Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f060e190-89f7-4009-9831-b2d429343b80.roa
File: f060e190-89f7-4009-9831-b2d429343b80.roa (raw, json)
Hash identifier: KynPxHpgzjdBld4srnG1s+7uoluUSUtRqpCiqgdIRLo=
Subject key identifier: D2:24:94:A8:2F:7A:06:9D:1B:AF:F5:1D:87:7D:91:45:4C:C6:75:AD
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 359CCC43AD5D70B93F6B5BB0978C592D7830D572
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f060e190-89f7-4009-9831-b2d429343b80.roa
Signing time: Fri 08 Aug 2025 00:41:03 +0000
ROA not before: Fri 08 Aug 2025 00:41:03 +0000
ROA not after: Fri 12 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:9c:cc:43:ad:5d:70:b9:3f:6b:5b:b0:97:8c:59:2d:78:30:d5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 00:41:03 2025 GMT
Not After : Sep 12 23:59:59 2025 GMT
Subject: serialNumber=e3022de2b1dc294a8c57943fc049281371590c9db7732f27423d7d4f59beb7c0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:17:00:c1:3b:9a:ef:40:97:d4:c1:d0:26:d1:
04:d3:2f:7d:1d:d8:59:4f:c5:62:ba:e8:73:b8:5f:
80:b8:b5:c6:5a:c1:16:d4:1a:39:82:70:9c:f6:d5:
7e:4c:ff:ea:66:79:cd:46:43:46:88:2d:65:44:dd:
64:5e:6b:5a:8d:6d:7d:a2:67:a9:c1:a5:34:e8:6d:
ce:ce:fb:0a:7c:bb:be:6b:c6:77:a3:1e:f1:fa:8c:
b0:06:cf:bf:72:c6:9e:fd:60:44:c7:f5:02:b9:9e:
ea:8c:fe:62:e6:f4:ed:ba:24:9b:e8:cc:58:74:18:
33:83:44:55:fd:3d:52:69:0a:e6:a8:c0:92:87:07:
d5:31:f2:16:4d:77:5f:b2:bd:09:e2:99:2b:e2:fb:
01:76:75:51:df:68:2b:67:70:df:f6:5d:16:9f:80:
62:54:0d:38:00:56:2f:a1:a4:4f:77:07:04:76:44:
24:6e:83:a5:b9:ce:ec:7b:9a:eb:4f:91:ad:30:32:
b1:46:19:49:9b:c2:a2:de:2f:b7:35:88:64:ac:95:
62:ab:00:f7:51:c5:12:2c:a5:07:57:5e:39:30:46:
31:36:26:8e:e8:2d:33:c0:30:40:48:9b:a5:a9:5a:
9a:9b:32:ac:eb:f2:26:05:89:41:45:7e:90:3b:51:
6f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:24:94:A8:2F:7A:06:9D:1B:AF:F5:1D:87:7D:91:45:4C:C6:75:AD
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f060e190-89f7-4009-9831-b2d429343b80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.0.0/15
Signature Algorithm: sha256WithRSAEncryption
75:10:2f:fa:5a:34:77:fb:82:eb:47:e2:3f:8e:72:6d:45:3d:
1e:97:27:00:6c:bc:25:a3:7e:86:24:a4:2e:69:73:29:87:82:
4d:c2:94:ac:43:92:66:2c:a9:3a:d2:b5:60:d8:c5:fb:d4:d7:
96:16:b7:70:40:c7:ba:e0:95:f0:63:b2:df:5d:c4:1f:06:7f:
b0:f4:07:92:71:67:f2:93:9d:f6:0d:4d:78:c4:67:f5:e0:1e:
ab:8f:75:ee:1a:90:f7:cf:b7:6c:da:bf:d1:bd:c6:d3:ef:54:
a5:18:82:1b:00:8d:5d:89:b5:6e:bf:2f:fd:9f:c8:83:15:82:
38:7b:7c:18:35:7b:e6:ca:74:54:99:4b:a4:35:f2:18:d0:ea:
56:d7:ed:a8:04:43:4a:47:7c:bc:55:51:79:7e:b2:86:28:f3:
83:25:d9:27:9e:80:04:0f:1e:58:57:33:55:91:fb:01:f0:dd:
4f:b0:20:09:29:57:26:ef:b8:c7:be:88:98:05:03:09:84:44:
40:47:d1:fa:bd:e1:57:1d:63:51:33:99:1e:ed:3a:83:d8:58:
00:24:5d:c5:ad:46:66:e2:28:e8:e9:3b:b8:8f:24:62:fa:d3:
e0:d8:dc:0e:2e:f3:b1:a7:5e:69:87:58:72:9c:13:1e:18:46:
ed:08:53:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:42:28 2025 by rpki-client