Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9c8ae942-f8e3-4cdb-8c6e-8aaeda879863.roa
File: 9c8ae942-f8e3-4cdb-8c6e-8aaeda879863.roa (raw, json)
Hash identifier: VbJkL40K4AvxCUzXnO7aEBVPY8nwpKaX7Q8NJ5MOypo=
Subject key identifier: 82:C0:25:2E:C5:C3:01:75:67:CE:0F:C0:93:24:61:CF:19:2D:C1:BB
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 36B8F1AC12CCA7DE3652717D3A22FA248A396335
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9c8ae942-f8e3-4cdb-8c6e-8aaeda879863.roa
Signing time: Fri 15 Aug 2025 15:50:46 +0000
ROA not before: Fri 15 Aug 2025 15:50:46 +0000
ROA not after: Fri 19 Sep 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.206.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 15:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b8:f1:ac:12:cc:a7:de:36:52:71:7d:3a:22:fa:24:8a:39:63:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 15 15:50:46 2025 GMT
Not After : Sep 19 23:59:59 2025 GMT
Subject: serialNumber=68e5bf9a0bba34fe7deb7f45e0d00959b260c1aa286c62187f2df491d7223b3c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:a1:1f:54:29:38:9a:2a:5e:0e:87:28:89:
1c:9f:e9:aa:70:02:98:1b:80:07:5a:14:89:3a:46:
ca:a3:eb:0b:5b:75:77:9c:38:e4:1d:f4:02:46:9a:
81:4f:4c:21:91:de:ae:d3:80:27:07:96:37:dc:30:
92:2b:ea:1b:aa:23:13:f9:ba:7c:28:03:de:26:70:
b8:03:7b:8d:49:dc:de:eb:41:cb:dc:94:a1:8a:6b:
28:15:d2:92:db:3c:03:84:e1:13:cb:f2:7f:4c:0f:
45:af:72:d2:26:b3:57:98:c8:4b:82:dd:41:52:a5:
a9:05:52:db:0a:61:20:23:c3:b4:a4:77:d0:38:1d:
99:b7:fa:6c:da:79:2c:92:14:4e:8e:4f:77:79:8c:
72:4a:6e:6a:bd:86:b2:8a:9f:78:5e:99:50:7a:5a:
a3:a3:db:d8:51:b2:b9:91:39:9c:dd:60:00:36:fb:
f7:04:84:3b:98:1c:f1:f8:e3:99:36:98:64:c5:24:
c1:03:06:2e:63:c2:f4:04:6b:d3:ea:79:24:10:b7:
19:84:b7:72:ab:73:2c:fe:9b:ee:c1:08:ad:3e:3f:
a9:e1:5f:7f:50:0b:d7:45:72:da:83:76:d2:58:f2:
7b:b8:93:ad:21:2e:b6:1a:e7:8f:52:71:49:4a:b9:
27:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C0:25:2E:C5:C3:01:75:67:CE:0F:C0:93:24:61:CF:19:2D:C1:BB
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9c8ae942-f8e3-4cdb-8c6e-8aaeda879863.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.206.0.0/15
Signature Algorithm: sha256WithRSAEncryption
05:ad:cd:ba:01:f2:18:ba:3e:ba:c8:51:27:df:a8:60:8e:3c:
8c:99:64:41:07:00:7e:ef:a6:cc:48:ae:d3:70:41:b7:1d:50:
81:b1:dd:fd:fb:fa:a8:8a:a1:00:5c:a7:60:69:88:95:99:94:
b6:17:1e:7a:bf:1b:57:15:31:6d:14:79:b5:e8:1b:0a:23:70:
a2:69:57:1f:b5:f7:51:3e:53:da:d9:60:16:22:f7:d6:fa:be:
0c:be:f0:11:3b:e6:c5:e3:a8:4e:5d:c0:11:ef:3b:e2:e5:fa:
a2:8c:76:a7:5d:01:ea:22:8c:19:df:e8:a0:78:11:f1:80:ab:
f3:3f:81:f0:e3:99:17:3b:e8:0b:1e:5a:04:8c:6f:87:7a:b4:
59:ef:e1:78:56:c7:d6:4f:b5:fa:94:91:ce:3e:b4:07:09:2c:
5e:dc:e2:10:8b:55:a3:06:06:e9:4b:c3:8c:44:7f:f2:08:2d:
50:97:14:91:44:3d:6a:1e:0e:c8:0b:3a:08:af:97:21:c7:b6:
3a:f0:ea:e3:c3:39:a9:9f:e5:37:97:1a:ce:13:b8:2d:79:59:
eb:34:72:45:df:b2:fb:05:06:ec:fc:53:cb:ec:d2:72:48:f8:
48:6d:f1:cc:6d:82:a4:ae:40:b3:c3:5d:0d:7a:65:2e:1e:1d:
b1:af:cc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 18:52:04 2025 by rpki-client