Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0cc077c-c457-49fe-8373-08e978cb64fd.roa
File: c0cc077c-c457-49fe-8373-08e978cb64fd.roa (raw, json)
Hash identifier: d1EUCDa6heno7IH+P03g6iQum2yKYoRZfN8Bb7Olb6s=
Subject key identifier: 84:C4:6D:61:8A:B3:32:00:5A:D4:10:99:3C:C3:72:F1:F6:CD:35:93
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 409069A6A012E7D86BF0ED0019440ECA6145E567
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0cc077c-c457-49fe-8373-08e978cb64fd.roa
Signing time: Mon 31 Mar 2025 21:30:10 +0000
ROA not before: Mon 31 Mar 2025 21:30:10 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 195.254.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:90:69:a6:a0:12:e7:d8:6b:f0:ed:00:19:44:0e:ca:61:45:e5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:30:10 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a8:7d:cd:a5:df:bd:9f:f0:35:19:f2:18:e7:
ad:00:11:c0:19:b0:96:1a:cf:3b:7b:b2:36:7f:57:
4d:fc:b8:d1:ad:64:85:d2:df:8d:b0:12:2d:d5:07:
05:59:90:88:ee:55:08:a4:36:8d:06:9b:5c:65:38:
93:bc:8f:c2:74:b4:bf:b0:6d:09:fe:ef:fc:38:22:
fb:54:18:70:cc:7a:b8:2b:ad:92:3e:c2:ab:b1:5d:
25:83:dd:f3:82:04:12:a2:e5:b1:d7:59:ec:7f:d9:
1a:8d:49:d5:14:4e:3a:b8:c4:8c:89:28:bd:49:a5:
b5:c5:7c:eb:49:03:a5:2b:1c:5a:fd:2a:e8:26:1a:
be:1a:19:c7:89:76:c2:5a:78:fb:b7:98:2d:99:a5:
7e:ec:ff:b8:a6:2c:1b:51:e0:31:a0:2c:31:73:e6:
15:10:5b:22:67:1c:af:ba:21:b6:fd:4f:b4:c3:c4:
b2:0a:3f:e6:aa:8f:f4:61:79:ae:bd:b3:f9:48:a0:
9f:85:00:e3:d4:10:a8:b9:1e:a0:87:02:ae:b6:96:
a3:c7:ad:c1:b9:6d:5f:c0:23:08:06:b1:ae:8d:76:
0d:52:5c:0d:9a:d5:27:9b:92:82:ba:65:c5:52:ff:
01:79:b1:ce:a6:ed:58:97:60:f9:66:08:d4:d9:a6:
b7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C4:6D:61:8A:B3:32:00:5A:D4:10:99:3C:C3:72:F1:F6:CD:35:93
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0cc077c-c457-49fe-8373-08e978cb64fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.0.0/17
Signature Algorithm: sha256WithRSAEncryption
7e:f4:6d:28:50:6d:63:a4:46:37:2c:dc:4c:e8:ed:93:e7:70:
5c:0e:4a:ee:ec:bb:f4:87:6f:a4:dd:81:3b:d6:a3:9f:c4:43:
98:48:f3:28:5d:42:a0:76:53:1b:94:51:4d:18:9d:c5:7f:60:
78:88:d9:b8:84:38:69:aa:cb:f5:16:74:00:65:71:4a:83:49:
b6:2f:0d:ee:16:20:7d:16:b2:b3:4f:1a:ba:a2:23:81:55:20:
30:ff:e9:f0:77:0a:39:0a:c5:a5:aa:dc:c7:7b:aa:cc:0e:5d:
91:71:c9:c0:a3:78:ed:87:e1:c5:5f:f4:e5:08:32:2f:bd:ca:
ed:af:9e:e1:fe:83:db:b5:7e:f8:98:16:1a:9a:48:55:4b:f9:
a6:26:10:21:21:04:26:f1:00:e2:e1:ec:c6:8f:c9:84:d0:70:
e3:d1:73:28:24:2d:bd:08:96:43:a9:48:9e:b5:01:24:80:10:
d2:5a:e7:35:77:5d:ae:57:bc:27:ec:81:22:43:bd:30:23:8e:
05:b8:43:6f:c8:ea:dc:a6:83:47:f5:2f:21:6c:4d:b4:94:34:
30:2a:11:20:02:2b:94:95:24:ea:68:5d:28:10:fd:46:60:f8:
7a:85:64:45:45:d5:5f:fb:2e:c6:75:31:54:0a:c3:50:90:ab:
51:d0:d9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:33 2025 by rpki-client