Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d485a465-65e9-4a19-a397-f29d1a36d166.roa
File: d485a465-65e9-4a19-a397-f29d1a36d166.roa (raw, json)
Hash identifier: BJrWjx23QIaCyhYHe9zddH0UjQ0JzvM1UemCEvTo1Og=
Subject key identifier: A2:9D:BB:09:C2:FA:D9:67:E5:52:8C:58:AE:B8:F1:36:2F:A2:EA:41
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 71D31DD19675D2BB91710F2485EA533671C9E055
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d485a465-65e9-4a19-a397-f29d1a36d166.roa
Signing time: Mon 31 Mar 2025 21:30:08 +0000
ROA not before: Mon 31 Mar 2025 21:30:08 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 195.17.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:d3:1d:d1:96:75:d2:bb:91:71:0f:24:85:ea:53:36:71:c9:e0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:30:08 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:dc:fe:78:64:a9:a1:f5:1b:2a:07:10:8e:
d6:d2:71:8b:89:c3:20:ac:d3:e6:9a:1d:cf:9e:92:
5b:6a:aa:4c:54:d4:ce:53:6e:fb:3e:f7:28:70:e6:
46:e9:d3:26:8f:be:23:c8:20:9c:46:f2:d5:1a:4b:
2a:87:41:d9:ac:c6:28:b9:a2:c0:05:b4:3c:be:ab:
04:fc:b8:11:e7:8f:82:9d:b9:c1:1b:00:40:95:4d:
fb:af:e4:f4:e0:ae:b4:d0:a8:0a:1b:e8:92:a1:e0:
ac:75:8e:20:56:ae:27:92:97:4c:de:35:65:eb:2b:
8b:fd:e5:82:2a:ed:0a:6c:9c:c6:9b:54:fa:98:44:
f0:72:bc:5f:48:72:8f:95:36:05:6b:9f:4b:42:b3:
61:c1:c2:b0:b9:23:31:42:8d:6c:9e:2f:30:c2:65:
13:7d:7a:2b:c7:8d:6b:f1:ed:82:23:47:f3:a2:4f:
11:e5:79:1b:75:2a:9f:9c:9a:ff:79:e3:3d:55:0d:
48:be:71:ef:cc:37:d7:9a:9b:4b:a8:63:7f:11:9c:
5d:69:e5:37:01:72:47:1b:54:47:f8:df:c0:a6:02:
c5:24:86:c2:52:48:62:01:1e:88:1e:54:61:cc:b2:
b0:6d:64:9a:d3:c4:b0:8c:ab:d1:18:20:ad:90:c7:
02:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9D:BB:09:C2:FA:D9:67:E5:52:8C:58:AE:B8:F1:36:2F:A2:EA:41
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d485a465-65e9-4a19-a397-f29d1a36d166.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.17.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:fb:62:61:f0:94:d8:d3:eb:e0:b8:66:44:85:69:20:9c:9f:
52:cb:bc:ed:c6:5f:f4:66:82:20:e7:e3:f9:d9:6b:e8:73:bc:
bf:b5:85:fe:c4:7b:ee:70:5a:2b:f6:2a:54:df:e3:7c:b7:57:
bf:a6:1e:3b:5f:38:9f:48:a3:59:08:f8:da:c6:1d:17:5f:00:
bd:55:d5:6f:1c:63:58:31:4e:9e:45:c8:b3:34:08:9e:db:19:
96:25:03:a3:d8:00:06:24:65:26:f9:90:2f:70:bb:51:6b:1f:
79:d8:cd:6e:7f:1e:51:0e:a2:49:9d:42:fe:5b:00:7a:03:36:
8a:d3:24:d9:73:22:ae:83:45:18:b3:b1:86:e8:41:73:4e:5f:
f8:73:3b:df:4a:f1:59:ac:e5:9a:45:28:47:6a:23:79:74:3b:
cf:5e:70:1a:8b:58:4d:00:a6:a0:ce:40:70:fe:82:6b:a3:ad:
05:04:7b:18:84:12:27:20:83:1e:72:00:32:5c:a4:cf:26:fe:
f2:aa:41:8d:29:00:09:25:9d:88:91:d8:59:34:39:e7:02:49:
3d:7b:d6:91:87:6e:57:25:1d:e1:67:a8:79:25:1c:a2:80:28:
51:ae:a8:c1:7e:85:e7:d1:5a:ea:b1:69:7f:7e:0e:6e:84:b2:
9d:d1:d4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:10 2025 by rpki-client