Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5480e32c-3a23-4243-82e3-c7eea059d814.roa
File: 5480e32c-3a23-4243-82e3-c7eea059d814.roa (raw, json)
Hash identifier: 1Gi0/bdHWikT0S6GyChdl6sOxrN6uMKWTJjLd4yCjOQ=
Subject key identifier: 54:83:22:13:B8:22:61:C2:10:67:E6:7D:78:25:21:99:E9:45:8C:60
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3908A25F5382E1B012D3EF5FE9B937208F99C776
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5480e32c-3a23-4243-82e3-c7eea059d814.roa
Signing time: Tue 01 Apr 2025 15:11:18 +0000
ROA not before: Tue 01 Apr 2025 15:11:18 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.92.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:08:a2:5f:53:82:e1:b0:12:d3:ef:5f:e9:b9:37:20:8f:99:c7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 15:11:18 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:32:22:fb:34:fc:95:3f:32:7e:9d:ac:fa:
37:84:55:e9:cd:2a:0f:24:24:55:f4:55:a9:e4:38:
6d:56:1a:db:46:c6:f9:b6:7e:ff:30:14:d5:83:31:
72:49:a3:4e:2a:4b:f9:7c:e9:9f:6c:0b:9a:ab:1b:
ec:c8:33:ce:21:ef:1d:2c:9a:85:57:03:da:9c:ce:
5c:5b:0c:62:41:9e:e2:03:3a:d1:16:11:03:dc:33:
ca:75:ff:61:e7:76:cb:be:49:f3:6a:2b:ac:20:be:
19:44:f3:81:29:66:c0:38:36:36:79:28:8f:21:42:
e7:8b:ad:05:67:f1:b8:a1:fa:8d:84:06:b7:3a:c6:
34:8d:08:c6:20:79:85:c3:8b:4f:6b:bb:4c:79:47:
68:e8:6c:07:80:1e:bf:13:c7:e5:f5:d7:18:5d:c3:
ab:5b:95:8e:7b:15:b4:48:9b:1f:65:08:02:25:ff:
c7:54:c3:ed:fd:11:dc:d2:0e:09:93:05:f2:a1:33:
c0:c0:31:d7:39:73:aa:46:00:18:be:4a:00:9e:87:
00:f5:09:a3:13:24:13:96:ce:e9:e2:ab:d2:e8:1b:
3c:94:2b:6f:bd:9a:c5:dc:a0:b4:1d:bf:5e:9c:c5:
b9:05:e8:b7:fc:ab:64:22:fa:55:dc:67:31:9d:8c:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:83:22:13:B8:22:61:C2:10:67:E6:7D:78:25:21:99:E9:45:8C:60
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5480e32c-3a23-4243-82e3-c7eea059d814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.92.0.0/16
Signature Algorithm: sha256WithRSAEncryption
44:9b:18:c4:37:c0:3f:5d:56:2d:e1:9c:85:3d:bb:d4:7b:42:
e3:ed:ff:ee:03:85:79:c4:f1:53:b5:2c:26:5e:13:1d:25:66:
93:49:ca:ab:4f:f3:eb:e1:c9:d4:19:67:96:67:be:55:ed:cd:
8f:fe:4c:e6:ce:26:a9:e2:f5:fa:ba:f7:1a:ac:e8:03:7d:9a:
ac:ca:5d:75:2a:45:8d:9c:e1:dc:9e:54:a5:49:fd:26:3c:94:
17:e9:5d:10:91:c8:a4:72:6d:bc:27:47:e9:52:5b:e3:f4:ea:
1a:e9:3e:2c:87:ae:ed:62:6f:eb:20:6a:84:a0:fa:bb:3d:45:
97:95:b0:13:17:a8:f4:c7:70:34:ae:3d:8c:d5:01:35:b1:a1:
68:cd:61:e4:6b:60:da:5e:85:8a:e6:48:cd:55:1a:56:23:09:
f6:64:e0:8b:9b:a3:2a:13:95:26:8a:36:93:8d:33:eb:cb:8c:
1c:ea:ee:18:dd:99:ff:a8:f0:23:b3:dd:12:63:ed:65:92:b9:
ed:d1:c2:06:0f:84:1c:bb:87:bb:a4:df:d2:f1:be:e8:0c:74:
a1:1d:e7:41:db:1c:81:11:6d:72:7c:5a:de:f0:95:6c:0e:7c:
00:a8:25:65:a9:8c:4e:43:19:3d:27:01:97:77:f6:01:89:34:
f3:e4:eb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:08:47 2025 by rpki-client