Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa
File: fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa (raw, json)
Hash identifier: SfRgCQqqdviwhC6O35kWLatjajLwexJL3xECJ8IQRSI=
Subject key identifier: 24:DC:A5:55:85:C1:19:51:D3:31:E4:9B:5A:35:F8:8E:16:A0:AD:9D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5DE852BF57EB770F2BCE915C3D818DC98EC5521C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa
Signing time: Fri 11 Jul 2025 21:00:50 +0000
ROA not before: Fri 11 Jul 2025 21:00:50 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 57.95.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:e8:52:bf:57:eb:77:0f:2b:ce:91:5c:3d:81:8d:c9:8e:c5:52:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 11 21:00:50 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=ebb1d2af3ad2666e9846ae5a32de3515c242cff10e82eca1b1e0fdecf3593a25, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:24:2f:f1:57:e3:25:64:88:2c:68:27:ef:
89:9f:d8:27:28:ea:17:4f:40:8f:f4:c5:f5:95:da:
ec:f0:1f:77:77:73:9f:30:fb:3e:b8:20:65:83:2c:
17:9c:48:aa:41:6e:eb:4a:85:14:b2:d8:1a:3e:eb:
aa:e6:2a:31:be:a4:93:bd:6f:46:69:74:9a:96:c4:
b6:39:7d:1b:4f:8e:2d:d1:4b:a1:17:cd:de:5b:06:
d6:a7:62:e8:9e:5c:13:44:c0:0a:c6:5b:4f:e7:b2:
f7:07:d3:cd:84:06:59:cd:e9:b8:4a:4c:50:f1:bf:
08:23:75:74:30:a3:b6:9b:f9:54:60:38:21:c6:0e:
c0:2c:e9:24:67:1d:7a:fd:c8:8f:44:36:c6:c0:f6:
25:3a:96:0d:29:01:41:74:c6:b5:99:6d:ee:69:05:
73:db:77:91:13:85:83:b4:cc:1d:85:b1:28:0a:16:
6b:df:1e:c1:e1:b4:1c:14:95:99:ac:04:cf:3f:d9:
f8:e3:06:07:68:b3:7f:cb:40:27:25:1a:17:1b:b8:
44:26:82:7d:61:6c:c8:67:f6:04:d8:41:97:50:7f:
e8:73:fd:04:0d:a8:dd:c8:97:3b:f4:95:ce:42:d8:
43:29:7c:98:d8:b1:cb:8a:db:71:dc:e1:46:b8:27:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DC:A5:55:85:C1:19:51:D3:31:E4:9B:5A:35:F8:8E:16:A0:AD:9D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.95.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c4:b8:77:45:da:70:34:ad:b7:5b:75:46:55:b7:d6:1f:aa:3f:
01:97:eb:e6:22:d8:65:57:aa:09:dd:6b:6d:66:31:c4:e5:45:
38:00:b4:28:6d:a0:4d:aa:d1:61:d3:e9:87:e0:62:9b:c8:e3:
78:e8:7c:46:78:5d:82:b5:42:e7:5a:a2:f4:f6:80:06:a6:67:
30:65:8d:5e:07:78:f2:04:60:20:a0:d2:b7:ed:9c:27:b0:b5:
95:62:19:dd:80:5e:0a:38:48:9d:b5:41:5c:1f:b4:c8:cb:30:
be:69:1a:2a:2e:2f:7a:d6:29:63:03:a6:e1:1f:7e:e3:8c:e3:
4d:d8:1e:3b:e3:9a:fb:9a:bd:88:5c:1c:35:17:5d:c5:d6:d6:
01:89:98:16:50:8b:a2:55:d6:20:05:47:99:f4:bc:49:45:67:
da:a9:b8:13:20:c8:f0:ad:69:45:9f:25:e3:5c:2a:03:15:2d:
8f:5d:f4:ff:bf:30:a5:4d:06:71:57:32:ff:3a:b5:7a:bd:8b:
9b:ea:3f:6f:24:53:17:80:a0:8f:cf:de:a0:77:72:89:44:7c:
7a:d9:20:cc:92:fe:10:83:e5:94:7a:4f:91:52:50:ac:ba:04:
82:44:63:dc:a0:8d:78:d3:b1:97:ae:32:67:bc:d1:44:af:67:
ff:f4:70:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:36:05 2025 by rpki-client