Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8c7710c7-6ab8-4545-b04c-0bbeaa573eae.roa
File: 8c7710c7-6ab8-4545-b04c-0bbeaa573eae.roa (raw, json)
Hash identifier: So5i8JVBd7NYvbw5puqh1gmN+r/QqTGKC1X5kW/GojM=
Subject key identifier: 76:25:B8:92:E4:83:A4:D5:84:86:E8:19:C2:14:92:41:52:FF:6F:63
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 250B73D540C2ABD1DDD7C47D4EE01454F7D23C7D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8c7710c7-6ab8-4545-b04c-0bbeaa573eae.roa
Signing time: Fri 08 Aug 2025 00:41:01 +0000
ROA not before: Fri 08 Aug 2025 00:41:01 +0000
ROA not after: Fri 12 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.112.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:0b:73:d5:40:c2:ab:d1:dd:d7:c4:7d:4e:e0:14:54:f7:d2:3c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 00:41:01 2025 GMT
Not After : Sep 12 23:59:59 2025 GMT
Subject: serialNumber=cbbedfbb1530b4a605682863f669f340e332e0aa35476b8805cf5caf52316bbc, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:c0:19:ba:a4:78:b2:ba:ba:07:99:26:55:
8e:03:7d:4b:37:a6:90:db:02:30:31:96:41:bb:1e:
c0:30:ae:23:c8:3f:c6:b6:4a:29:93:a6:34:fd:1f:
81:9b:b0:82:f3:15:b3:44:0f:fd:63:7b:6a:f3:6f:
8c:f5:3a:f0:ab:67:c1:c4:a3:c6:27:25:d4:74:8c:
ca:d2:4b:8d:24:5d:63:c0:07:07:27:c2:a8:b3:dd:
dc:b2:dc:22:ff:8d:37:e0:98:39:ea:60:fa:8d:f3:
59:08:38:5e:9a:cc:d6:8e:1b:30:ba:0a:01:51:21:
3a:dc:7d:0a:87:32:a6:59:f7:a2:39:10:08:9a:a3:
f0:4e:e4:68:7e:f8:0f:b0:33:84:ae:1e:5d:a9:7d:
61:61:d1:91:4e:a5:57:ca:95:ff:66:70:5b:5a:08:
3d:00:ff:eb:e6:0e:d2:24:f3:5c:09:df:49:1a:25:
3e:de:55:41:21:31:79:6b:af:3a:5d:35:94:a1:94:
1d:6f:15:b0:e9:13:9b:0e:22:9a:51:4b:e5:fa:af:
96:de:3e:aa:89:b3:5b:bd:b2:dc:8f:2d:9e:93:f6:
ac:1e:f9:19:81:01:a7:2c:5a:ab:17:ec:85:69:13:
f8:8d:79:21:4c:b0:8b:0c:3f:ef:b7:cb:a9:34:92:
5a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:25:B8:92:E4:83:A4:D5:84:86:E8:19:C2:14:92:41:52:FF:6F:63
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8c7710c7-6ab8-4545-b04c-0bbeaa573eae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.112.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:6b:0e:e1:f9:b9:e7:99:08:34:cb:f5:d0:58:fa:14:0c:8d:
7e:a2:68:07:e9:9c:26:08:f9:bc:3c:81:d6:fa:60:e4:7a:5d:
c4:03:22:c1:b8:7b:47:ea:c4:5f:9d:bb:2d:10:ae:29:71:b6:
ba:ce:40:f7:e0:7f:02:0a:61:0d:ad:8e:47:cd:32:bf:8e:20:
1c:17:99:37:1e:61:b5:bf:89:78:60:11:81:76:37:27:2e:9b:
c6:e5:23:83:3a:e2:2d:db:72:93:de:67:01:cc:8f:99:d2:95:
53:83:5f:80:37:f8:c6:ec:9a:92:9e:cc:9d:80:a5:0c:41:f0:
70:06:54:94:85:1c:67:1f:54:ca:d8:ec:2d:fc:19:17:7d:96:
81:1a:4e:11:1e:5a:f2:22:dd:ca:26:1d:9b:48:6d:b6:d6:a6:
13:93:9a:ba:b3:c5:33:14:1c:7f:3c:c5:97:a8:de:13:65:5d:
14:ce:8b:38:17:10:96:f7:07:81:9d:82:73:84:82:ed:82:74:
9b:de:15:1e:98:d1:e7:6f:ed:68:6d:78:09:62:ff:22:33:86:
56:0e:f6:37:35:64:ef:ab:a1:7f:88:5c:bd:6e:04:e0:86:c0:
a9:cf:11:2a:69:88:d7:25:2a:a9:80:64:a9:35:32:52:09:7b:
95:82:a4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:37:24 2025 by rpki-client