Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/07a0a2d7-7de7-4807-863f-fcbe7f8106e1.roa
File: 07a0a2d7-7de7-4807-863f-fcbe7f8106e1.roa (raw, json)
Hash identifier: YOpypIY2HHwyvP0Purag1Bnag8crKnFpquEY7xbGz+w=
Subject key identifier: FA:85:5E:97:66:CE:B5:8E:55:A2:1D:D9:B3:E2:97:94:C5:77:B6:2A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6832D9DD1856D9B52BD25846630E82C56047D780
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/07a0a2d7-7de7-4807-863f-fcbe7f8106e1.roa
Signing time: Fri 26 Sep 2025 20:39:43 +0000
ROA not before: Fri 26 Sep 2025 20:39:43 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.35.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:32:d9:dd:18:56:d9:b5:2b:d2:58:46:63:0e:82:c5:60:47:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 26 20:39:43 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=1821eead3cd7353adbf14305283cfa644b21e13cbeb5748d37ea5181fb0f76a6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ac:14:4a:46:8f:bd:0f:33:21:b3:13:85:3c:
12:05:40:45:da:1f:57:58:44:bf:c9:44:a2:7a:e4:
0d:92:94:6d:13:e7:81:9b:78:d4:a1:da:d0:80:09:
a0:24:7e:8b:47:41:02:12:df:c2:fc:ac:fd:34:ae:
cc:ee:5a:17:54:4e:9e:df:66:a8:0d:31:41:5a:4e:
a2:d8:25:98:61:e7:64:4c:62:02:36:5a:dc:98:33:
bd:ca:80:a6:99:2f:44:de:64:2c:d8:6d:82:8a:f6:
c3:30:b2:54:a2:9b:33:04:e7:0c:32:c4:73:b1:9b:
d4:0b:b7:7f:e3:29:59:15:02:11:d0:b6:2f:67:70:
fb:42:5d:96:bc:fb:73:ea:86:b6:17:9b:35:2f:75:
2f:8c:c2:74:51:39:8b:66:85:1c:78:85:b4:40:8b:
af:97:d6:a5:a8:3a:68:23:ad:b1:05:dd:0f:8b:9c:
8b:5e:90:f3:3b:ef:e7:35:9b:49:91:cf:31:56:89:
f6:09:a7:61:40:de:3b:c0:a2:cd:3d:3e:f4:9f:e0:
96:81:84:45:b1:47:79:ac:95:e9:48:6d:cf:4e:fb:
7b:7f:b7:79:aa:3b:14:b7:e0:c8:2b:3f:0c:a2:a6:
54:33:a5:7a:ef:7a:a2:7e:db:98:e3:eb:9f:c1:65:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:85:5E:97:66:CE:B5:8E:55:A2:1D:D9:B3:E2:97:94:C5:77:B6:2A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/07a0a2d7-7de7-4807-863f-fcbe7f8106e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.35.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:f8:81:0f:19:de:2e:52:9a:a9:74:3e:e6:27:25:23:5b:c1:
d5:9e:7c:29:9a:3d:3f:7b:f4:08:f4:a5:af:28:3c:cc:8e:ff:
e1:b7:4d:90:c2:8e:06:15:f4:5b:7a:86:f5:08:2c:98:ee:ad:
c1:35:fe:a9:a1:c2:b5:4b:a0:42:fd:7a:b1:71:74:44:14:94:
cf:61:19:b8:01:70:f6:84:a7:d9:d4:0f:5c:b4:bc:38:af:55:
77:54:f8:4a:b8:ae:04:6c:e7:39:54:9d:8a:a8:67:68:4d:1d:
0c:9a:f0:6f:86:8c:82:b9:b3:77:af:bd:99:bf:13:a3:83:07:
1e:8b:dd:70:bd:38:32:23:3a:ee:2d:fe:32:4d:b2:1a:db:f1:
a1:8d:c6:09:29:ae:91:2e:12:1f:74:03:95:a3:0a:9c:05:3c:
a3:03:34:50:39:6d:47:8b:bc:08:d6:96:5b:16:ef:53:00:cb:
76:aa:df:30:7f:4a:2f:a4:d9:3c:66:db:b3:ba:7e:c9:46:83:
37:53:6c:f6:c5:eb:ef:c4:f4:60:4e:98:d4:66:90:8e:1c:d7:
1e:81:9d:52:9f:08:ce:58:38:c7:41:04:43:dc:18:2d:b1:70:
a7:d5:e5:22:24:fc:e2:9f:7e:bd:34:ee:5a:7c:95:f3:de:e0:
41:ca:ea:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:19:43 2025 by rpki-client