:ac:0a:5f:d8:01:71:
f5:b8:bd:24:24:79:9d:0d:05:43:99:ed:b4:cf:ec:
d3:9a:18:4b:48:71:6b:80:7e:fb:ec:e6:c2:0a:f4:
f8:95:4b:9f:8a:a2:95:3f:a1:15:08:b7:2a:4e:04:
a0:85:24:26:3e:95:82:be:bd:8d:87:4f:39:4b:34:
97:26:d7:6a:fc:18:85:30:a5:25:b4:34:dd:33:35:
70:46:99:5c:53:ab:27:8e:86:3b:a8:a4:1e:9d:b0:
38:8b:0b:90:f0:a0:3a:72:e0:ea:91:41:a7:b8:3b:
57:d8:56:d3:34:48:28:56:39:0d:b8:a3:32:82:e6:
1a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AA:97:DE:DA:F2:EB:89:21:05:AF:F6:22:A7:C6:3D:6B:9E:8F:36
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/70bc7703-020e-4153-b340-cced3a436951.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.96.0.0/16
Signature Algorithm: sha256WithRSAEncryption
24:1b:87:3e:a9:5f:3d:a8:41:85:6c:ad:a3:9f:3d:46:a7:b9:
2a:fb:e5:ac:1a:a8:57:a9:1c:f4:75:62:2a:c9:aa:12:fe:68:
38:2a:f6:54:e2:cf:ec:81:6c:65:9d:b2:69:17:b4:18:f0:9a:
d8:26:9f:ee:11:2c:c4:7a:1b:5b:b1:4e:d1:9e:26:7c:d5:a5:
63:1c:84:d5:ac:2e:96:fb:cf:50:d5:27:e2:7b:4f:eb:7b:62:
29:02:23:5e:c4:8e:6d:e7:b9:f6:f8:cb:aa:06:fe:cf:9e:ac:
3d:61:51:0c:44:0d:e0:b2:03:66:6c:77:d3:3d:75:49:a9:ed:
71:b7:38:28:b6:de:30:06:9d:57:60:09:23:bc:79:0d:bd:ed:
28:ce:14:2c:3f:4f:4a:a1:b0:d1:b6:e4:f9:6f:18:cd:4d:d1:
24:99:05:33:0f:6c:6a:15:ac:c5:ee:73:27:a1:a4:24:93:69:
f8:0e:41:2d:5c:a5:6f:8f:7b:f2:bc:86:25:f7:68:f4:02:8b:
9c:57:b9:a1:47:40:0a:19:c9:db:1c:6e:dd:8f:13:03:0f:b0:
0f:cf:9d:35:be:89:18:b4:a7:17:e7:bd:da:7b:d0:ba:72:cd:
58:30:da:49:83:ee:3c:03:c6:29:fa:42:9d:c5:2c:a1:50:5d:
63:86:bf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:28:16 2025 by rpki-client