Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
File: b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa (raw, json)
Hash identifier: SvYUe498I7bO5uanM5RmkbjnNXEy18IztjOg9/iwRg8=
Subject key identifier: D3:78:41:CF:48:2D:70:C2:21:72:67:09:99:0A:14:13:74:53:D0:15
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 62ED65B830D16A1370EDDE02DAEF2A505DE26E24
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
Signing time: Tue 05 Aug 2025 20:30:47 +0000
ROA not before: Tue 05 Aug 2025 20:30:47 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 57.85.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ed:65:b8:30:d1:6a:13:70:ed:de:02:da:ef:2a:50:5d:e2:6e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 5 20:30:47 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=ffb68cf5b2929f5ca3fabc63ebb2f25165d75d8f964472eb4616937ddc5f0ce6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:91:8d:ad:4a:4c:0e:79:93:a6:d4:72:5e:1b:
c7:5c:50:97:14:82:9a:8f:e3:ff:7d:66:59:0e:cb:
f7:00:f1:8c:cf:81:b8:f8:92:c2:04:f5:0e:ec:ff:
09:4a:f7:13:b7:6b:4b:b4:e2:ca:83:6e:ee:20:5e:
e3:de:62:79:a4:93:d7:0f:07:de:f5:ca:68:30:7e:
27:e0:44:21:db:a8:11:f9:dd:18:65:37:9d:0d:69:
60:47:16:3b:0e:48:60:1c:e8:6c:6d:27:47:d5:c1:
70:20:35:d4:03:c0:88:c2:37:d6:04:5d:a4:61:1f:
a2:8d:79:86:ad:52:f6:fb:b6:e0:02:3b:58:04:d5:
b6:93:2c:ab:81:8e:2a:05:0b:94:15:4c:87:40:1f:
db:ac:e1:0d:ee:de:f1:f5:20:51:8f:2f:54:3c:c6:
1b:ee:a7:5f:13:07:cc:9e:a3:87:21:ac:b3:a1:16:
50:c6:9c:7c:da:b7:c7:10:88:62:0f:3e:9d:d0:cc:
74:47:f6:c3:8e:af:2a:8d:f0:b9:05:dc:08:9d:ad:
50:d2:5e:35:28:9a:cb:d4:1b:8f:b0:d7:f2:69:0c:
4b:1f:85:93:13:63:99:a2:12:e5:f3:3c:aa:33:6c:
c2:dd:e4:db:9a:3d:c7:0d:ae:28:97:e9:21:f4:54:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:78:41:CF:48:2D:70:C2:21:72:67:09:99:0A:14:13:74:53:D0:15
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:c5:94:f5:d0:a7:c4:f5:2c:d8:28:69:54:1b:9e:4c:af:a3:
49:04:7f:b1:5c:e4:97:95:6a:51:f5:88:5e:97:56:a8:d6:f1:
c6:43:b5:27:8e:bf:a1:8c:e9:3f:90:fa:12:1f:67:0d:fb:9b:
27:b6:7d:aa:4c:7e:c7:be:3f:c9:40:b0:3d:08:ff:58:b6:ca:
85:1d:48:67:03:dc:12:17:f6:e5:94:c3:6f:b3:81:a6:0a:5e:
6b:fe:b6:be:74:89:83:a0:38:53:ac:94:83:0a:30:e5:2e:c9:
0a:b7:77:1d:d4:3f:72:b1:ba:e2:28:62:12:6a:93:74:04:55:
f6:49:e9:be:2b:f8:92:6d:18:95:21:76:35:46:bc:0c:ac:6b:
00:43:c1:6f:b3:f0:16:60:82:d0:b9:88:b9:c4:30:d3:ab:a3:
69:58:71:fd:fe:b4:77:86:8d:4b:be:42:b4:3e:2d:94:12:63:
c6:d2:82:18:3a:73:76:70:47:18:bc:32:04:47:fa:87:dd:6c:
d8:ab:9b:2c:38:f5:f4:b4:5d:98:16:eb:94:07:19:65:c7:d3:
a3:38:b7:57:95:56:ee:7f:39:b1:a0:a3:da:3d:1a:1a:50:78:
43:52:aa:a9:89:67:21:0c:58:97:47:7f:88:b7:2e:bf:e7:65:
66:a8:6a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:42:04 2025 by rpki-client