Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/24601d85-ac6e-46b6-a0d2-d35342ccc951.roa
File: 24601d85-ac6e-46b6-a0d2-d35342ccc951.roa (raw, json)
Hash identifier: vyjL6KONos/BVzZ9IjecrE5EU2OqwokEbGJuJChy7Rg=
Subject key identifier: AC:C1:D1:93:FC:79:9F:74:8F:70:72:79:3C:DE:EE:4A:EE:F7:85:27
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 04A81AC4927ECB439CCFE399936570A359CFA09B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/24601d85-ac6e-46b6-a0d2-d35342ccc951.roa
Signing time: Fri 08 Aug 2025 00:40:34 +0000
ROA not before: Fri 08 Aug 2025 00:40:34 +0000
ROA not after: Fri 12 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.93.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a8:1a:c4:92:7e:cb:43:9c:cf:e3:99:93:65:70:a3:59:cf:a0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 00:40:34 2025 GMT
Not After : Sep 12 23:59:59 2025 GMT
Subject: serialNumber=de5a3c98cb0c42900e72bc89f11ba21fab2937790fccdfaaa083885455d93ac0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e1:e4:3d:d7:51:ae:ee:15:ca:25:a5:e8:0d:
f0:ed:22:2b:b5:f0:ab:60:0a:4e:5b:c9:e4:61:45:
16:50:f1:6c:67:29:3a:64:14:82:a3:ad:c6:06:7c:
48:33:e4:e9:c6:68:e7:f7:49:c4:1b:50:ae:ba:85:
75:ff:5e:28:f9:84:64:80:ce:46:fd:77:cc:bf:87:
d4:bf:26:c0:f5:77:13:57:fb:a2:46:3a:1c:47:a9:
85:17:7b:50:3d:ad:5b:d0:50:f6:81:c8:07:e4:d8:
59:cc:dd:76:52:54:05:6a:67:4e:17:3d:a8:f3:b2:
ac:29:9b:e4:93:8a:6c:7c:ad:54:57:c4:32:6c:6a:
e9:ab:d9:d9:38:1b:79:87:f3:88:b5:e9:25:a3:2a:
4e:69:18:11:57:5d:d1:06:ef:a6:c8:bc:f1:a2:7c:
8f:d9:21:38:89:29:fe:fa:89:ab:e3:52:81:f4:6f:
4c:f8:d3:0a:0c:1a:2d:3b:db:81:d9:87:48:3c:57:
6d:cd:a0:db:ff:8a:da:4a:1a:52:75:b0:1f:a5:10:
58:b4:30:50:6c:0c:fd:76:86:97:e4:66:7a:9c:f2:
1b:41:27:3c:d2:24:a3:70:bc:4a:98:0c:de:58:dc:
01:b4:88:ba:68:e1:07:cd:4b:f0:dd:e0:9b:eb:63:
53:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C1:D1:93:FC:79:9F:74:8F:70:72:79:3C:DE:EE:4A:EE:F7:85:27
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/24601d85-ac6e-46b6-a0d2-d35342ccc951.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.93.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:d4:95:95:21:c1:78:3b:5c:45:75:38:ef:07:7a:98:0a:d6:
62:1c:b3:18:e4:bd:aa:4f:03:31:b0:51:df:98:e6:f2:04:a7:
22:13:ea:ad:41:3b:37:89:30:d6:63:8b:0f:96:da:06:0e:43:
13:c3:20:fb:d0:af:5f:b1:25:80:cd:ee:75:f0:3b:5a:69:c6:
12:c3:f5:51:d1:87:77:c7:ca:58:bf:cb:88:40:14:78:4a:e8:
05:c4:45:05:df:4e:93:a0:78:76:cf:a7:99:4d:59:6c:2e:98:
ec:98:7d:de:a5:db:3d:cd:ea:81:ed:bf:d5:79:28:55:c7:fa:
e1:2a:b6:c6:71:ff:35:27:40:7d:db:f0:bc:93:cd:ce:72:35:
d7:4f:d3:53:b6:9f:87:16:28:b7:54:0a:34:2a:d8:35:79:5e:
0d:04:29:ce:9a:88:a4:2b:06:46:68:ec:94:65:c1:51:6b:18:
9a:c2:a0:46:cd:8f:f6:cc:37:b7:09:f0:8b:3f:ec:f8:66:df:
64:cd:67:19:09:d6:f1:b7:2e:34:fd:09:fb:e9:58:a0:58:6f:
44:42:39:23:7e:e9:b9:77:b0:e1:c4:25:b6:85:7c:95:94:ff:
61:4f:25:0f:d9:08:52:f8:61:5f:cf:91:27:24:da:d7:f6:35:
38:29:63:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:40:02 2025 by rpki-client