Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/44bb00cc-3dee-4cf6-8de9-2febfa0f0f6d.roa
File: 44bb00cc-3dee-4cf6-8de9-2febfa0f0f6d.roa (raw, json)
Hash identifier: vGzGVHluHqSF4Bk1FiUcVspcu2oX5MnBDtjkVeL0v0c=
Subject key identifier: 6B:26:47:8E:51:88:91:7F:21:82:72:A3:62:9F:A8:E2:BC:C0:95:A2
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 071F10379FC0CF07CF8BD5EA3E7B759E813ED48D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/44bb00cc-3dee-4cf6-8de9-2febfa0f0f6d.roa
Signing time: Tue 06 May 2025 00:50:17 +0000
ROA not before: Tue 06 May 2025 00:50:17 +0000
ROA not after: Tue 10 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.244.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:1f:10:37:9f:c0:cf:07:cf:8b:d5:ea:3e:7b:75:9e:81:3e:d4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 6 00:50:17 2025 GMT
Not After : Jun 10 23:59:59 2025 GMT
Subject: serialNumber=d2a81bd2e7aad2595c1b44dad770fd6116f5b4d327849fa24484b4483d6726bc, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:24:fd:2c:e4:3d:ec:01:d5:76:19:c0:99:
b4:af:ac:84:67:21:d0:37:41:ce:f4:1a:84:e7:f6:
7a:39:98:c2:09:31:34:04:65:27:88:96:ef:8a:30:
10:49:b6:67:a1:46:9f:84:4f:cf:b4:fe:24:17:a2:
92:6b:24:31:ae:c9:c2:fe:88:d8:c8:07:e7:5b:7f:
aa:99:e2:0e:bc:aa:b0:9a:83:2f:df:9c:68:8c:b4:
01:f6:da:91:ff:e6:0b:9d:ff:ec:af:32:d9:50:07:
71:98:28:60:79:47:22:cc:13:c5:54:8d:d2:06:84:
9b:59:f5:36:48:19:fa:4c:93:09:3b:76:4d:c5:ba:
3d:a9:af:21:e6:23:45:fe:93:06:f0:f2:22:3c:1b:
91:3d:11:7c:c6:df:c5:c8:4b:af:6c:14:9b:af:c5:
a3:c2:93:c9:c3:78:6c:00:db:a7:85:e1:06:4a:33:
fe:0a:d7:94:f6:fa:53:28:1b:34:40:86:2c:9d:c7:
54:52:f8:42:17:38:b0:bf:2e:6b:56:d5:08:1d:61:
60:4e:43:f7:83:87:de:52:35:97:cc:fd:7a:10:e0:
3a:03:f1:43:b8:8c:26:1a:59:5f:b9:c9:91:49:a9:
c7:d9:87:d0:f8:6c:69:8c:9d:85:11:2a:dd:26:a4:
fc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:26:47:8E:51:88:91:7F:21:82:72:A3:62:9F:A8:E2:BC:C0:95:A2
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/44bb00cc-3dee-4cf6-8de9-2febfa0f0f6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.244.0.0/15
Signature Algorithm: sha256WithRSAEncryption
d2:ab:09:4e:f9:ac:5a:28:b9:29:ba:99:75:d5:2d:d3:f0:a8:
9c:10:57:67:9e:d9:d5:2a:df:23:fa:98:81:ac:07:b9:ab:6d:
af:ab:77:ac:d7:5a:e7:9a:28:3a:c9:05:f8:d0:ac:c6:5f:b8:
f6:e7:29:d1:35:24:b8:b1:aa:00:80:2b:6c:c6:bf:b6:31:48:
b4:e8:53:86:3d:d8:56:e8:4d:60:69:26:0f:eb:1c:4c:b9:52:
e8:8c:75:de:27:52:c2:08:91:5c:7f:eb:8c:80:bc:73:69:dc:
1d:df:80:ca:93:80:11:de:44:67:d2:ac:78:48:c8:c3:03:df:
20:59:2d:3a:2e:b6:b3:e6:6d:3b:10:c1:a0:97:92:68:b6:80:
84:d8:06:ac:a9:5a:4c:54:d2:52:90:66:52:93:c1:a7:47:e7:
90:d9:e9:5f:20:85:e5:0f:bd:04:df:77:73:01:9b:ec:80:02:
c3:38:5d:24:32:00:69:0f:b7:a8:c6:c6:16:26:e2:fe:3e:d0:
be:a8:cb:12:b7:79:79:24:fb:26:05:62:fd:17:28:ae:0d:8f:
6f:20:64:c0:85:b6:eb:55:26:e9:63:87:3d:07:3f:3f:ad:62:
3c:a1:d8:c1:aa:20:61:a4:64:f1:eb:67:87:c2:da:9f:43:a3:
90:95:93:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:26:47 2025 by rpki-client