Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e935d64-1d66-4e52-ada3-30f1ed26d564.roa
File: 1e935d64-1d66-4e52-ada3-30f1ed26d564.roa (raw, json)
Hash identifier: dfyj7MZwXjGdVut4jAfiLHmvueSvhcZTO+f2OUkrv0o=
Subject key identifier: E9:DE:CD:99:CF:4E:B4:C1:89:EF:4E:36:C2:46:AB:DE:3B:38:7E:C4
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1E33B55AE42B10A752F98FB0447792EA531D71F9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e935d64-1d66-4e52-ada3-30f1ed26d564.roa
Signing time: Mon 31 Mar 2025 21:20:05 +0000
ROA not before: Mon 31 Mar 2025 21:20:05 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 145.17.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:33:b5:5a:e4:2b:10:a7:52:f9:8f:b0:44:77:92:ea:53:1d:71:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:20:05 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3a:3f:13:ca:a3:92:47:82:ce:f4:bb:eb:33:
bc:f8:6d:fa:46:f6:50:55:78:aa:c3:1a:89:13:d9:
dd:95:d4:80:ca:98:05:95:5c:8b:8d:c8:60:29:12:
3b:99:27:f2:3f:90:ef:8a:ee:a5:7c:e5:d2:cf:3d:
99:58:28:1c:73:e3:02:13:81:b1:2f:77:0e:b7:4d:
32:12:ac:b3:15:3f:5c:ae:c9:13:17:4f:89:72:d9:
6c:b2:74:60:28:ac:ae:3e:2c:ba:56:37:29:12:ce:
f6:56:a2:cb:53:67:de:60:c4:66:08:01:ee:90:9d:
8c:d5:a0:7e:54:43:1f:8d:d5:ac:da:7c:f5:0b:57:
8d:6e:d4:0e:56:c5:7b:f1:6a:f3:70:e6:1f:92:1c:
fe:b9:21:1f:da:05:47:c5:b2:04:4e:fb:b4:b8:6f:
0b:69:99:0a:59:09:c0:58:80:8f:19:fb:c4:a7:98:
87:f0:1c:94:44:93:f2:80:b1:63:96:28:58:64:9c:
7b:c8:3c:ca:09:3d:4a:e3:86:b6:75:06:22:e6:26:
f2:5b:75:64:fc:f8:6c:51:e7:c3:62:e6:0d:7a:ea:
9a:74:cf:0a:fe:79:91:3c:8a:b2:1a:44:09:36:8a:
9d:f3:e6:43:ef:63:25:84:5d:5a:33:54:49:24:8d:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DE:CD:99:CF:4E:B4:C1:89:EF:4E:36:C2:46:AB:DE:3B:38:7E:C4
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e935d64-1d66-4e52-ada3-30f1ed26d564.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.17.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:30:63:9e:11:cc:24:90:42:00:e0:10:7c:55:a6:3f:97:a4:
02:87:8e:58:a1:9b:cc:99:c1:2f:23:e3:78:5e:13:79:d2:fa:
ee:e0:7d:97:41:d3:5e:94:18:72:b2:c8:9f:2f:83:73:4f:54:
10:58:61:06:35:27:6c:e4:e7:fd:34:b1:fc:45:d5:6a:fb:e0:
03:0e:c8:bb:c1:25:ed:02:8a:e3:87:82:73:0c:3b:d4:cc:ee:
5d:29:57:ae:50:0a:a7:a7:68:71:d4:b5:4e:05:f5:9c:b0:18:
8a:17:15:6c:32:cf:43:3d:29:97:13:7a:97:dd:a8:92:c1:26:
07:24:a5:ce:f4:03:4f:62:c0:38:97:a0:e0:95:5c:45:99:cc:
cb:a0:0c:23:26:5e:78:39:fd:4b:3d:53:95:10:3b:48:57:e7:
89:fc:d4:aa:e7:9c:80:13:26:c8:0a:a3:e8:c3:08:cb:2c:37:
6e:a3:3e:2c:7a:c0:16:4c:e0:fc:2f:26:f6:ce:ce:84:ea:2b:
c1:41:4a:69:6a:ea:e6:5c:00:18:e6:1a:e9:a3:91:5c:eb:cb:
89:1c:2d:6d:73:16:a2:ab:b2:de:4c:61:48:8d:f7:a9:d8:62:
44:dc:90:9d:ab:1c:3e:23:94:7a:f5:ae:ce:dd:d8:4a:fc:79:
36:f3:44:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:04 2025 by rpki-client