Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0bfa25dd-319f-4f2d-b786-8ab19d58e811.roa
File: 0bfa25dd-319f-4f2d-b786-8ab19d58e811.roa (raw, json)
Hash identifier: zAPe+p6NJt99oVanPkqOjozAOqF4dgi0PwIjY6jYpy4=
Subject key identifier: 6F:45:17:E1:4D:87:83:9C:F6:E7:14:34:D4:16:9F:F8:F0:F7:55:C8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1B0F2A2C0C6CB7C6E64D0245B5875B3B52C05A1A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0bfa25dd-319f-4f2d-b786-8ab19d58e811.roa
Signing time: Mon 31 Mar 2025 21:30:18 +0000
ROA not before: Mon 31 Mar 2025 21:30:18 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.100.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:0f:2a:2c:0c:6c:b7:c6:e6:4d:02:45:b5:87:5b:3b:52:c0:5a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:30:18 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:db:fb:73:59:e8:ff:06:7f:4e:2a:05:38:
38:d8:ad:2c:79:2e:cb:d3:d5:f1:cf:24:1a:c1:d3:
4f:a0:21:45:c8:49:02:32:db:8a:e8:11:c5:10:45:
c2:d0:2d:20:46:33:7d:5b:76:e7:8c:ee:c5:5c:3d:
03:6f:00:6d:a8:d6:18:c3:cd:69:e5:c7:ce:b3:4a:
e3:98:89:ed:e5:24:a3:4a:17:72:50:23:fe:07:eb:
df:f4:99:b8:d3:90:e6:1f:09:f3:cf:a1:cd:74:38:
3b:14:c0:85:6f:be:7f:85:a9:87:84:bf:c6:18:0b:
92:ed:e9:ff:a7:af:57:4d:3f:ea:c6:2f:90:34:07:
52:51:3c:62:81:76:e3:de:2d:14:0a:d8:ba:42:80:
5c:08:06:bf:7e:78:67:72:58:9a:85:cd:2b:a0:92:
0e:20:03:c7:bd:ac:66:41:16:0a:80:a3:ac:88:21:
a2:75:b8:e7:44:bb:dd:44:90:e8:e8:ce:a9:96:59:
52:14:3f:a4:5b:69:45:5c:9b:99:d5:25:cf:5c:d1:
20:2b:15:c8:af:d8:7d:c5:73:4c:48:4e:67:7a:48:
bc:6b:95:cc:1d:c9:9c:ed:45:60:b0:67:23:07:a9:
0b:15:cd:53:1d:2c:23:dc:0f:bb:fb:b5:97:b2:67:
f1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:45:17:E1:4D:87:83:9C:F6:E7:14:34:D4:16:9F:F8:F0:F7:55:C8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0bfa25dd-319f-4f2d-b786-8ab19d58e811.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.100.0.0/15
Signature Algorithm: sha256WithRSAEncryption
90:5f:41:f4:09:3d:f8:9f:fb:29:30:9e:d6:ed:2c:26:a3:c1:
78:b3:c9:26:5d:74:5b:b3:2b:a1:1e:b2:f7:81:50:f9:4b:7e:
87:19:2c:55:0c:1a:b3:0c:b6:94:b1:3f:44:4e:09:f8:f8:d2:
eb:b7:d3:5b:57:f9:7a:37:34:97:e0:bb:7f:ed:5f:36:1e:1a:
80:eb:de:51:8e:27:86:8e:5b:e6:66:6e:c6:cb:e9:5a:75:8e:
2d:bd:60:d9:6d:02:45:03:55:22:5b:c9:a2:2a:94:1a:f2:86:
33:c7:ee:e1:1d:15:ab:41:91:bf:1e:dc:af:04:f2:d3:ca:da:
6b:cc:d9:a5:e2:15:dc:5f:bc:2a:92:34:de:9a:15:51:bf:70:
1d:43:a4:1f:26:f2:e3:08:9b:bd:32:b4:91:a7:73:92:a9:9e:
ec:d1:b6:42:1c:02:b9:ae:24:63:a0:e3:f0:d3:3e:e3:b6:97:
cd:85:6a:ea:a6:d4:8c:a3:12:45:a1:d1:49:f4:a9:15:1a:1e:
04:be:27:1a:9f:d2:24:b2:39:0e:c3:39:be:bf:c2:58:9e:27:
64:48:9c:a8:84:bd:58:da:4f:4d:d6:85:49:8c:78:17:a1:5f:
b0:c1:0a:7e:f9:66:96:0d:ca:4e:4b:c7:c1:45:e6:94:33:64:
af:6b:1e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:04 2025 by rpki-client