Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa
File: bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa (raw, json)
Hash identifier: pSMILRkcGVyZJTcm4HJc5NkDr/U4cqrXlX/AJlU+qZU=
Subject key identifier: 87:E0:DE:B0:6A:14:31:F9:96:32:57:85:71:18:A0:BA:9F:17:29:86
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 01551CC948056D2324E8CB2C69EB2800758EE05E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa
Signing time: Mon 21 Jul 2025 17:00:04 +0000
ROA not before: Mon 21 Jul 2025 17:00:04 +0000
ROA not after: Mon 25 Aug 2025 23:59:59 +0000
asID: 14618
IP address blocks: 83.118.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:55:1c:c9:48:05:6d:23:24:e8:cb:2c:69:eb:28:00:75:8e:e0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 21 17:00:04 2025 GMT
Not After : Aug 25 23:59:59 2025 GMT
Subject: serialNumber=d17a16747235fd0773cd95edf55fe2f77948af0fcd154bd51c40b395059b9162, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:24:55:38:4d:2b:62:dd:b3:e8:0e:d1:38:
1d:46:4f:f6:08:db:89:be:00:b0:6e:2f:e7:76:ab:
b2:ee:9b:df:be:c6:b4:07:c1:c2:07:82:da:98:9e:
0f:3b:f4:0a:45:4c:93:4b:ab:d5:2d:03:0b:c6:4c:
66:4a:97:07:21:db:57:58:93:a9:76:59:4a:5e:8c:
42:c6:8c:2d:3e:66:fc:96:b1:15:46:3e:4f:8c:da:
be:82:6e:d0:5e:56:de:b1:3a:bd:19:24:67:a6:2e:
0b:83:f6:95:20:a5:94:68:17:db:2c:42:65:bf:ac:
cf:81:7b:54:f7:83:b7:84:48:b7:73:be:de:8a:84:
22:2b:64:95:62:bf:70:15:2a:8b:81:0e:1e:96:7e:
e7:20:9d:cb:0d:52:98:92:fe:3a:18:1a:39:2e:53:
8a:48:f6:05:6b:8c:d6:6b:75:b4:5b:c6:c5:bc:d1:
e7:20:3b:87:f8:e6:4f:b7:c4:d8:07:92:98:24:1f:
6f:48:76:91:0c:74:33:4a:ee:78:c9:5a:ff:0a:99:
d7:2f:f2:5a:6c:3e:71:a4:c0:5f:81:d6:b4:58:73:
6d:14:56:49:4b:67:9b:79:88:22:28:9a:fe:bf:31:
f5:d2:14:29:49:4d:00:a2:75:4b:8f:dd:35:98:a1:
55:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E0:DE:B0:6A:14:31:F9:96:32:57:85:71:18:A0:BA:9F:17:29:86
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.234.0/23
Signature Algorithm: sha256WithRSAEncryption
38:36:21:09:31:86:79:06:6a:1b:6b:58:15:ed:36:2a:ca:16:
16:14:2b:2b:c5:9b:3b:aa:c5:d7:b7:79:f6:2b:1c:9e:bd:97:
bb:ee:2c:46:b8:3e:d1:2b:b3:47:2e:20:5a:10:1f:87:b3:30:
5d:94:a5:ed:d6:e7:5f:90:22:9d:75:c0:32:f6:d5:c0:fe:66:
98:60:7e:34:44:b9:7a:c0:6f:77:17:0e:80:08:1d:f2:f7:59:
bd:2d:04:e8:3b:88:86:53:7b:5f:6a:65:04:a0:a9:42:ff:de:
ac:d5:ef:76:7c:f3:4d:19:03:de:ca:3a:6a:e2:1d:88:2f:2f:
4a:8a:02:6b:71:3d:44:7f:e4:d3:af:ac:e4:7e:eb:21:39:b4:
96:4a:05:3c:cb:6f:ee:3d:f4:ce:93:f9:3d:98:9a:17:b9:c1:
74:fe:3c:14:56:31:d2:41:61:f7:f9:e1:37:f5:60:1a:1a:3f:
c1:19:ef:92:e6:cc:46:15:c1:6b:d3:b6:a9:79:29:40:c0:1f:
bc:eb:63:2b:72:de:87:12:d6:72:40:91:08:4a:11:ff:76:28:
d6:83:dc:4b:3d:dc:d6:bb:f3:39:a6:65:e9:7a:2b:ff:4c:ec:
f5:2b:38:38:52:21:a2:c6:f5:00:51:33:a1:ed:32:f6:a7:48:
87:b9:71:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:12:44 2025 by rpki-client