Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a1fa391-4377-44ba-a6c7-c785fc9a7733.roa
File: 9a1fa391-4377-44ba-a6c7-c785fc9a7733.roa (raw, json)
Hash identifier: 1Yajwq7yYDRegOngdndTRyu1ngl/tWiyV84coOux7Yc=
Subject key identifier: 26:8A:41:82:F6:9B:07:1A:D6:C8:3C:07:A9:8A:25:15:A1:58:88:11
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 224C65368CB90445B54F6AF10FBF39F002D988C1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a1fa391-4377-44ba-a6c7-c785fc9a7733.roa
Signing time: Fri 24 Oct 2025 00:40:07 +0000
ROA not before: Fri 24 Oct 2025 00:40:07 +0000
ROA not after: Fri 28 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.84.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:4c:65:36:8c:b9:04:45:b5:4f:6a:f1:0f:bf:39:f0:02:d9:88:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 24 00:40:07 2025 GMT
Not After : Nov 28 23:59:59 2025 GMT
Subject: serialNumber=5f5b868bfe4e51303affc1677b29a98e2e1b10d535d07d05fdf080792fc9bf94, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:14:ef:3a:73:d2:ec:49:ab:b7:97:33:7d:
fe:87:57:23:3a:da:4a:f6:9f:08:05:b4:78:71:e6:
d9:4a:08:d5:8f:7a:09:2d:e5:99:eb:1d:ec:1f:97:
fa:c0:b9:8a:8e:e2:d4:a0:1d:bf:a6:8e:48:fa:75:
86:7b:73:46:0c:3b:a2:7a:29:df:19:f5:94:e5:e7:
a7:1c:a3:f5:85:25:70:8e:85:e7:e8:69:d8:2b:0a:
9b:cb:de:6d:da:ae:d2:ad:d0:1d:c6:2b:f1:ea:fd:
b2:a9:cc:f5:16:d5:81:db:16:31:fd:7b:bf:c0:f5:
9d:37:c2:94:c3:73:49:cf:38:20:74:c4:78:e4:5f:
89:38:d9:25:3e:15:fb:d1:88:e5:ec:a8:44:cb:b1:
9b:a7:0f:bd:00:50:85:b3:2f:91:76:be:9f:a9:35:
29:b8:8f:00:da:3f:4d:f5:6a:3f:de:71:bc:a5:14:
27:ad:1a:41:bb:97:b4:d1:41:11:38:57:21:32:6e:
4d:c8:67:7e:ea:31:cc:a9:97:f9:2f:c0:08:4f:42:
92:23:12:7d:3f:4b:32:71:8a:38:d9:f8:92:98:37:
6f:5b:2f:5e:20:87:7b:8c:80:43:29:c6:1e:be:03:
90:bf:1b:c2:45:d1:c8:4d:36:e9:d2:65:f2:ae:85:
12:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8A:41:82:F6:9B:07:1A:D6:C8:3C:07:A9:8A:25:15:A1:58:88:11
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a1fa391-4377-44ba-a6c7-c785fc9a7733.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.84.0.0/14
Signature Algorithm: sha256WithRSAEncryption
4a:f1:3c:a7:27:9d:22:c7:c7:e1:f6:3c:f0:71:34:f1:ad:56:
60:ea:ef:67:e7:7d:6e:dd:1e:65:cd:d0:41:9c:95:72:36:42:
f8:55:da:26:2a:60:b1:c9:0f:14:22:5d:95:8d:e4:c7:67:65:
be:51:42:70:8e:6f:e3:22:c6:2f:a7:fd:24:cd:45:82:35:30:
95:7e:b6:05:72:a3:80:ad:7e:6c:f7:a8:bd:85:eb:b9:6b:b2:
ab:61:85:9c:01:bd:4b:2b:66:3d:6f:7e:87:74:e9:cd:9c:fd:
4a:ab:df:5a:e9:6a:75:b2:71:7e:04:8a:05:4f:34:b0:cc:62:
e8:b6:8c:23:2a:ac:fe:21:a9:c6:0d:15:31:2f:73:7c:57:2e:
dc:a6:d1:da:80:d6:78:6f:d9:0c:96:f7:3f:fc:dc:6c:31:c2:
1c:8a:76:61:e8:ae:52:30:78:d9:d6:6c:17:f6:da:ee:b0:a3:
80:06:f8:41:a1:1e:e7:60:fb:42:bf:bb:95:20:95:1f:70:56:
f6:de:8a:2f:75:d5:53:50:e4:d4:9d:5a:2e:42:75:dc:30:9d:
03:30:33:a3:41:64:e7:37:90:aa:4a:c4:c5:23:68:d1:c7:00:
58:aa:56:b0:7f:a1:3f:1f:06:bc:2e:7d:84:60:49:bf:8b:49:
46:35:47:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:37:24 2025 by rpki-client