Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d411eca7-95af-41dd-a2fc-fdaa162ad2e7.roa
File: d411eca7-95af-41dd-a2fc-fdaa162ad2e7.roa (raw, json)
Hash identifier: T562D+6TaQh3Vyr3/v8otAiNF1vX8Q7qcKQFCibWhlg=
Subject key identifier: 18:AE:3A:77:99:78:3A:8A:9C:71:9F:35:E1:56:05:EA:E3:17:81:B1
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4F4436429ACE7BD2AEAD8B434E66FEBD8FCA6F20
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d411eca7-95af-41dd-a2fc-fdaa162ad2e7.roa
Signing time: Sat 05 Apr 2025 00:20:05 +0000
ROA not before: Sat 05 Apr 2025 00:20:05 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 83.118.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:44:36:42:9a:ce:7b:d2:ae:ad:8b:43:4e:66:fe:bd:8f:ca:6f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 5 00:20:05 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:b9:30:75:0c:14:76:d2:08:1a:19:08:76:
34:08:0f:f1:de:4b:85:b2:32:d2:a3:78:87:d7:2f:
f2:49:34:00:7e:2d:c7:52:40:7b:51:a0:0e:06:e8:
9c:d2:8d:b7:20:96:4f:78:c3:9a:5f:9d:8d:19:13:
28:82:18:a4:19:6c:52:1b:00:f6:d5:8a:1c:ae:26:
06:e6:39:90:55:12:bd:82:ab:5b:e9:cc:b2:a2:fe:
20:b0:fe:29:80:25:6d:97:b5:48:79:a0:0d:c6:de:
86:81:41:70:26:f1:17:58:86:f6:08:88:8a:c5:86:
e2:00:67:5c:b9:83:67:d9:07:1c:40:d5:71:3d:32:
2f:45:44:53:57:d9:b9:43:05:d6:f4:bb:17:79:6d:
65:ec:d5:67:48:2c:bf:6b:94:b8:90:81:94:e6:75:
de:9e:49:be:ae:04:27:ec:8f:73:20:48:9f:2d:4e:
f1:28:e2:da:26:65:d4:c5:0a:61:b8:7e:a4:eb:2c:
b0:bc:e1:2d:92:c8:25:d5:04:02:db:44:93:f9:e7:
8e:3a:99:2b:bd:36:c5:cc:94:9f:40:8d:84:41:54:
05:a9:dc:64:cd:a1:a1:a4:57:d3:37:79:92:a5:7a:
05:96:c0:30:7c:ce:31:9d:73:15:07:9c:76:9f:c3:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AE:3A:77:99:78:3A:8A:9C:71:9F:35:E1:56:05:EA:E3:17:81:B1
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d411eca7-95af-41dd-a2fc-fdaa162ad2e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.240.0/20
Signature Algorithm: sha256WithRSAEncryption
d1:44:0e:52:d3:59:4c:07:c6:91:ba:5b:c6:cc:cf:06:32:12:
fd:3b:7f:b4:0a:c4:9d:1f:e6:36:d3:6a:e9:bb:7a:fa:90:9c:
be:9f:6b:0f:be:63:b8:1e:02:dd:16:08:f4:2f:84:de:94:37:
7c:a1:18:8e:c6:66:90:f5:60:c6:48:85:95:fd:9a:f0:85:a6:
3c:be:88:b2:86:d7:7e:f0:58:03:93:35:eb:aa:01:9a:dd:dc:
e4:f7:97:1a:62:b8:ca:a6:4e:80:99:fc:4d:18:2e:51:d8:94:
c6:e4:8d:b0:5a:d6:0b:28:6d:db:fd:f0:0e:71:ad:7e:57:87:
d5:b5:0d:12:ee:ee:c9:e3:1e:00:ff:c6:41:74:86:a8:76:ca:
cf:0b:c8:0f:c1:70:c6:58:8d:24:d7:40:ae:c0:08:27:31:e5:
0c:4b:45:7c:ea:98:7f:91:68:7e:9a:24:28:ec:de:05:f2:35:
73:1d:3d:d5:48:62:cb:bc:72:05:f3:80:17:11:38:7a:31:69:
c3:70:f9:a6:66:42:08:83:2c:83:2a:fc:11:42:fe:aa:b7:e3:
34:92:c7:8f:81:70:24:48:be:2e:0f:32:de:4b:23:1b:61:63:
23:dc:09:51:be:bf:c4:3a:db:6b:48:7b:0c:9e:b2:8d:16:89:
1d:88:50:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:32 2025 by rpki-client