Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c8fd8c44-7514-40e6-9198-e0b6e37b4c69.roa
File: c8fd8c44-7514-40e6-9198-e0b6e37b4c69.roa (raw, json)
Hash identifier: sRJDz2SJJZwTuw/NwI5J3ASCoTOt8qpcRzwZyeH8D+w=
Subject key identifier: 4B:68:4F:1D:29:A0:7D:11:0C:53:DE:15:BC:5D:1C:3C:28:26:5D:17
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 512F7CD2391BE8ED07FFAD63F650994215540F29
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c8fd8c44-7514-40e6-9198-e0b6e37b4c69.roa
Signing time: Tue 01 Apr 2025 15:11:00 +0000
ROA not before: Tue 01 Apr 2025 15:11:00 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:2f:7c:d2:39:1b:e8:ed:07:ff:ad:63:f6:50:99:42:15:54:0f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 1 15:11:00 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:db:50:f5:33:72:b6:bc:2c:dc:19:e0:44:e9:
8e:e8:11:01:a7:60:11:11:a4:51:97:04:06:b0:63:
2b:f2:81:62:be:11:2f:02:f1:03:f5:3e:1a:bb:5d:
3c:c8:e5:dc:00:1e:27:54:9b:44:2f:74:d3:0e:d2:
64:7d:fe:d8:69:91:67:79:66:68:f6:82:96:ce:39:
6d:bb:bd:d5:8c:50:a2:d7:5e:a4:a1:0d:15:cf:60:
86:62:4d:fb:8c:df:a5:30:62:28:eb:bc:19:71:74:
e9:42:19:d1:85:8d:42:e7:21:3d:49:a1:25:3d:c6:
3b:95:84:38:72:98:95:5b:0e:37:3f:a9:10:91:90:
f5:16:56:af:ab:2b:88:23:22:e8:d0:7a:4d:c9:de:
be:8d:5d:91:c9:d6:55:15:3c:d0:23:ee:a7:17:e8:
dd:56:77:d3:7d:1f:33:e3:6a:af:b4:c8:96:fd:e3:
56:ae:1e:76:0d:5e:90:00:17:7b:88:e5:8a:83:01:
76:73:15:72:f3:6a:31:ef:83:39:48:34:e1:68:f2:
65:15:08:26:08:8c:7e:fe:65:7d:60:ba:03:1a:a3:
41:0b:dd:a5:d4:bd:6d:ab:ae:2d:4d:13:13:d2:92:
34:90:26:b6:62:4f:22:bf:79:6d:84:51:5b:d6:a3:
00:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:68:4F:1D:29:A0:7D:11:0C:53:DE:15:BC:5D:1C:3C:28:26:5D:17
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c8fd8c44-7514-40e6-9198-e0b6e37b4c69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.238.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:16:df:76:b2:13:ad:b8:b5:11:20:08:0a:60:3b:3d:23:40:
62:54:1d:30:cd:e6:72:3c:b1:56:d7:de:2e:51:27:6e:4c:48:
53:9d:48:d7:e4:8a:db:40:f8:b8:9f:cd:44:14:ad:39:5d:ee:
49:78:85:5f:5c:a5:3f:93:a7:1c:39:63:32:13:18:ff:6f:c5:
89:5a:ce:aa:6c:55:0b:59:2e:c2:cf:3c:37:da:22:9f:07:1a:
10:39:b0:61:28:56:ac:66:86:72:df:a2:27:fa:01:a3:01:65:
18:4f:ae:03:32:46:84:44:41:0c:8c:d4:f3:2e:2f:1e:78:02:
84:32:78:b2:56:8a:14:b8:bf:2f:ae:1b:a2:b1:55:34:6a:5d:
e6:c0:5c:78:15:e5:6e:83:8d:4f:06:ed:70:e9:be:09:e9:97:
5d:d4:3f:f1:93:ae:86:d7:37:e3:84:89:91:d9:79:5c:23:a8:
ed:cb:e4:29:3c:9e:33:ce:0c:99:75:54:49:75:cc:a1:93:07:
2c:71:c3:fe:af:c7:cc:bc:9f:0a:04:2d:1e:84:58:77:5a:af:
8f:4c:f0:85:20:8c:3d:f4:d1:89:27:18:4a:12:da:89:df:2e:
cf:b5:97:4d:46:5e:41:13:6e:fe:bc:04:6b:0b:e9:ad:d4:3a:
38:8d:fb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:27 2025 by rpki-client