Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a474cc19-3913-40e7-ba75-6bf55cdb6351.roa
File: a474cc19-3913-40e7-ba75-6bf55cdb6351.roa (raw, json)
Hash identifier: 9XaRlXiC0GD1+6gZvVE8B8Cq3wgzhgkN/c52ZleP9KE=
Subject key identifier: C0:13:0B:2B:4E:D9:DB:5A:BE:7E:5C:CC:10:9C:3C:64:79:6C:BF:4D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3B9008B370D9DC6463ACB0035D5EFCAF40CD9D9C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a474cc19-3913-40e7-ba75-6bf55cdb6351.roa
Signing time: Tue 01 Apr 2025 15:10:50 +0000
ROA not before: Tue 01 Apr 2025 15:10:50 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 83.119.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:90:08:b3:70:d9:dc:64:63:ac:b0:03:5d:5e:fc:af:40:cd:9d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 15:10:50 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b3:03:48:07:3d:98:15:07:a3:6a:ac:1d:fb:
1d:e1:54:8e:c0:d7:ba:9f:a4:9a:b2:04:3c:ba:d2:
09:5f:0a:ef:38:ad:17:0e:db:2d:dc:99:40:98:0d:
02:0d:7f:df:42:a9:c3:e5:fd:3e:57:3f:20:2c:15:
4a:ed:a3:87:3a:63:37:79:f6:61:b7:65:0d:0e:ac:
ce:d3:73:4c:a4:33:85:55:dc:56:22:a2:d2:5d:4f:
0e:2c:fd:fc:1c:7c:81:9e:49:6b:04:d0:52:47:a9:
10:28:51:5c:cc:09:44:c6:69:fd:83:54:ea:22:a5:
22:57:09:80:09:9a:92:0a:cf:7a:8a:5e:b2:df:ed:
c2:73:60:87:00:40:0f:ba:52:b4:74:2e:6f:68:3b:
05:bb:b5:0a:f8:51:88:47:07:ed:c3:d4:dd:63:d1:
66:dc:c9:90:e8:f5:15:d4:d2:77:82:3d:3d:1d:ad:
01:c9:56:69:3e:a7:10:63:26:ac:e0:cc:4f:b1:0d:
07:a4:b5:37:c8:32:76:dc:1f:df:af:49:f2:ff:bb:
8b:00:5c:48:24:93:02:c2:42:a2:f6:72:93:9e:2f:
97:26:e7:a8:3a:33:35:b3:dd:c7:e7:0c:77:79:0a:
02:6f:91:34:97:e8:0f:73:ce:ed:4d:46:44:80:95:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:13:0B:2B:4E:D9:DB:5A:BE:7E:5C:CC:10:9C:3C:64:79:6C:BF:4D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a474cc19-3913-40e7-ba75-6bf55cdb6351.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.64.0/19
Signature Algorithm: sha256WithRSAEncryption
d5:10:c7:bf:43:a4:2f:f9:eb:5a:29:84:48:3f:eb:62:d6:5a:
e3:2d:c5:55:5e:4a:7d:b6:94:43:2a:b1:5f:ba:cd:6c:55:d4:
ff:9e:44:eb:65:2d:19:6f:c6:20:0a:9b:b6:a3:71:0d:29:41:
3c:54:85:ad:ed:63:49:96:f8:33:88:75:4f:1a:c9:46:95:7a:
d9:84:b1:a3:88:67:99:a2:df:c4:ff:97:14:fb:f8:6f:a0:7b:
e5:3f:63:b4:42:c5:db:1a:c8:91:c0:49:b0:64:d8:55:ef:60:
32:4c:e6:c9:63:f8:c6:4d:77:66:8b:d2:b2:13:a6:24:56:55:
61:44:45:84:98:d1:60:f6:e2:f7:28:17:f8:ee:5f:59:de:76:
65:6e:9a:9e:1b:33:f2:03:64:17:26:cd:09:48:e0:03:3b:35:
4a:da:75:37:61:6f:00:3a:f7:13:63:d8:b4:42:41:2b:7c:be:
ed:e4:13:ab:b3:9a:dc:c3:b9:63:ca:46:b9:3d:81:ea:a7:32:
1d:1a:56:14:7f:de:83:e2:c4:0c:27:a4:96:86:af:85:33:4c:
46:eb:45:4f:ca:ae:2e:38:2c:82:b5:0b:86:89:79:43:27:37:
39:64:5b:bd:9d:df:0a:79:e1:d6:47:a0:bd:26:6e:d9:d5:02:
76:a8:36:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:21:24 2025 by rpki-client