Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa
File: fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa (raw, json)
Hash identifier: xb4DgqYJ1Xq4SOuHCBWGU4KcooQH8vWnz+hLMKtdL7E=
Subject key identifier: 40:B5:F4:99:8A:32:01:BB:30:55:5F:8B:BF:52:6C:50:9E:A3:10:7E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6DE3A457A682B005B0F7BC81859EAF8433A8AC14
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa
Signing time: Fri 25 Apr 2025 20:40:46 +0000
ROA not before: Fri 25 Apr 2025 20:40:46 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 57.95.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e3:a4:57:a6:82:b0:05:b0:f7:bc:81:85:9e:af:84:33:a8:ac:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 25 20:40:46 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=17a0dc1f191aa90413811793b67f0e3250bb1a00f865a83d01a37b4cb5532635, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6d:60:5e:7f:d4:88:41:72:e1:2c:c7:3d:31:
1a:c0:db:02:ea:25:cb:ae:c6:35:44:b2:2e:18:bd:
ed:f3:cf:ac:f1:76:18:b0:7e:c2:0e:ff:ce:17:03:
ab:e7:d0:25:25:c3:90:ee:83:7c:00:25:45:f3:e2:
79:cd:73:18:21:64:06:b7:d9:17:d7:0a:db:1c:6b:
1c:12:4e:78:35:83:ff:a8:aa:b4:35:05:a3:8c:80:
71:2f:1c:a5:63:76:5b:98:c6:02:f7:55:4f:37:a6:
bb:9b:90:50:b0:b0:7f:ce:17:26:1e:6b:ab:7f:9a:
78:db:32:46:d3:05:ad:2d:29:4e:22:55:bf:5d:2b:
ba:42:80:32:ee:a1:da:6e:5c:9f:f0:da:bd:1b:d7:
01:3b:51:6d:28:76:6d:e7:0c:03:93:d1:c9:d0:6f:
6f:53:d7:11:42:71:84:4e:4a:65:30:b3:c3:e9:f1:
ea:8e:d0:09:35:90:3c:dd:d8:a9:6f:d1:c7:1f:02:
9b:af:9c:52:09:7f:8e:c9:ee:2c:a6:a5:4a:6e:cb:
c6:33:15:b1:e7:a5:09:39:ff:c6:4e:03:ce:00:a5:
08:ef:34:7a:e5:1d:40:4b:78:47:bb:21:4e:5c:e2:
f4:b3:f8:2b:4c:a0:63:a6:2f:da:45:1e:71:25:1e:
fa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B5:F4:99:8A:32:01:BB:30:55:5F:8B:BF:52:6C:50:9E:A3:10:7E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.95.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:80:4f:df:30:c0:7d:cf:e7:43:fb:d2:84:0c:0b:08:a5:54:
fd:d9:33:0e:93:fb:88:33:3c:38:49:80:69:95:cd:0a:7d:e9:
25:ee:13:24:0e:69:6b:09:01:5a:18:36:fb:90:f9:70:fc:04:
74:64:e8:dd:7e:80:12:64:aa:27:0d:3c:f3:67:78:dc:8a:e7:
ac:b1:f6:77:26:ba:2c:99:74:4c:5d:af:a3:85:a3:81:d4:30:
a6:78:be:ad:da:33:ab:66:ef:7b:d8:fb:ef:43:0c:49:99:a9:
ba:ad:31:40:ba:75:e9:64:fb:1e:a2:a9:a5:ba:f7:b5:b4:43:
54:1a:e9:ba:09:99:65:ef:06:d7:33:78:62:ae:e5:d7:dc:ce:
ac:4f:c5:d8:00:62:6e:c6:1b:be:7b:96:b9:6a:5e:f8:01:14:
7b:1c:8e:a2:51:6f:c5:5d:8f:54:7c:23:54:ed:6f:85:69:9d:
71:7c:ae:3d:79:31:40:7c:5d:9b:5b:91:c2:11:d0:64:2b:61:
8c:e2:c9:19:d1:aa:2c:30:d3:67:b9:94:6e:da:da:7f:49:38:
15:df:9e:95:db:d0:b4:7e:4b:91:2f:38:79:b7:14:0a:f6:fa:
04:e1:ac:36:a9:02:7c:f5:ee:6d:62:87:20:9f:11:a5:59:a9:
92:6a:f6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:47:07 2025 by rpki-client