Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/186c4a20-4025-4599-90c9-1eeb15cf6730.roa
File: 186c4a20-4025-4599-90c9-1eeb15cf6730.roa (raw, json)
Hash identifier: 4R3Cnyn8SlQX2cKZrPDmVuYNkLIkvvqHxOksnr7fSiw=
Subject key identifier: 5A:FB:10:0F:0E:CD:BB:02:95:56:B3:95:C3:C0:DD:AF:6C:2F:B4:95
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 748F575CFDC5987454032EA956406D4623F36AB1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/186c4a20-4025-4599-90c9-1eeb15cf6730.roa
Signing time: Tue 01 Apr 2025 15:10:28 +0000
ROA not before: Tue 01 Apr 2025 15:10:28 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:8f:57:5c:fd:c5:98:74:54:03:2e:a9:56:40:6d:46:23:f3:6a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 15:10:28 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2e:cf:05:ff:62:fc:4c:d3:1d:4f:a8:4f:82:
c0:da:77:9d:53:12:90:d5:45:f0:8a:a4:54:ba:ab:
53:0f:bb:3d:a4:25:1c:68:ca:44:91:20:33:15:a3:
9a:62:5d:9b:80:4f:87:ff:44:38:14:5f:fd:2a:82:
fd:12:9d:ad:9e:ac:e2:26:5c:78:6c:c6:c9:3d:55:
02:b2:e9:76:0b:0d:ec:f9:1c:04:e6:2d:8f:e0:31:
a5:ca:03:23:6c:10:40:b3:47:18:3c:3b:19:da:b2:
e1:82:24:42:c1:79:1d:46:6e:ea:74:9a:4e:d1:89:
eb:01:37:76:aa:ac:00:5b:8c:46:c1:c8:1b:c2:b1:
ce:7f:6d:e6:b1:bb:65:6e:56:e6:9a:ed:ff:01:ad:
15:bc:02:5f:be:9d:ac:f1:2a:03:1a:16:cc:d3:ba:
7d:5c:41:42:92:5e:9f:58:17:1c:6b:e2:d5:44:ed:
36:b8:c8:93:43:83:1c:46:b5:93:62:d6:12:b0:03:
09:f8:bd:ab:bd:6e:fe:8c:bf:16:ad:8b:56:3e:b7:
35:1e:54:62:93:fd:c8:70:af:0c:0a:1f:81:f5:ee:
82:79:59:b8:6f:02:f4:4b:98:8c:09:d3:4b:0c:8f:
0a:cd:43:6d:c1:3a:29:38:60:cb:83:c4:c3:c8:25:
f6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FB:10:0F:0E:CD:BB:02:95:56:B3:95:C3:C0:DD:AF:6C:2F:B4:95
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/186c4a20-4025-4599-90c9-1eeb15cf6730.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.205.0/24
Signature Algorithm: sha256WithRSAEncryption
89:52:93:12:7e:34:fd:3e:74:c2:2b:25:3d:c2:2b:8b:4d:b5:
06:67:e6:f2:10:09:30:86:d8:f6:7d:e0:4f:a8:4e:dd:8b:d5:
95:8d:b4:11:5b:b9:2f:7c:a1:94:1f:f8:ac:99:57:03:22:e5:
3b:bd:23:79:5c:99:7b:e6:0d:27:a7:23:11:36:44:92:b9:ea:
44:8c:46:56:2c:34:99:b7:37:d6:7a:39:f7:18:69:96:1b:df:
d0:fb:19:bc:6e:29:2c:03:83:f5:04:bb:94:0c:50:ae:85:c6:
49:6d:f3:16:32:34:7a:c9:41:71:a2:78:fa:48:fe:a8:1b:f0:
7b:91:e7:ea:fe:fa:6e:02:1d:cd:f3:ac:59:8c:b0:27:48:64:
23:e9:18:66:d6:a9:54:cd:ed:3a:a9:2b:1f:3d:7f:01:ef:3a:
67:8f:9d:7a:1a:4d:cd:60:5a:27:4f:0f:5d:4c:88:d7:f1:05:
f5:7a:ea:af:c3:fd:f6:06:7d:24:1b:1a:40:7e:dd:2c:52:ab:
43:55:a2:62:82:b4:6a:ae:0b:8e:97:f5:e8:b9:b0:f4:10:8e:
b7:5b:19:01:a8:02:a7:0a:f3:a5:3d:8a:50:1c:e6:1f:ef:e1:
60:09:d3:e6:29:04:b3:99:8e:1b:76:0c:d1:de:33:b8:1c:78:
08:9b:79:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:20 2025 by rpki-client