Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa
File: 7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa (raw, json)
Hash identifier: 0rVtES0WFMPUF8wGWizf3k79HkfBnXpsdZ8bAHr8oTI=
Subject key identifier: B1:22:B1:3C:88:D2:26:F2:8C:9E:31:6E:29:5E:7F:17:5B:39:63:A9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4C921FF679C87341C30A77ADA1F39289C6BF66E5
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa
Signing time: Mon 16 Jun 2025 22:00:47 +0000
ROA not before: Mon 16 Jun 2025 22:00:47 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 57.65.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:92:1f:f6:79:c8:73:41:c3:0a:77:ad:a1:f3:92:89:c6:bf:66:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 16 22:00:47 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=8b451a731e32421a2b49249cc4e95ac78aee8a4da5bc2babb738f826dbac19b9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:95:a6:cf:43:d1:57:4b:83:04:b1:9a:17:90:
a6:3b:28:15:c0:2a:07:f9:8b:73:09:aa:b9:bc:4e:
f3:3c:50:a0:2b:43:01:72:50:6d:b3:44:40:d0:be:
93:5b:d6:af:4e:76:e8:b3:a3:17:df:1f:4b:d7:7c:
9c:de:0c:e3:9f:5d:ee:65:35:58:7e:d7:e4:df:ab:
68:d0:d3:3f:a7:f9:a9:ec:d9:e5:fc:0f:2d:8b:82:
e4:8e:90:fb:f1:f9:75:be:3c:f0:07:e0:fb:75:3d:
c6:8c:04:d8:28:ef:4f:f0:1b:b6:ff:4a:d4:01:6c:
08:03:4b:fa:8d:e2:cf:a3:72:84:fd:c5:50:80:39:
9b:46:cf:1b:ac:41:c1:20:78:f7:08:77:de:47:ec:
14:89:17:ff:25:72:3a:fa:07:99:7f:51:69:05:ab:
57:b3:e1:ed:34:cf:83:5b:d8:06:61:ce:72:6d:15:
57:bf:69:b1:49:ac:2f:04:56:06:fc:b3:02:d9:17:
d1:82:d3:77:e6:1e:ba:6f:45:1c:b9:3c:fd:38:df:
e0:6c:58:ae:bd:39:2d:21:6d:4c:e6:98:9d:04:e7:
55:40:81:a5:39:16:ed:7e:29:a8:42:84:92:b8:3f:
70:0a:a6:6d:b0:d9:25:79:21:f3:93:73:97:30:f3:
50:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:22:B1:3C:88:D2:26:F2:8C:9E:31:6E:29:5E:7F:17:5B:39:63:A9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.65.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:32:d9:7a:51:63:77:d1:17:e1:86:ed:a9:20:07:61:b5:bd:
9b:8f:c7:f9:e2:cf:51:6a:d3:88:80:ec:12:34:fb:ab:5d:14:
05:62:a9:6f:78:50:af:60:5d:92:7c:9f:af:1d:3d:17:39:12:
bd:e6:a5:96:97:45:66:7a:00:b4:e0:22:fa:99:b4:ff:27:19:
db:20:6c:0e:0a:e3:fc:b4:8e:17:6d:dc:af:be:f1:b6:fe:dd:
30:6a:67:8d:e6:6c:6e:e4:76:f7:71:a5:4d:1d:53:1e:55:d3:
0f:db:f9:f0:e5:7b:31:58:33:74:40:2f:89:ac:f3:fc:1e:41:
db:3c:a7:24:c7:9f:69:78:fa:f4:f3:4f:e6:fc:1e:d5:9f:21:
8e:f8:50:2a:f1:8c:02:8d:c5:11:84:66:76:23:b5:33:0e:e1:
64:af:e7:3d:e5:8e:fe:93:22:fa:43:27:da:d0:e7:b4:eb:cf:
d4:3d:b2:18:a1:53:39:bd:a7:f6:82:4a:f0:d2:a2:79:e7:1d:
b2:d0:e5:ef:82:d4:77:68:df:25:49:44:22:37:5f:b0:a0:b8:
a3:36:31:13:15:e2:90:c8:c2:d6:d3:35:0d:75:89:3a:08:43:
b0:50:75:6f:cb:72:6c:0c:b4:f5:15:24:7a:75:43:cc:f0:58:
a7:c5:01:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:10:23 2025 by rpki-client