Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fd04a54b-459a-491a-a013-59d0ed55825f.roa
File: fd04a54b-459a-491a-a013-59d0ed55825f.roa (raw, json)
Hash identifier: OMPmiiccrrqrAuGyax9iZ8y0ux+M0RhMbji4Rn2E7OI=
Subject key identifier: C7:F7:86:A2:90:D8:BB:B4:6D:83:5F:DC:4A:97:62:E2:25:FA:8D:A4
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 75F5133B9EDE576227C4F93640C3053202EEB210
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fd04a54b-459a-491a-a013-59d0ed55825f.roa
Signing time: Wed 05 Mar 2025 17:50:14 +0000
ROA not before: Wed 05 Mar 2025 17:50:14 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.131.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:f5:13:3b:9e:de:57:62:27:c4:f9:36:40:c3:05:32:02:ee:b2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 5 17:50:14 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:c8:d7:c0:c4:e3:20:2b:aa:dd:dd:f9:ea:
66:3b:80:39:c8:9f:c9:84:02:d6:8a:7a:95:f2:e1:
14:df:a4:fe:43:f8:44:2d:a1:38:f8:1b:63:cc:25:
80:b5:e1:86:98:35:42:07:ba:ec:90:5c:9a:70:22:
88:98:51:f5:58:c6:71:e1:e8:e6:77:6b:58:31:4e:
35:35:eb:01:e5:1b:7a:1d:d4:52:67:a2:35:59:c0:
13:92:c7:8b:72:c6:23:78:91:71:b5:51:4d:ba:52:
eb:8a:b6:05:33:28:a0:12:a3:87:b2:54:56:6c:79:
1f:b0:04:40:74:a2:c1:e0:a1:98:07:a2:0b:94:cb:
df:eb:62:71:48:24:9c:7c:1e:ce:83:94:81:ef:d4:
d3:58:bc:d9:14:d0:6c:10:62:77:88:bc:f3:0c:78:
fd:d6:19:9f:09:22:0c:2d:38:48:b5:b4:40:74:b1:
8f:83:43:1f:64:f5:58:a9:e7:5b:80:e5:46:23:f3:
d4:d4:04:59:c8:db:6d:9c:27:3a:da:9f:6d:32:94:
f5:49:f5:9f:b6:ec:79:5c:96:83:d8:23:60:eb:20:
5f:d1:9a:85:3c:aa:53:5a:ac:6a:29:af:b4:b9:a1:
e6:d3:f4:1f:e9:bc:47:aa:dd:f0:02:3c:bc:43:7c:
14:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F7:86:A2:90:D8:BB:B4:6D:83:5F:DC:4A:97:62:E2:25:FA:8D:A4
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fd04a54b-459a-491a-a013-59d0ed55825f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.131.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:d3:62:56:00:f8:87:b3:b4:07:c9:ed:11:89:0f:0a:9a:69:
75:7e:a5:a4:7f:19:71:06:18:4a:b6:08:fa:94:c6:cd:3d:46:
79:ca:a7:2f:d7:02:b8:29:14:28:57:ef:86:e2:9b:5a:fc:98:
c3:b8:07:78:be:bc:8c:07:37:22:6f:a9:b3:db:57:44:47:65:
8e:84:e2:20:34:49:b0:ed:8c:c6:dc:6c:96:b3:5b:47:6c:39:
8e:ed:f0:47:d9:81:7c:c5:3b:cb:d9:17:0b:05:9d:ff:a8:0a:
0e:07:92:2c:19:d4:ca:f1:d8:95:32:8b:f1:b5:43:e1:59:41:
9a:89:4a:72:e3:f2:3b:52:b6:59:7d:5c:81:1e:9c:63:7d:35:
e6:46:4d:8e:a2:25:15:e3:ab:d4:d2:41:bc:21:c4:da:dd:cb:
d0:b0:de:d2:dc:a3:d5:a0:c8:f1:34:24:5e:ff:4b:b5:7f:88:
0d:ce:fc:b5:15:5e:24:a9:65:ea:46:c3:44:ff:ae:8c:e7:7c:
63:70:94:d9:54:83:f4:4c:73:3b:37:6b:2c:85:26:78:16:97:
79:5d:8e:45:be:b9:ee:0e:52:56:71:99:19:50:b5:c0:2f:3e:
0a:27:9b:73:7b:88:90:68:f5:41:34:47:50:7d:ec:17:b6:2e:
7f:a0:7c:c1
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUdfUTO57eV2InxPk2QMMFMgLushAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAzMDUxNzUwMTRaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDhkMzE2YjEwZGVkZThjYTQ0N2JjOTE2MzFjYWU2MTcwMGNjMTg4Nzc0NDli
MWE0Y2VlMjMyZjYyNmQ2Y2NkZmExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL88yNfAxOMgK6rd3fnqZjuAOcifyYQC1op6lfLhFN+k/kP4RC2hOPgbY8wl
gLXhhpg1Qge67JBcmnAiiJhR9VjGceHo5ndrWDFONTXrAeUbeh3UUmeiNVnAE5LH
i3LGI3iRcbVRTbpS64q2BTMooBKjh7JUVmx5H7AEQHSiweChmAeiC5TL3+ticUgk
nHwezoOUge/U01i82RTQbBBid4i88wx4/dYZnwkiDC04SLW0QHSxj4NDH2T1WKnn
W4DlRiPz1NQEWcjbbZwnOtqfbTKU9Un1n7bseVyWg9gjYOsgX9GahTyqU1qsaimv
tLmh5tP0H+m8R6rd8AI8vEN8FA0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTH94ai
kNi7tG2DX9xKl2LiJfqNpDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZmQwNGE1NGItNDU5YS00OTFhLWEwMTMtNTlkMGVkNTU4MjVmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADODMA0G
CSqGSIb3DQEBCwUAA4IBAQCX02JWAPiHs7QHye0RiQ8Kmml1fqWkfxlxBhhKtgj6
lMbNPUZ5yqcv1wK4KRQoV++G4pta/JjDuAd4vryMBzcib6mz21dER2WOhOIgNEmw
7YzG3GyWs1tHbDmO7fBH2YF8xTvL2RcLBZ3/qAoOB5IsGdTK8diVMovxtUPhWUGa
iUpy4/I7UrZZfVyBHpxjfTXmRk2OoiUV46vU0kG8IcTa3cvQsN7S3KPVoMjxNCRe
/0u1f4gNzvy1FV4kqWXqRsNE/66M53xjcJTZVIP0THM7N2sshSZ4Fpd5XY5Fvrnu
DlJWcZkZULXALz4KJ5tze4iQaPVBNEdQfewXti5/oHzB
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:32:37 2025 by rpki-client