Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e9b59cd2-43ef-4533-a5a5-5892471ab64c.roa
File: e9b59cd2-43ef-4533-a5a5-5892471ab64c.roa (raw, json)
Hash identifier: UdxklUWNmHQ4IS6iCWYjG7Cu4UNTw6AXW7YZKI+tQF4=
Subject key identifier: 41:5F:4D:F0:03:B9:54:96:E4:39:D9:FD:F7:56:BA:62:07:22:BC:CD
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3AD37A1B4DDABC118A287002A4C8991BA96F9B81
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e9b59cd2-43ef-4533-a5a5-5892471ab64c.roa
Signing time: Wed 06 Aug 2025 08:07:00 +0000
ROA not before: Wed 06 Aug 2025 08:07:00 +0000
ROA not after: Wed 10 Sep 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.204.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 15:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d3:7a:1b:4d:da:bc:11:8a:28:70:02:a4:c8:99:1b:a9:6f:9b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 6 08:07:00 2025 GMT
Not After : Sep 10 23:59:59 2025 GMT
Subject: serialNumber=f8e028ab3c754a86e22203bc047c3201596e06567d17821b28bd8d8bd4b9b82f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:61:16:68:6e:de:d0:2c:aa:c7:23:e5:cd:50:
a0:c5:95:e3:e1:9c:40:f3:78:33:2f:be:27:9e:81:
3a:0d:2c:2e:87:38:92:49:36:92:8f:e3:ca:0f:04:
a3:b3:69:64:6b:8a:33:2c:98:c5:2d:47:3c:b1:41:
ef:95:89:9d:7a:eb:e3:ca:ec:e6:28:bc:fc:b6:7f:
63:83:57:96:20:5c:77:30:c9:dc:87:1c:37:df:43:
e3:8b:44:b1:ce:ec:52:11:14:e2:50:5b:90:70:3f:
b7:c9:de:e0:69:ef:fc:b4:d3:25:60:53:3f:90:67:
39:7a:3b:15:de:0a:61:46:c7:b1:a5:e4:fb:12:71:
91:9c:9a:3a:37:7e:02:25:51:a4:26:e2:3f:35:5e:
0f:f9:c5:a6:58:86:ef:33:26:c7:a6:11:d7:c4:1d:
77:38:db:2c:53:a4:2e:70:86:07:33:d5:fc:e8:fa:
31:aa:ea:50:c9:cc:bc:ad:22:54:c5:d9:95:00:1f:
7c:26:76:35:5d:a0:93:0d:2b:a9:ac:95:78:b4:22:
c6:67:15:28:eb:b3:9b:db:f2:a7:22:b2:15:5f:4d:
72:5a:06:5e:08:78:44:e6:d7:8a:2a:ca:26:14:e9:
10:eb:4e:50:44:d8:c7:ef:e6:28:45:c0:2e:c5:3c:
67:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5F:4D:F0:03:B9:54:96:E4:39:D9:FD:F7:56:BA:62:07:22:BC:CD
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e9b59cd2-43ef-4533-a5a5-5892471ab64c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.204.0.0/15
Signature Algorithm: sha256WithRSAEncryption
30:77:1b:e4:39:39:9d:d2:1a:ed:88:64:c0:f1:a7:26:3b:f6:
c2:72:da:f2:b7:1f:a6:6f:58:44:da:5a:75:9d:e6:09:51:6e:
7e:37:64:3c:c8:b3:6f:3b:72:70:c9:47:f3:79:67:3f:60:50:
37:58:3e:ee:72:18:a5:78:0b:3f:05:67:81:33:47:92:12:0a:
f2:f6:47:25:a5:bd:ed:48:63:ba:75:dd:ee:a4:88:76:b7:ad:
2c:26:d8:50:d9:b4:40:24:c6:cb:62:a5:9f:6f:6f:1d:91:8c:
ad:a1:e2:b0:f4:c6:7b:a1:ec:5a:11:72:32:0f:c3:14:a6:cb:
56:a5:bf:47:7b:ec:43:e9:51:d4:91:77:d1:39:7d:94:4d:bd:
d7:24:54:78:2e:36:68:bc:b0:8e:48:3f:1e:84:79:b3:ee:f8:
c5:d0:34:5f:46:6e:81:bd:a2:43:01:08:15:5f:a0:cb:44:f2:
ab:4b:49:f3:3c:50:9f:19:7f:9b:e3:b4:5f:35:70:5c:95:48:
0a:e6:ac:12:33:73:56:fe:29:14:e6:b0:2d:8f:4a:53:9a:79:
bc:bb:8f:ba:b6:23:5f:f9:ac:93:d6:93:cb:28:d9:f0:45:eb:
e6:9e:ff:e9:72:4d:2b:7b:18:b1:d4:71:8d:12:48:9e:45:60:
4f:d5:cb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 18:52:02 2025 by rpki-client