Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ef3e6945-57bf-41fe-9e98-2db6c2800547.roa
File: ef3e6945-57bf-41fe-9e98-2db6c2800547.roa (raw, json)
Hash identifier: cjPKjgeeTVQiy0Vqo4q4W78rVnEKXMuzcbhdv7VcrD0=
Subject key identifier: FB:B0:C1:7A:A6:09:C1:E4:48:64:00:92:1C:56:C6:E6:8C:C4:17:C9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4B2458ECECB2BEC7B456364951069AADA666CE5E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ef3e6945-57bf-41fe-9e98-2db6c2800547.roa
Signing time: Mon 31 Mar 2025 21:30:59 +0000
ROA not before: Mon 31 Mar 2025 21:30:59 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.208.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:24:58:ec:ec:b2:be:c7:b4:56:36:49:51:06:9a:ad:a6:66:ce:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:30:59 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:56:a6:9f:ab:11:ca:05:ea:aa:47:0e:4b:f3:
20:2b:9a:31:ec:db:4c:70:99:5b:2f:0a:5a:cc:7e:
3c:f6:7e:08:e3:c8:1d:2d:bd:73:ad:de:bd:11:b4:
0a:83:7e:ca:e4:b8:a8:b7:51:d4:9c:24:72:21:75:
a1:63:b8:b6:7a:93:16:09:18:a1:87:da:be:58:e6:
d5:a2:fa:96:d6:ab:93:78:22:03:07:39:38:46:23:
9c:6f:26:2b:d2:37:5c:68:04:a5:13:45:4c:c5:61:
a5:6c:4c:9a:7e:74:ed:0d:22:a6:5e:75:04:05:72:
a6:78:ca:10:6d:31:9d:20:97:2e:a6:25:b6:98:b4:
64:e7:b2:0a:09:70:5d:8b:aa:8f:55:d4:4b:d3:3d:
93:62:7c:51:dc:f6:15:98:03:75:f4:d0:99:a4:4b:
8a:b5:95:62:ae:dc:ed:05:9e:90:f5:b7:ae:6e:ed:
f9:31:a7:77:7a:f0:13:43:21:71:2a:54:85:b3:e4:
62:e3:8d:66:02:29:1a:c4:2c:22:19:d0:28:95:58:
fb:64:ff:13:f6:83:5d:db:d2:11:7e:a8:86:61:59:
37:f2:28:e0:7d:63:f0:8b:3f:44:4b:8e:82:0c:d8:
e5:22:e3:6e:1c:29:0e:fe:ee:fb:60:73:48:26:30:
e9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B0:C1:7A:A6:09:C1:E4:48:64:00:92:1C:56:C6:E6:8C:C4:17:C9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ef3e6945-57bf-41fe-9e98-2db6c2800547.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.208.0.0/15
Signature Algorithm: sha256WithRSAEncryption
8b:a9:19:66:fb:b3:82:73:75:4a:7a:4c:81:c1:d6:53:bc:c2:
c0:8b:24:c2:01:62:ea:b7:de:8f:09:17:83:b9:d6:c2:5e:56:
5f:5b:f2:de:b4:a4:11:82:00:f4:db:00:53:22:90:3f:e7:87:
e9:20:7f:c3:7e:ad:3b:61:52:37:07:1b:92:1c:41:81:3b:9d:
c7:75:b4:5b:60:cf:0e:d1:86:23:18:b0:0d:0b:d9:00:3e:f8:
c2:5d:60:51:66:ea:90:5f:25:96:ee:7f:98:f6:05:26:e7:ec:
d1:14:f9:aa:19:34:55:c2:48:76:78:ef:42:0b:8e:d2:0e:96:
6b:ff:68:81:d7:d0:08:b5:2b:33:46:60:73:78:6c:dd:4b:41:
3e:cd:de:04:08:b5:b7:14:42:c3:7d:4b:1e:53:57:dd:e8:7d:
68:03:8e:96:5f:fd:f7:04:21:5c:98:e3:dc:a9:5c:67:c1:7e:
3f:68:07:3e:09:53:e2:24:b6:be:0b:2f:d8:9a:e9:9c:39:b1:
95:11:b3:ab:e6:bc:06:73:d7:53:cf:ac:c0:b1:a1:34:0c:e1:
81:da:9d:98:fb:95:83:38:c9:85:b8:a3:bc:5e:14:7a:0f:04:
30:7e:23:63:c1:60:5d:00:13:6e:e1:73:56:f0:a5:67:3a:ce:
88:7b:20:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:23 2025 by rpki-client