Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7004e664-46d2-4f68-8ca4-34eb8e376031.roa
File: 7004e664-46d2-4f68-8ca4-34eb8e376031.roa (raw, json)
Hash identifier: rLNNAWqby35sPIYArbE8Xi+jzGurLw6nj2J/RO52xsU=
Subject key identifier: 30:20:1B:E5:14:6F:9C:A8:81:FB:6C:DA:F6:68:09:10:54:5C:64:C5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2DE9C54A1FB6DE6DABC0D6DF4322CCCC8285CF51
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7004e664-46d2-4f68-8ca4-34eb8e376031.roa
Signing time: Wed 15 Oct 2025 19:41:09 +0000
ROA not before: Wed 15 Oct 2025 19:41:09 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.74.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:e9:c5:4a:1f:b6:de:6d:ab:c0:d6:df:43:22:cc:cc:82:85:cf:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 15 19:41:09 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=14098be729d3b0e95eda60e25ed7a992a83a3b06651d7dea7ee470f65ebdf0cd, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:93:a6:ac:50:ba:af:0d:62:ae:f8:64:94:b2:
6b:39:7f:e9:f9:be:91:c2:ca:74:bb:86:8b:71:28:
91:f5:f1:74:05:f1:11:72:4e:32:1e:39:06:41:0e:
04:2a:83:58:f3:3d:f7:27:ab:db:f5:65:16:2b:26:
0e:ad:9e:73:06:f8:a1:a3:5b:2a:a3:51:ca:bf:e9:
b9:f2:7c:96:79:56:9d:3e:6a:7a:8d:39:6d:73:bc:
fa:4c:e1:a5:23:f9:22:bf:c7:84:df:d2:65:ed:dd:
b5:29:39:c1:c7:88:3f:9f:c4:1c:fa:88:01:ca:75:
d0:da:55:67:01:48:0a:2d:d1:65:88:d7:a7:77:e4:
4f:2b:b5:30:3a:cd:a3:ea:49:ad:a2:cb:e1:37:4b:
4d:6e:3f:7a:9b:e6:25:0b:db:d0:ca:44:89:cb:f3:
e7:ea:9d:e8:d7:84:fe:05:83:bd:21:e6:19:5e:45:
7f:19:d5:f4:20:69:ee:f2:d0:57:80:ea:89:d9:fe:
44:f2:48:ff:f7:7f:98:d6:6d:30:7a:66:7a:b0:53:
a4:63:18:56:d9:3f:a6:47:27:9f:c7:3e:33:c3:4a:
8d:76:a6:7d:a5:b2:9a:0f:56:d6:f3:5f:3f:d9:4f:
9e:d2:e9:3d:4f:9b:21:a9:07:66:a4:e3:2d:f9:a6:
30:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:20:1B:E5:14:6F:9C:A8:81:FB:6C:DA:F6:68:09:10:54:5C:64:C5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7004e664-46d2-4f68-8ca4-34eb8e376031.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:58:27:3b:ca:8a:2c:ef:f5:cd:d7:f9:14:25:46:09:04:94:
d0:b4:42:d8:89:2d:0c:38:36:b8:98:05:72:e2:88:b5:82:18:
bc:2c:0a:71:00:8e:b8:b4:eb:57:1f:75:b4:b0:b9:fd:4c:4b:
31:21:14:f0:b9:aa:76:15:5c:3a:80:2e:ab:db:18:54:03:96:
63:2c:51:2b:2f:9f:ca:b1:5b:af:f5:5e:1a:2f:ed:6d:e4:6c:
22:02:c5:c5:a1:3f:4b:b4:33:56:98:ce:a1:9b:a0:2c:86:11:
6c:c8:9b:38:8a:a2:ed:40:7c:d8:38:2f:d8:02:d5:05:24:7a:
9e:2e:3a:8a:2b:75:af:b4:b1:28:f2:6d:f5:0f:89:48:dc:12:
94:1d:81:63:45:2d:90:36:3f:0c:de:60:d0:23:f0:da:85:aa:
4f:1f:0a:21:9c:d1:45:fc:88:b9:b1:23:91:e2:ab:e0:a8:9f:
6a:f9:64:25:af:36:b1:3c:a7:2c:4d:cd:d5:91:f7:dc:47:69:
5a:de:f9:ca:33:63:30:39:c5:74:1a:f2:20:59:b5:97:1e:6b:
34:98:d5:9f:8d:cb:e4:43:a1:1b:e8:29:a0:e9:24:86:79:ce:
fe:7b:34:12:31:b6:9a:ba:a0:77:fb:ce:01:41:25:a6:1d:74:
da:8b:eb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:26:16 2025 by rpki-client