Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80a19bac-b522-4340-8501-74870117a3ce.roa
File: 80a19bac-b522-4340-8501-74870117a3ce.roa (raw, json)
Hash identifier: +AUhTv8By+NIVJ3YmQoZk8Jk8ziPrDlx4JLr7KtiDYc=
Subject key identifier: 3B:FE:94:A4:48:97:05:4B:96:F2:1A:E7:FA:71:6C:57:BD:CF:D4:FE
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 26A4F6DF639CA02C1FBFEF557B88A3075D13B989
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80a19bac-b522-4340-8501-74870117a3ce.roa
Signing time: Fri 25 Apr 2025 20:40:39 +0000
ROA not before: Fri 25 Apr 2025 20:40:39 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.80.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:a4:f6:df:63:9c:a0:2c:1f:bf:ef:55:7b:88:a3:07:5d:13:b9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 25 20:40:39 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=6311dcb2bd5cd2c07641287f7cc921bc661678d1a16444abda22f8f67361f820, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fb:a8:0b:71:44:0c:ba:99:eb:91:6d:10:92:
ad:e4:fc:00:5c:72:f5:0f:43:15:17:dc:07:7a:7a:
bd:f1:62:1b:c2:a7:c4:3c:dd:87:28:78:41:82:f9:
be:70:61:e6:c8:74:c4:ed:02:d0:54:f7:86:11:4c:
05:de:1d:ac:0e:a4:ff:e1:d4:ad:d9:d2:44:eb:46:
20:f5:96:d2:be:e5:16:47:ad:05:4f:a6:26:0b:7e:
ec:9d:b2:7b:bf:95:33:ab:3c:23:33:fd:a6:10:ad:
b2:0e:df:33:17:21:1f:e6:d9:f4:1a:99:a5:94:51:
a3:26:63:32:63:fb:9b:31:95:a1:25:cf:29:42:74:
c2:be:b6:96:1c:3b:2f:3a:2b:9c:e3:f4:0e:b4:88:
58:bb:fc:2f:63:08:36:9d:e2:07:bf:02:f9:ca:c7:
b5:22:6d:22:e6:1b:a6:dc:0e:ba:15:42:11:80:af:
8b:f0:47:bb:44:34:33:18:24:d8:bd:2b:bf:42:33:
23:a2:94:b6:ad:e5:0d:bf:e8:ee:da:24:30:80:3d:
ed:34:93:f9:c5:8c:fc:34:51:98:7f:8a:a3:49:03:
93:05:73:04:de:0c:0c:d4:4b:bb:53:d7:9e:6b:7e:
4e:e0:41:ca:69:9e:64:1c:ec:a4:16:f5:1e:dc:61:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FE:94:A4:48:97:05:4B:96:F2:1A:E7:FA:71:6C:57:BD:CF:D4:FE
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80a19bac-b522-4340-8501-74870117a3ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.80.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:dd:ba:f9:74:24:68:c7:d2:52:91:29:2a:e6:bf:a0:5b:ff:
ad:89:31:8a:fb:13:1f:75:de:58:1d:5c:24:5b:95:7a:b7:3b:
c8:7d:d3:09:7d:74:c7:10:d7:e7:21:84:1b:98:59:b1:4b:79:
a5:92:a5:3d:55:62:d4:c8:92:dc:55:e0:ea:48:62:fa:3b:7f:
cd:ff:93:46:e6:76:dd:51:3b:5f:1d:01:2a:a8:d6:4d:17:91:
88:c5:17:e0:08:22:2d:bc:52:40:6a:97:00:60:db:20:d4:90:
22:3f:45:5d:c7:30:5f:8d:ae:b2:43:04:88:4c:bd:74:bc:ba:
d9:c5:b8:75:df:dd:8a:df:c0:00:5a:a2:7d:eb:fb:3b:b9:34:
60:8b:89:0f:e2:a5:95:64:ba:f4:45:3f:fc:33:9b:5d:f7:2f:
f7:50:f0:c9:f5:8b:6f:7e:cf:60:46:25:61:41:ad:29:07:32:
66:28:96:88:b8:d5:cf:11:41:4f:68:43:db:91:da:17:6e:7b:
eb:a3:ff:28:f9:52:dc:75:af:7a:69:da:3c:20:e9:d2:8e:91:
92:b7:1b:e9:c9:fa:8a:f0:a6:df:fb:c0:d3:dc:4c:b4:ae:40:
2d:ab:75:3c:9d:91:ca:b8:e3:9f:3b:42:85:02:40:ad:53:0c:
30:19:c1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:43:40 2025 by rpki-client