Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fdb81a1b-3eea-4c1a-97f6-940966a0bde0.roa
File: fdb81a1b-3eea-4c1a-97f6-940966a0bde0.roa (raw, json)
Hash identifier: 3g4Ub0T7Q43j1gsIGldqsfMCo4ZuYAyTjn9CzhusnpQ=
Subject key identifier: DD:6D:26:EA:0C:7D:A4:98:6D:50:35:20:D0:E2:0C:45:7D:B9:36:FC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 126DB0335F243D9C1877FF9B644A745259BDAEC2
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fdb81a1b-3eea-4c1a-97f6-940966a0bde0.roa
Signing time: Fri 09 May 2025 16:30:07 +0000
ROA not before: Fri 09 May 2025 16:30:07 +0000
ROA not after: Fri 13 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 83.119.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:6d:b0:33:5f:24:3d:9c:18:77:ff:9b:64:4a:74:52:59:bd:ae:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 9 16:30:07 2025 GMT
Not After : Jun 13 23:59:59 2025 GMT
Subject: serialNumber=74a4e7c7b7ed599a50143851f83df38ea2c200d8f281105707eebf5f0f560d2c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:de:43:fc:58:44:a4:d0:70:91:21:3a:8f:
3a:9c:33:57:fa:7e:b3:ef:88:44:b1:49:41:23:db:
26:04:a3:ec:5b:87:ba:bb:69:4e:5e:51:7e:67:a1:
06:da:94:29:5f:49:fd:75:d9:53:68:99:59:93:bd:
31:31:f1:b9:69:bb:0f:fb:49:9c:db:2e:2c:28:ea:
0b:2b:cd:6d:08:fb:08:8b:29:9c:68:88:5b:3e:db:
c2:e8:41:18:7f:f9:19:a4:3d:e3:41:34:b6:d1:40:
bd:e0:e3:ce:bc:6e:1a:cc:f1:53:7b:be:2a:77:ec:
31:26:38:32:4e:5c:08:55:8e:c1:62:7a:cc:11:aa:
38:3e:b8:d7:2c:57:e3:9a:15:64:7f:8d:90:6d:31:
4f:63:d9:03:0d:cf:91:b1:fd:28:d6:6f:71:d3:b3:
d4:ac:27:aa:b5:38:d2:8d:53:69:44:c1:7b:d7:47:
46:89:41:bd:e3:86:b9:13:13:e3:12:88:c2:85:b8:
0a:f4:9c:e5:35:86:77:1b:cf:7a:6b:eb:e3:20:c9:
85:d5:5f:91:1d:11:6b:a1:2b:54:87:9c:78:b3:54:
fa:01:22:6f:e2:4a:3d:6b:9c:e5:c0:5f:90:4d:db:
f9:42:0f:14:b0:34:c1:f8:5b:23:fc:d1:b9:81:ae:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6D:26:EA:0C:7D:A4:98:6D:50:35:20:D0:E2:0C:45:7D:B9:36:FC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fdb81a1b-3eea-4c1a-97f6-940966a0bde0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.128.0/19
Signature Algorithm: sha256WithRSAEncryption
a3:75:39:57:4e:b9:a9:84:db:d2:89:ff:f6:d7:ca:c5:65:f2:
0b:67:46:74:67:f6:38:5d:46:08:1c:35:dc:db:46:a6:bb:22:
68:9b:10:d0:9e:95:a1:46:07:e3:19:d4:0d:2a:48:ec:e6:ea:
48:c9:b0:fb:7f:7c:3a:4d:d8:ab:24:b0:e1:c3:74:65:1e:4b:
a7:ff:73:cf:6d:47:37:25:8a:15:e7:37:91:6f:ea:de:f7:4f:
5d:f2:cc:4e:29:8a:9f:7a:a1:bb:28:bb:7f:91:47:9e:35:96:
26:6d:a6:09:a1:b2:83:1e:d0:b6:b8:8a:85:58:a5:ce:14:b5:
7b:7e:91:0b:07:ba:5e:ea:35:d7:cf:95:0a:f3:e6:8f:bd:bc:
33:7a:23:61:e4:a9:6a:b5:81:f2:b1:df:25:d0:da:9f:d0:a3:
88:9e:70:95:a3:bb:27:1e:ea:86:d7:05:f7:f0:c6:54:ee:c0:
63:ce:89:c2:c1:55:a8:89:6f:49:c9:33:5f:09:17:4d:b7:8f:
ca:8e:d6:4f:dc:cb:b6:e9:b0:63:e3:5c:a8:66:0e:58:62:a2:
f4:f3:c3:f8:71:c3:0c:41:9e:a9:82:ba:da:35:00:c4:f3:0d:
c6:4c:8f:46:e0:ba:17:b4:fb:09:63:8d:e1:a8:89:d4:5d:c4:
2b:d8:da:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:27:39 2025 by rpki-client