Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/67568c6a-cd1a-4586-a397-580b374dbdb0.roa
File: 67568c6a-cd1a-4586-a397-580b374dbdb0.roa (raw, json)
Hash identifier: myQzsZLLHMRwH3hn4eRnE5kUXgaCFYbU85CIxrlDTVg=
Subject key identifier: 8C:99:9F:AC:E0:EF:24:3B:20:A9:63:E7:5B:77:41:AC:E3:90:82:FA
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5FE2B603DB1B812D9F414F51D9218B843F7547D3
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/67568c6a-cd1a-4586-a397-580b374dbdb0.roa
Signing time: Wed 05 Mar 2025 17:51:55 +0000
ROA not before: Wed 05 Mar 2025 17:51:55 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.60.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:e2:b6:03:db:1b:81:2d:9f:41:4f:51:d9:21:8b:84:3f:75:47:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 5 17:51:55 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6e:b7:68:45:63:dd:3f:4c:87:0a:c4:a1:f2:
43:e8:c3:5e:c6:53:ea:c2:2d:81:e3:68:0f:81:7a:
f0:16:ea:96:b3:fb:fe:42:85:62:f6:da:51:49:20:
bc:eb:a8:a2:4b:12:13:18:78:3c:e2:f3:84:83:f8:
19:7a:83:7b:b4:5e:b6:e2:e9:30:15:f7:8f:49:e3:
bb:40:77:ec:55:a4:aa:22:b3:6e:91:2a:4a:ab:aa:
74:86:db:e8:22:b6:b0:0e:6e:07:c4:99:ab:2f:89:
93:6d:8e:01:8f:6b:67:08:9e:21:cd:a0:2d:ad:ab:
44:72:04:4a:c9:42:e9:7f:9a:6f:0b:06:e7:b5:17:
47:e0:83:6f:03:ad:c9:25:40:36:f2:f5:6f:21:34:
41:e0:81:16:3a:0d:dd:f3:fa:48:f3:81:34:09:24:
6a:a1:09:af:4f:d0:cf:98:8b:f9:97:2f:82:5c:bd:
a0:3d:d5:be:8a:fe:b4:cc:12:87:4f:fc:f7:01:97:
5c:de:8c:05:9a:1d:c1:f2:b7:bb:1b:f7:5b:50:37:
b9:be:a0:f6:0a:e3:74:6f:50:fd:5d:bb:05:1b:c8:
ec:1f:43:b5:da:b5:f1:f8:c1:45:fb:5c:8b:d3:4d:
f4:0d:26:ec:f6:bd:e3:b6:9d:d3:79:00:3a:4c:6b:
ba:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:99:9F:AC:E0:EF:24:3B:20:A9:63:E7:5B:77:41:AC:E3:90:82:FA
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/67568c6a-cd1a-4586-a397-580b374dbdb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.60.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bd:49:e2:79:76:c1:7f:f9:7f:67:c8:82:de:ba:2e:7c:a2:13:
65:93:b5:ca:06:58:57:2b:82:c1:9f:ea:43:17:46:7d:99:42:
58:46:bd:c5:f6:ab:52:8b:28:d0:15:ef:ef:0c:c5:a4:1a:55:
c3:07:5e:d9:fa:d1:b8:26:a7:81:7e:1f:66:d4:ea:94:69:f7:
86:1c:cf:07:ce:3e:d3:47:2e:c1:ca:e8:fd:fd:f3:e9:62:87:
27:34:62:fc:07:a0:2b:7b:82:3a:1c:4e:f8:d3:59:30:7a:79:
4e:5e:c1:93:28:fc:5c:98:ba:57:58:7b:bd:3b:80:67:6c:cd:
a2:80:29:7a:0e:13:1a:af:cd:2f:f6:d8:d3:14:eb:ba:78:27:
be:8c:47:16:ac:c3:d4:3e:c0:e5:aa:d7:a5:f7:be:2a:90:0a:
dd:c0:0a:63:90:52:10:df:e0:17:cd:3c:22:aa:50:34:bc:4a:
34:31:09:60:75:0c:04:66:ea:49:c3:fe:a1:a9:f1:e6:56:0e:
18:17:72:8c:ba:f9:d9:83:44:34:28:ee:99:dd:1a:b2:0e:63:
99:5e:a6:1e:c7:ce:22:7a:61:58:85:7e:64:44:0f:91:86:33:
08:b6:86:37:38:3e:64:dc:27:32:ab:12:50:ae:7a:a8:1c:07:
35:52:0e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:54:24 2025 by rpki-client