Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8ee7bd52-fc09-4c49-af31-341b51b405e0.roa
File: 8ee7bd52-fc09-4c49-af31-341b51b405e0.roa (raw, json)
Hash identifier: U/K7ubzDHILLzt7Um1z9wVuyNa/v7pFzIdTtPgxbqvc=
Subject key identifier: 2A:D8:E5:C6:6A:3E:40:E9:9A:4D:4F:41:F6:66:A3:99:B2:7B:61:35
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 169BC98196F2317CFAD3F45E14B6F7C77916A079
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8ee7bd52-fc09-4c49-af31-341b51b405e0.roa
Signing time: Mon 31 Mar 2025 21:20:21 +0000
ROA not before: Mon 31 Mar 2025 21:20:21 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 194.234.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:9b:c9:81:96:f2:31:7c:fa:d3:f4:5e:14:b6:f7:c7:79:16:a0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:20:21 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:bf:56:a2:00:15:75:9e:8c:f0:29:fa:36:
3e:e3:d6:27:92:96:74:e0:9d:72:62:29:b5:4f:32:
e0:0c:26:80:1c:19:da:ac:4f:62:58:6f:17:03:11:
38:95:ec:da:a1:8b:b6:eb:e6:fc:07:14:2a:6e:c6:
5b:96:97:ee:91:e5:54:f1:11:d9:27:b5:df:85:29:
fd:9e:3c:a3:fe:49:7b:c4:b8:c4:ed:ff:cc:75:2c:
1e:9c:fb:64:14:19:38:fa:ea:43:e3:d4:cf:59:e2:
f3:a9:72:e5:19:4a:21:2f:3c:73:52:42:9e:5e:1d:
9e:21:ed:10:7e:cc:5b:d9:56:c7:72:ba:6d:6a:c3:
cf:73:f6:10:24:1a:d4:de:4b:87:3d:5d:3b:cf:aa:
38:99:b2:ca:44:2f:4d:b6:b1:06:21:17:98:6f:f5:
4b:2f:83:da:03:ca:6b:65:02:d9:75:19:d7:f8:a0:
b5:4c:10:83:12:9f:bd:43:42:1d:16:52:1a:37:b1:
88:a6:e8:be:61:45:67:46:33:cf:2b:4a:20:4d:b1:
d4:76:8a:fd:17:ae:d0:03:1c:56:72:8f:2e:8c:85:
78:c3:fe:7c:62:67:5f:35:00:90:b1:8f:ab:6d:20:
38:91:1f:f5:a6:3e:cf:d8:f3:27:43:55:da:74:26:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D8:E5:C6:6A:3E:40:E9:9A:4D:4F:41:F6:66:A3:99:B2:7B:61:35
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8ee7bd52-fc09-4c49-af31-341b51b405e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.234.0.0/15
Signature Algorithm: sha256WithRSAEncryption
3b:c6:4c:84:c1:56:77:e4:7a:2a:dc:d7:ed:30:14:16:1f:23:
f1:9e:b6:8e:0c:42:c9:c7:0c:f0:06:87:d5:a6:a3:f9:a2:1c:
49:4d:62:e4:c0:da:1e:8d:17:b9:14:da:9b:fd:a7:9d:b2:be:
06:80:ae:a5:12:b4:ba:8c:a2:fd:55:09:81:7b:b5:68:ae:26:
11:e4:6d:ff:e5:86:7c:4f:1a:cc:9a:f0:77:e0:27:d6:85:5b:
59:0e:df:e9:e4:7e:08:12:7e:fc:34:ab:f5:73:3d:ca:d6:19:
95:e9:b4:6b:e0:d1:0a:c8:d3:72:c6:48:d5:74:6f:94:01:df:
93:8d:34:99:b1:86:a5:36:d7:9b:7e:91:37:97:0c:15:95:eb:
b5:b9:5a:e4:39:fd:3f:7e:58:04:ca:2c:f1:7a:51:09:20:ec:
fb:16:cf:63:5e:17:c4:a0:5b:ad:f6:4f:c5:de:e5:d0:f1:31:
dd:17:11:79:c9:19:e8:4d:45:78:19:40:f9:a7:65:3c:c6:29:
3d:08:84:b0:48:33:5f:09:29:8e:f5:1a:94:0b:39:b9:7c:1b:
d5:fe:a7:21:0c:19:52:50:20:bf:23:4d:47:c8:3b:59:88:56:
c4:03:9b:96:4c:77:f3:78:4f:91:90:13:1d:71:ee:60:da:30:
5b:44:cf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:19 2025 by rpki-client