Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
File: b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa (raw, json)
Hash identifier: rYM6Gkseio3YjDhRNzhmYGegixy/8K6P5tgi58wI6o4=
Subject key identifier: BC:FF:50:B8:88:78:41:25:18:BF:9C:3C:08:59:6C:7E:1C:EA:A3:E9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4D74085B8337F016B34FEA3BA6EEA107A3527C89
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
Signing time: Mon 01 Sep 2025 21:40:46 +0000
ROA not before: Mon 01 Sep 2025 21:40:46 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 57.85.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 21:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:74:08:5b:83:37:f0:16:b3:4f:ea:3b:a6:ee:a1:07:a3:52:7c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 1 21:40:46 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=b5a952e02edafdff1bd4d348f8f9a28e490671412964d0d32fbfd01b6e1b740b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:4b:25:44:ef:11:49:9e:ec:d8:e8:54:df:
79:a8:7b:75:b7:02:5a:65:0b:75:fb:bb:ca:42:52:
cc:cf:3b:e4:26:85:e4:de:f8:a3:f6:33:c6:dd:d9:
a6:e2:6f:53:0e:ae:65:92:cd:e2:be:b3:96:a6:81:
b1:15:b1:7e:b5:21:34:ab:15:61:87:39:ab:7a:c9:
c0:76:07:93:97:a6:fa:8b:52:f4:0d:27:14:67:37:
d2:e7:c7:76:c3:b7:b7:0a:32:c6:ef:20:43:c6:d2:
ce:8f:51:a2:c7:e3:d2:05:e5:ed:5d:2b:83:e0:60:
32:e8:95:3e:af:ce:75:fa:43:a9:ae:a7:f5:31:0d:
d4:a0:4e:b7:bc:5b:f6:5f:34:de:2f:8c:7c:6d:b6:
46:f2:51:f4:db:2b:7a:eb:61:00:2f:f3:fe:f7:52:
49:38:e0:3d:83:8a:2e:d2:48:b0:07:55:bd:3c:da:
35:17:d4:6a:7a:0d:e8:1c:ee:40:f8:e6:95:e0:95:
0d:67:1b:71:4f:50:73:81:25:43:37:27:9a:95:32:
39:96:5f:c0:e7:43:7c:85:7f:f4:d7:a6:b3:34:dc:
1a:8c:b8:84:58:46:1c:f1:d3:2c:b8:a5:bd:69:56:
3b:d2:fb:99:ca:5f:b9:f0:47:22:f1:54:15:84:1f:
fd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FF:50:B8:88:78:41:25:18:BF:9C:3C:08:59:6C:7E:1C:EA:A3:E9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:34:52:fc:85:cf:27:30:14:31:8c:2f:71:9b:37:e3:d2:8e:
89:a6:e2:7d:15:67:2a:ba:10:5b:70:2b:a3:8c:32:09:75:2f:
af:b6:16:ad:17:e1:00:a0:89:13:de:f8:f9:fb:0f:63:8b:e1:
93:dd:b3:24:5d:6d:38:24:fe:d8:39:78:80:7b:fd:5f:83:b0:
e8:41:5a:f3:81:6b:6e:d9:d6:93:66:af:e9:e0:6b:b9:eb:3d:
99:48:0a:24:fc:54:85:fe:4b:0e:61:2b:13:0f:98:f5:87:f6:
34:5c:85:81:1c:42:e1:0f:e0:7f:a2:65:46:b1:41:72:83:18:
d0:79:90:9e:32:0b:65:00:64:48:4e:40:f3:19:eb:0e:f1:0f:
86:e3:e9:ba:2c:30:d2:a4:25:48:49:49:ed:b2:0d:fd:2d:c1:
cf:70:d7:36:a3:70:0d:4e:3e:e5:11:d9:a7:e6:5f:b6:9f:e9:
eb:f8:99:69:57:6c:3d:00:c7:d9:a6:73:8c:1a:31:33:2e:b1:
5c:7f:a7:4d:81:62:b8:5a:45:df:c4:24:1b:7c:15:19:e6:cb:
c0:cc:d7:9d:8d:ae:3a:7c:c7:d3:de:7e:7d:c6:6b:9b:06:fa:
1b:84:cf:a3:b2:f9:42:60:81:ff:d9:66:0d:35:86:2a:31:ee:
61:b8:9d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:32:47 2025 by rpki-client