Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9adb83e6-fa36-47fa-b5be-856fd7247898.roa
File: 9adb83e6-fa36-47fa-b5be-856fd7247898.roa (raw, json)
Hash identifier: 6SKpI2Uap5vCBk7C3sSlURGxfs1yme9WLrU+ms7wcsU=
Subject key identifier: 34:12:3B:C6:AE:BE:B8:51:1E:3B:53:60:7D:E0:5F:6B:67:6E:50:C6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0DF99CC8669E68F9081D21A9889F7B2C98506DF1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9adb83e6-fa36-47fa-b5be-856fd7247898.roa
Signing time: Fri 08 Aug 2025 00:41:08 +0000
ROA not before: Fri 08 Aug 2025 00:41:08 +0000
ROA not after: Fri 12 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:f9:9c:c8:66:9e:68:f9:08:1d:21:a9:88:9f:7b:2c:98:50:6d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 00:41:08 2025 GMT
Not After : Sep 12 23:59:59 2025 GMT
Subject: serialNumber=267e7f2c4076ddbe3de2d3948a5e6cafdfeedb92fa421faf4f14c3c8fa8f1028, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:2a:3f:c2:53:03:6b:3e:6c:50:12:b3:65:
e5:63:45:a1:d0:6e:a2:9e:b3:36:02:0e:7b:09:79:
24:96:5e:b0:db:81:a6:01:dc:5e:c7:d5:e4:06:b8:
78:22:5e:32:4e:79:7a:d3:1a:d6:92:50:15:e6:aa:
30:3e:97:fa:ac:1f:7a:85:32:e2:24:6c:ab:71:e5:
6c:b0:f5:36:20:da:cc:ae:bd:43:d7:50:68:07:b4:
50:71:85:3c:8a:71:2a:83:d8:f8:b0:df:07:4f:78:
0f:39:96:d5:f4:e5:f1:8e:00:33:f4:d5:cb:79:75:
12:d3:9f:8b:35:51:8e:77:56:24:e0:31:30:37:90:
cb:57:2c:f1:c1:31:1e:13:ac:63:55:5a:cb:a7:72:
d7:17:ba:a6:c6:90:3d:cb:88:f9:e2:69:31:f0:7a:
8e:36:b3:7c:a8:20:e9:8b:bd:cf:41:b3:bf:59:93:
a6:38:e9:aa:f9:7e:25:59:f3:34:e9:e8:d2:bd:6d:
0d:97:05:61:30:50:65:70:3c:8f:fa:a3:46:53:09:
cd:fb:b0:59:89:df:f7:f4:9f:b8:f2:29:ee:02:8c:
f5:d1:df:fb:3d:41:06:eb:26:58:f6:bf:5a:00:e8:
d5:94:84:a5:57:2e:fb:e5:31:30:ba:79:b0:8f:cf:
dc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:12:3B:C6:AE:BE:B8:51:1E:3B:53:60:7D:E0:5F:6B:67:6E:50:C6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9adb83e6-fa36-47fa-b5be-856fd7247898.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.104.0/23
Signature Algorithm: sha256WithRSAEncryption
07:bc:46:9d:5e:df:bc:85:29:bf:8d:4d:31:a4:d6:f1:17:a7:
e3:a0:bf:ac:f8:9f:b8:3b:e2:d1:fa:2b:38:0b:b1:bc:87:cb:
b7:a4:0e:44:3c:78:31:ae:f8:e9:a5:dd:62:e0:cb:21:b3:de:
9d:49:0a:a4:54:13:98:df:1d:b1:9f:c3:80:84:70:95:43:3e:
68:74:b8:d7:21:97:a5:f2:1c:73:fd:1e:1d:d4:0d:43:23:95:
7c:7f:ed:97:06:ad:15:bd:3d:14:56:45:2a:4d:8b:70:73:96:
6a:bf:06:7e:ba:06:f8:49:42:a3:52:0c:14:8e:71:78:2f:0b:
f9:b4:6d:ee:74:cb:3d:4b:19:12:23:a7:61:2a:51:4e:c5:06:
56:59:d7:52:b2:b0:bf:1c:28:55:fe:4c:52:89:14:db:e9:10:
10:2b:de:3d:be:c7:af:ca:30:e4:10:a4:ed:38:20:04:76:84:
17:74:bc:fb:28:17:b4:58:a1:c9:93:ec:2d:cf:6c:f0:c4:ca:
87:8a:e3:e3:06:01:2d:3a:7d:80:ab:b6:f1:53:f3:37:10:fb:
32:7b:cc:6a:cb:e1:aa:6c:6a:f3:cb:e0:7f:66:a9:46:35:ad:
43:60:b2:bb:d9:7a:74:63:03:e3:01:7d:e8:c8:ab:10:a7:f3:
22:6b:12:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:39:42 2025 by rpki-client