Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bad59de4-adad-41c5-bcd9-10599419c7b5.roa
File: bad59de4-adad-41c5-bcd9-10599419c7b5.roa (raw, json)
Hash identifier: PYY4GsqnR6glCnHse6S+BlpYmVKLuE4rniuP/xQ3HB8=
Subject key identifier: 46:BD:C3:8B:8B:2B:C9:8A:79:F1:23:AA:9F:F2:71:6A:94:6C:9F:BF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0C9419FBC204E2E9A9324094CDE6FAA305F85A2B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bad59de4-adad-41c5-bcd9-10599419c7b5.roa
Signing time: Tue 01 Apr 2025 15:10:13 +0000
ROA not before: Tue 01 Apr 2025 15:10:13 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:94:19:fb:c2:04:e2:e9:a9:32:40:94:cd:e6:fa:a3:05:f8:5a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 15:10:13 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:2e:8a:47:1a:80:c2:2e:9e:2e:56:99:a8:
01:33:5f:cd:be:f1:1f:8b:8b:c5:6f:05:66:db:29:
d0:73:44:15:15:e2:e2:1d:eb:63:bc:b9:58:d3:cc:
55:78:46:57:f0:9a:a5:1d:cb:25:87:61:fb:75:42:
84:0f:63:fe:86:cf:fe:ea:8e:b3:4b:ea:39:17:c7:
ce:85:b0:92:c4:2b:2f:66:50:ec:14:b6:c9:01:34:
9a:65:37:5d:21:38:eb:59:7f:4f:d3:ea:4a:ef:9c:
97:44:a1:d6:0e:19:e0:5d:2a:5c:f3:ce:b3:53:8a:
4d:b0:14:8f:69:58:aa:d0:c1:f7:7c:a6:fe:31:3c:
fc:84:70:40:54:f0:95:c1:08:2a:f2:ae:e2:ae:98:
af:d9:f2:8f:08:3b:a5:98:67:69:55:ec:91:a3:17:
31:9e:c0:ae:87:a6:20:00:19:2f:74:cd:58:0c:60:
25:b5:32:c5:b8:43:22:a2:15:6f:94:74:5d:50:40:
60:09:19:d9:fa:fd:a3:1e:03:a9:dc:e9:8e:dd:32:
1d:dd:23:86:07:94:df:ef:96:ff:50:77:93:0d:7a:
e1:c8:d0:09:96:70:37:bb:6b:e1:7d:2e:2a:9a:5e:
60:f1:4c:02:0f:07:24:f7:50:97:aa:53:4b:66:f5:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BD:C3:8B:8B:2B:C9:8A:79:F1:23:AA:9F:F2:71:6A:94:6C:9F:BF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bad59de4-adad-41c5-bcd9-10599419c7b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7c:3c:2f:8e:f7:0b:a8:90:d3:27:79:89:20:65:5e:1a:f6:d8:
55:ca:20:60:33:6a:78:b2:b6:ed:a3:6d:d7:d9:22:44:b1:ba:
32:1c:4c:e1:80:0c:5a:f7:3b:b3:8b:cb:c7:d7:42:30:7c:ea:
91:29:ac:28:f1:72:12:29:6f:da:de:89:d8:92:d4:44:81:e6:
68:ff:cc:af:b9:32:5f:19:52:b7:68:78:e5:d0:ad:38:3e:d3:
c3:fc:9f:df:29:e2:6b:17:f1:41:a1:96:79:a3:0d:47:65:1a:
52:b9:59:c2:a2:91:22:f5:13:3f:aa:62:dd:7b:8f:6c:23:cf:
86:fd:35:d0:14:7d:fb:25:39:92:d9:77:2e:6b:eb:85:e9:47:
16:01:ec:16:49:6b:43:bd:99:ed:7c:8b:50:74:ac:4d:fa:c7:
07:8e:42:83:16:8b:5f:ed:cf:bf:63:2b:35:e9:68:71:c6:fe:
c2:19:c5:94:33:42:c2:47:a9:3f:30:22:71:cf:0b:30:1d:70:
24:5c:b0:5f:bb:40:dc:5a:3c:43:91:7f:5e:9f:7a:58:eb:66:
44:d8:4d:31:de:0d:d6:6a:38:e2:e2:82:60:90:b2:5e:a1:69:
e6:ef:1a:87:07:32:98:91:ec:12:5f:c8:ba:e6:9d:25:7c:61:
17:17:ef:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:27 2025 by rpki-client