Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2d24b638-b951-4333-ac88-4886c7af230f.roa
File: 2d24b638-b951-4333-ac88-4886c7af230f.roa (raw, json)
Hash identifier: KNjPSe3MSxLQRFrYTNEI888d1YE1autsbjTayfAen9A=
Subject key identifier: 10:C7:1A:3C:AF:10:77:F4:33:62:0E:03:4B:7F:05:89:50:01:C1:4F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7719EB3482DE9CBD86DA83053F3CC7F347765191
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2d24b638-b951-4333-ac88-4886c7af230f.roa
Signing time: Mon 31 Mar 2025 21:40:12 +0000
ROA not before: Mon 31 Mar 2025 21:40:12 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.82.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:19:eb:34:82:de:9c:bd:86:da:83:05:3f:3c:c7:f3:47:76:51:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:40:12 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:b6:fb:83:88:44:27:07:4f:15:0e:b9:ce:
7e:d8:9f:3a:f1:bb:81:a4:07:14:5b:27:0a:6a:8a:
7c:56:91:85:61:b1:e1:a3:e8:9e:92:e0:47:90:67:
93:da:7d:53:d2:e9:e5:4a:f0:83:03:da:eb:60:81:
b0:47:f5:e7:44:2b:30:76:4b:12:c4:54:df:03:ca:
49:d2:fe:1b:bb:90:ad:63:39:7f:a3:15:c0:5d:19:
cb:44:91:66:fa:7a:27:f8:c4:33:37:44:21:36:96:
ba:25:f8:fb:01:a2:cf:90:c9:a5:8c:40:c4:61:d2:
11:c7:b2:4d:ac:57:54:49:50:35:91:b0:36:1e:8b:
82:8c:df:d8:88:90:84:df:31:e5:89:6e:7b:a0:dc:
45:93:54:70:d7:d8:60:f5:33:10:52:15:37:ee:8a:
52:14:4d:68:61:45:89:37:62:94:d8:84:40:a6:33:
d2:b9:6e:e5:34:17:4f:b1:86:d0:27:11:b8:78:b1:
23:92:19:07:5e:57:93:2a:78:91:29:cc:af:c9:99:
38:2a:0b:c0:20:f7:8e:fc:e1:db:77:34:eb:78:18:
d9:71:58:85:58:b1:2b:9d:e2:d3:21:e2:ef:22:5a:
a2:94:4a:23:42:fc:2c:ab:4c:98:b4:23:09:ff:86:
41:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C7:1A:3C:AF:10:77:F4:33:62:0E:03:4B:7F:05:89:50:01:C1:4F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2d24b638-b951-4333-ac88-4886c7af230f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.82.0.0/16
Signature Algorithm: sha256WithRSAEncryption
54:16:58:22:1b:9e:2c:5c:54:36:b5:9d:f2:fc:27:a2:0a:8f:
d6:a1:05:ae:86:68:27:20:62:f7:e6:b4:19:b2:ec:86:63:22:
3d:43:4c:53:a1:59:27:39:c4:32:8f:76:44:e5:3c:31:cc:c4:
a2:bf:ef:62:d7:25:77:5e:44:94:1b:f4:7c:45:c6:b6:66:53:
ed:d0:28:57:b3:ae:dd:78:5a:50:c1:3c:13:90:45:1f:7c:ba:
6b:5d:a5:ca:b9:24:67:19:da:ae:6d:9a:a4:c3:0d:11:69:07:
36:29:20:ff:a4:f6:4f:c7:7b:ff:ad:46:54:78:dd:64:8c:54:
9f:7d:38:ec:a2:18:44:01:1b:f4:af:6b:f2:0b:3d:68:88:8c:
7c:31:c0:42:31:a9:ce:12:e9:52:5c:c6:62:6d:e6:e4:7f:fa:
25:39:d5:8d:ee:d3:15:ab:89:ce:da:92:d1:4d:26:ff:e0:4b:
d4:07:76:9b:d3:cc:5a:eb:77:c5:e6:6f:51:86:e6:91:71:00:
02:93:5e:90:b3:a8:fa:87:89:f9:df:9a:09:a2:cb:b3:a1:8c:
69:5a:94:0c:0e:d1:a3:9d:4f:be:c8:73:ad:07:34:8e:9f:19:
a7:8c:bd:12:17:07:c5:4f:5f:b8:a1:fc:70:3a:a9:51:08:1d:
20:74:62:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:34 2025 by rpki-client