Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/70bc7703-020e-4153-b340-cced3a436951.roa
File: 70bc7703-020e-4153-b340-cced3a436951.roa (raw, json)
Hash identifier: y2D7LJoMdXEpVfgW/q0lJXkSPsDFwX19QDP0gfRAS3M=
Subject key identifier: 8B:F7:5C:C0:C6:71:8F:06:EF:4B:F1:BA:04:F5:2A:F2:29:99:24:5F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1E8C6B34D6E2693483C8794C1305C761CDCF5C77
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/70bc7703-020e-4153-b340-cced3a436951.roa
Signing time: Fri 24 Oct 2025 00:40:28 +0000
ROA not before: Fri 24 Oct 2025 00:40:28 +0000
ROA not after: Fri 28 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.96.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:8c:6b:34:d6:e2:69:34:83:c8:79:4c:13:05:c7:61:cd:cf:5c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 24 00:40:28 2025 GMT
Not After : Nov 28 23:59:59 2025 GMT
Subject: serialNumber=67a496dc14f7f0f4131ff84325dfaa56c5c86ba523a67b218e377068b3163bd0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:a3:97:1f:36:30:e9:fe:5d:80:23:3a:e1:
c7:e9:21:00:0a:37:66:e6:df:45:95:eb:bc:8b:21:
f8:e7:e1:a6:ae:e8:58:ec:04:97:8c:5a:17:2a:61:
54:78:90:40:9e:c5:3f:29:fc:71:ab:27:21:df:5b:
31:96:6f:6b:ff:bf:6b:cc:57:bb:23:7e:d9:89:d8:
79:17:f6:79:74:93:49:38:cc:56:3d:c3:ee:fb:6d:
18:f4:a9:aa:7c:73:81:e1:1c:07:ce:00:df:72:aa:
72:2d:ab:73:6d:52:30:44:74:27:05:24:a1:8c:31:
5d:28:7b:e8:9a:cd:d1:31:a7:f8:b5:75:53:3b:79:
ba:55:e2:df:dc:5a:f3:67:a2:ff:c2:ad:8f:f2:7f:
e0:a0:53:43:2a:28:b3:4d:86:03:8c:f7:f8:b4:2c:
de:ab:ee:2c:c7:d5:8a:56:c9:c4:2e:d0:44:97:b6:
10:71:dd:ab:43:f0:2a:54:4e:0f:e7:06:54:d1:44:
0e:85:a6:41:05:63:cf:09:55:d2:6b:cc:66:c1:04:
cb:90:11:25:89:b1:af:34:2e:f5:00:38:90:6a:1e:
37:f8:bb:73:01:40:4a:68:a5:f9:ea:97:8d:d9:3c:
d9:71:25:c7:35:68:b0:42:f3:44:e7:34:d1:2d:35:
c9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F7:5C:C0:C6:71:8F:06:EF:4B:F1:BA:04:F5:2A:F2:29:99:24:5F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/70bc7703-020e-4153-b340-cced3a436951.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.96.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:a1:50:ae:04:9c:e8:b7:49:9e:12:4d:d2:38:7a:09:7c:06:
48:1b:f3:4d:f2:2c:92:16:dc:8d:94:57:56:bf:9c:5c:c0:be:
8d:f4:ed:16:dc:b2:57:bd:dd:1d:72:f8:37:0d:44:de:df:ba:
a6:c3:ad:88:ae:36:a8:dd:ac:60:ac:54:54:5d:43:a4:8b:3e:
1e:ed:f0:38:2a:6a:09:67:66:9a:aa:46:09:41:6a:0b:29:3e:
1a:ee:e2:bd:5b:da:d0:71:ac:e1:ef:41:73:a3:64:1b:b1:a8:
e4:fe:3e:eb:78:04:b5:e0:1d:92:58:64:52:30:19:79:d6:78:
d7:00:2c:e2:9e:e7:20:2e:a5:f0:8c:2a:d8:b5:19:5e:03:30:
f4:a2:ce:71:30:ee:5e:3b:d6:63:00:ef:ab:14:6b:a2:2f:9d:
47:a5:b4:f6:d7:5a:c5:e2:00:78:d9:aa:ed:a7:39:80:a7:c0:
e7:eb:f9:f1:e0:0c:be:83:75:b7:51:ea:a5:8c:a9:60:24:66:
85:4f:43:ff:a8:d8:c4:6a:6a:c4:cb:c1:3b:95:1c:17:0b:42:
ee:ca:a2:4f:01:85:e8:bd:fc:28:48:e4:0a:5d:26:e9:78:22:
ee:85:18:5c:c7:64:c3:7d:21:f3:0e:fc:cf:8a:26:77:5a:73:
9c:8c:ba:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:38:47 2025 by rpki-client