Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/63e023f1-83fd-412f-8365-33afe1ac80af.roa
File: 63e023f1-83fd-412f-8365-33afe1ac80af.roa (raw, json)
Hash identifier: FjseN0OwHP+wosXyEFWahafqbW3H62Gc/Se2yNnivmc=
Subject key identifier: 05:C1:BB:8D:A2:21:9A:38:62:14:A5:65:29:79:9B:46:0A:B8:E1:C8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 50F19A0E4D4BF0596D6F3D044C80F119A703BC27
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/63e023f1-83fd-412f-8365-33afe1ac80af.roa
Signing time: Mon 16 Jun 2025 21:51:24 +0000
ROA not before: Mon 16 Jun 2025 21:51:24 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.160.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:f1:9a:0e:4d:4b:f0:59:6d:6f:3d:04:4c:80:f1:19:a7:03:bc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 16 21:51:24 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=224d5bbee50cbbf9e11a21584e5ee315db245f2740205519be08cb0115ee0439, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:11:31:10:00:f4:fa:99:a2:d6:d4:ac:68:
76:e3:0e:38:e0:1a:1a:b6:a9:12:25:da:c4:33:aa:
bb:63:14:04:d7:70:79:3d:a4:4d:ed:ed:fa:6d:bf:
04:a5:6f:33:80:5c:c4:b8:f6:8a:5c:f5:8c:74:90:
e9:b8:9c:44:70:8b:d3:6f:05:35:09:06:89:ca:c6:
91:20:e0:d6:2a:9b:3a:6f:b5:6e:76:58:ac:b6:ce:
2a:42:18:94:d5:c1:a7:40:dd:6d:ba:3b:9b:89:74:
25:33:b2:2a:cd:26:3f:7a:55:5b:a5:da:19:b9:26:
0c:0c:b8:82:0f:10:bb:3d:eb:d3:c2:dd:84:45:e1:
fa:29:bb:a6:ab:7a:26:61:81:10:7c:7f:38:5b:e2:
29:4f:6f:d4:24:b9:07:7b:e9:d5:d0:1e:41:3e:88:
3b:bf:de:56:57:42:07:84:40:c8:50:a7:60:f3:01:
2a:3b:05:c9:cf:8f:54:1d:2b:84:76:c3:02:be:35:
86:8a:22:ad:e9:41:26:42:8a:78:01:50:47:e8:4f:
10:57:57:4e:58:fb:1e:56:7c:81:bd:b6:3f:18:b8:
0f:c1:fc:1e:16:0a:87:c0:e1:74:19:c9:36:6f:d8:
1a:0d:35:b5:49:66:6f:a3:f7:6c:07:96:9b:4c:52:
72:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C1:BB:8D:A2:21:9A:38:62:14:A5:65:29:79:9B:46:0A:B8:E1:C8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/63e023f1-83fd-412f-8365-33afe1ac80af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.160.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:27:e0:a2:9a:60:05:5b:5f:39:82:0d:2b:84:42:ec:4b:5d:
57:82:d4:56:e9:77:1f:0c:ff:a0:93:8f:9f:ac:3b:2e:33:95:
8c:7b:1a:21:90:ca:58:a2:44:79:a8:f7:61:49:a6:c7:5d:e9:
eb:4a:d6:89:d0:29:ec:b0:1e:75:58:14:e9:80:77:1f:f6:96:
af:2d:3f:47:f3:13:71:5d:83:fd:06:34:c1:e5:72:0a:f4:38:
76:2a:0c:25:eb:c9:23:d5:60:3f:17:74:3b:8c:ab:1e:fe:59:
df:9f:b7:21:bc:bf:15:b4:2f:20:b6:f8:20:ce:4d:6c:29:ed:
19:5c:83:63:19:55:b4:f5:2c:91:3c:48:24:d1:33:5e:db:46:
86:39:e0:a0:9d:aa:df:00:be:a3:8c:68:fe:ef:7e:bc:95:3e:
20:4b:05:83:1a:98:be:2c:14:bf:96:1c:a0:68:4a:03:b5:36:
8a:19:0f:ed:b2:90:50:7d:ab:d3:25:ad:96:ca:c8:cb:e7:43:
d3:16:5a:ad:22:e6:a3:03:58:5e:6e:5a:3a:64:a8:53:d3:ed:
7c:0d:d7:15:51:3d:3d:26:e0:bd:d1:03:4c:e0:13:a0:9c:a6:
4a:be:b6:c8:d2:11:fd:5a:67:5c:5d:c9:69:71:6d:59:27:fc:
ac:a8:c4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:45:30 2025 by rpki-client