Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa
File: 1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa (raw, json)
Hash identifier: eTjGkCw3Yt0E/aM1X73oSF1vSrJ+5rR3PCAOKgqVIn8=
Subject key identifier: F1:94:17:60:A2:BE:88:C0:AE:05:71:03:90:AB:4E:6B:32:EF:36:43
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4B789A46DFEF1736479EB0C1D05F4AFB038C2191
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa
Signing time: Mon 31 Mar 2025 21:20:19 +0000
ROA not before: Mon 31 Mar 2025 21:20:19 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 194.133.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:78:9a:46:df:ef:17:36:47:9e:b0:c1:d0:5f:4a:fb:03:8c:21:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:20:19 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:db:35:a3:2e:c0:d7:a9:9e:80:a6:b6:77:
d0:87:33:ff:d9:5c:0e:ad:73:ac:44:3c:e6:d9:69:
67:9f:38:4b:2d:00:ca:d9:41:a1:50:a6:e1:84:63:
d5:e1:ec:1a:09:bc:b1:b9:d8:5a:63:bc:be:dc:8c:
f0:6d:aa:79:74:e3:af:bf:be:d5:51:78:30:ca:f6:
fe:c3:ff:9d:a9:09:b2:a6:47:41:38:16:8d:14:ec:
47:e7:1f:80:ae:65:2e:8d:76:26:05:41:27:26:15:
44:32:71:08:b0:51:71:c5:db:4c:0e:23:65:f7:87:
81:56:03:53:d5:24:87:55:d6:63:d9:1a:5c:7c:e3:
e3:4b:f4:64:e9:ce:58:8b:3b:5b:af:85:d8:58:aa:
e3:bb:63:00:e3:f2:90:fa:2c:d0:66:0c:56:62:22:
44:6b:3f:cc:8e:72:07:76:cf:c0:87:c1:d3:e4:e7:
47:3d:9d:73:8a:d5:4a:62:17:dc:28:a3:44:cf:d9:
3b:26:2d:6a:b3:17:e5:ae:90:28:77:46:3c:48:21:
e7:fc:e5:19:b4:0c:3a:95:9e:b1:20:16:41:be:a6:
de:68:d4:62:be:a5:f2:eb:b5:31:7d:58:49:bc:46:
21:f3:f0:fd:1e:bc:ff:fe:c6:68:c4:8d:f9:6e:6f:
7e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:94:17:60:A2:BE:88:C0:AE:05:71:03:90:AB:4E:6B:32:EF:36:43
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.133.0.0/16
Signature Algorithm: sha256WithRSAEncryption
44:52:c4:01:c1:37:d0:3d:3d:95:c1:09:ce:af:54:81:6a:7b:
ce:f0:1b:68:77:d8:d1:ee:51:b1:e8:89:82:fc:a6:e2:5d:1a:
25:22:e2:8f:f2:7b:bf:b6:84:5f:e3:c4:db:1a:5f:e7:ac:32:
4c:f8:2d:f3:32:fb:eb:f2:f5:99:c7:87:70:df:21:c1:1d:4d:
4d:5c:f7:ea:a3:31:fc:2c:fc:32:7d:e6:f5:91:54:0d:9a:45:
23:9c:50:d1:c8:b7:cb:97:47:ed:02:e1:22:3a:cd:80:e4:5a:
85:6b:18:b0:00:c6:65:9b:93:6f:ea:32:09:1d:38:cb:ea:8a:
37:5e:67:11:55:68:d1:17:6e:dd:4e:2a:1d:2f:85:d2:5f:45:
14:42:ca:dc:ad:15:7c:2d:4f:3c:3f:74:64:fe:6b:54:3c:49:
6d:8a:f4:99:04:85:ef:7b:97:2a:7f:b0:a8:07:c3:71:17:5c:
f3:84:cb:6e:d0:9c:1f:14:7d:5d:c8:da:b6:cf:29:59:53:68:
f1:3e:fa:bb:79:a5:11:53:22:44:14:f2:cb:06:c0:4d:68:92:
3c:fc:a8:ed:70:d6:0c:ed:aa:8c:03:61:e1:dd:21:dc:46:43:
54:42:08:46:9f:89:fd:85:d7:52:cb:b0:02:ae:fd:ed:37:28:
f8:74:2b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:08:53 2025 by rpki-client