Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2b51d415-1366-43ea-8ce9-f13b63a2c827.roa
File: 2b51d415-1366-43ea-8ce9-f13b63a2c827.roa (raw, json)
Hash identifier: UPiOxBZFzk6IK/jd3TgeXnL3VI3jh9O1NveGMwbpRTk=
Subject key identifier: 36:66:BD:10:A7:0C:E4:3E:3B:9F:BA:F1:E0:F6:10:C4:12:02:3E:E4
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 383FFD1CBE5AFA3220AEEE907DA58DF85F71C4BA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2b51d415-1366-43ea-8ce9-f13b63a2c827.roa
Signing time: Tue 01 Apr 2025 15:11:09 +0000
ROA not before: Tue 01 Apr 2025 15:11:09 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.45.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:3f:fd:1c:be:5a:fa:32:20:ae:ee:90:7d:a5:8d:f8:5f:71:c4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 15:11:09 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:70:8e:a5:51:ff:b0:56:5e:f9:8c:1a:99:d8:
82:dd:d6:b5:d2:6c:43:df:ad:d7:3d:99:49:cc:56:
af:26:05:fd:a8:60:c9:41:80:e7:e4:0a:3c:fc:d9:
5f:fc:11:88:cc:0b:3b:5f:66:bc:ac:90:06:e7:05:
53:0b:d7:be:fd:d6:1d:4f:5a:6c:ac:72:1a:c2:ef:
a5:d8:1c:29:94:e2:a7:dc:d6:55:27:00:4d:3b:54:
f5:40:67:4f:3e:e9:6a:e5:dd:71:9c:5d:d2:7c:51:
63:14:17:d1:28:ba:43:84:85:52:e8:72:97:7a:9d:
77:04:b9:48:02:f7:76:06:8b:db:b0:45:0a:e8:8c:
35:17:eb:8f:98:96:05:78:5c:58:c0:d0:bb:23:ff:
98:b2:19:78:23:b1:5d:cd:f7:3a:66:40:70:38:80:
2b:dc:ef:8d:28:8c:30:3f:55:96:54:1a:55:99:93:
96:bd:2b:a1:ca:8b:11:17:8a:a1:d0:45:b1:6e:e8:
46:22:13:72:f6:7c:8d:ef:0c:f7:94:15:62:1f:d2:
98:40:94:68:97:a0:92:ec:06:8c:dd:86:40:1b:07:
da:26:01:e2:af:3d:62:ef:30:09:04:c6:56:af:6f:
9d:bb:d7:c0:f1:cf:d7:38:f9:6d:60:48:93:a3:33:
16:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:66:BD:10:A7:0C:E4:3E:3B:9F:BA:F1:E0:F6:10:C4:12:02:3E:E4
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2b51d415-1366-43ea-8ce9-f13b63a2c827.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.45.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:cb:c1:cc:5a:5e:a9:e8:9a:43:b7:7e:24:4b:41:9e:c1:df:
f7:be:6e:82:a7:e2:8c:12:2e:a0:24:fb:50:e2:0b:02:93:61:
6d:85:cc:36:14:12:2b:03:c6:d8:06:aa:23:29:68:66:e6:86:
31:24:dd:91:05:d8:1a:a8:63:16:9a:ff:af:ed:c5:02:48:de:
cb:a9:7b:d7:78:95:0b:90:e1:dd:01:15:23:02:1b:e7:14:6a:
48:33:d8:b1:3d:8e:49:13:21:6d:78:23:ee:65:85:37:f2:76:
02:91:0a:d9:43:3e:e0:1b:0b:aa:c6:31:a0:eb:2c:ac:f2:a0:
f1:b9:96:64:e8:19:d0:38:0f:e0:14:97:36:6c:16:78:11:b7:
6d:24:cd:83:23:14:aa:0c:a1:44:2e:da:f3:ee:60:bd:31:20:
80:2f:28:80:8b:57:b2:f9:a2:2e:c3:17:c6:f7:b7:98:ca:1a:
68:d7:a5:e2:46:46:99:07:a2:2a:e5:75:48:d8:87:82:88:a3:
62:5d:85:83:e6:63:2a:ed:ef:62:85:0b:4b:02:6c:a2:30:d1:
b6:10:85:d6:bf:f1:ae:27:7d:c2:2d:29:72:b6:fc:d7:a1:83:
68:7f:23:3a:da:a6:f6:f9:72:e6:c8:97:88:7a:ad:95:99:d0:
a2:25:36:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:39 2025 by rpki-client