Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8462af63-807c-4934-9e2f-0d749c431bcd.roa
File: 8462af63-807c-4934-9e2f-0d749c431bcd.roa (raw, json)
Hash identifier: 9klvqxI4XIWmsVVHhMxQrbsr/OQSZTyalmP64AP8bzA=
Subject key identifier: F9:81:34:FD:83:68:FB:29:26:30:16:6A:20:C7:AA:46:6C:65:B7:66
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1BB3215E634B9BE9146ED06EA0E5CD99B944144B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8462af63-807c-4934-9e2f-0d749c431bcd.roa
Signing time: Mon 16 Jun 2025 21:50:12 +0000
ROA not before: Mon 16 Jun 2025 21:50:12 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 193.186.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b3:21:5e:63:4b:9b:e9:14:6e:d0:6e:a0:e5:cd:99:b9:44:14:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 16 21:50:12 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=61474080b36229b595310b108755ff2fcd7e76edcc5a17c1a93d973698e88c6d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:71:f7:9c:be:d4:46:41:9b:69:0f:22:a9:16:
2d:93:d6:43:86:b1:86:0f:46:62:db:b2:47:a1:c8:
bc:f7:5b:03:12:6a:6f:5e:d9:e3:3b:48:97:25:59:
32:9c:97:2d:67:b3:a1:7c:db:24:72:87:2d:ad:3f:
dc:db:b4:fe:c9:19:d7:0d:6d:f3:d2:4f:11:34:1a:
85:43:5d:35:dd:84:6b:a4:69:12:9a:13:ad:10:35:
7b:4f:01:3b:55:41:44:b7:b4:f7:c2:48:fc:ea:96:
c4:09:65:18:16:dc:da:dd:49:5e:22:da:e3:76:67:
46:10:33:2d:a1:8d:77:22:46:07:db:c6:c5:b1:96:
f2:4d:ae:13:39:5c:41:af:98:fa:de:26:1e:af:48:
68:be:92:cf:21:bc:45:8d:ea:a7:65:49:47:ae:2c:
15:a1:1a:c4:64:ed:32:ca:8f:00:fc:57:ec:ba:3f:
38:4e:c2:3b:0c:a6:03:5e:67:53:01:5f:06:12:5f:
81:2d:dc:59:80:40:db:69:1d:ff:10:53:42:7e:2e:
5d:a9:06:70:e2:f8:04:c5:b8:2a:a5:9c:ab:b7:b9:
89:f4:e2:f5:4d:1f:6f:00:5a:c1:a9:58:32:ee:6b:
d9:41:65:bb:33:88:d6:7b:1d:e2:54:e2:30:b1:a7:
6f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:81:34:FD:83:68:FB:29:26:30:16:6A:20:C7:AA:46:6C:65:B7:66
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8462af63-807c-4934-9e2f-0d749c431bcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.210.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c3:b9:18:d0:45:60:32:bd:fb:ec:71:96:bd:08:cb:33:19:
77:53:21:4d:9e:59:0b:f1:2b:7d:0e:d7:6b:f1:af:bd:f1:ca:
bf:5f:f0:d2:ed:cd:5e:59:b0:c3:81:b3:b0:96:ea:94:0f:b9:
e5:1f:69:af:ee:5b:d3:a6:3e:3a:27:4d:60:63:19:56:5b:4c:
db:ff:d2:e9:0e:ea:81:3a:3c:b3:5a:dc:71:23:9e:37:a9:e5:
01:24:ed:6a:86:bb:2b:6a:a5:85:5b:70:bf:0d:97:e8:2d:3a:
bf:2d:38:43:10:38:c6:da:32:39:83:d3:8a:0f:f8:1c:0b:d7:
c4:e2:69:b5:a8:60:76:c3:f1:31:31:83:0b:3f:74:ea:58:24:
26:72:49:61:88:28:63:bc:53:7f:79:d7:96:db:5c:5b:29:04:
b6:02:3a:00:44:7f:7b:bc:3e:2c:ed:da:ee:c0:9a:e3:b4:bf:
69:60:68:a5:0e:fa:5e:25:2b:03:3b:72:f2:de:c2:c7:f6:46:
7f:e9:12:8b:26:67:d5:50:3c:57:65:1a:31:5f:33:6a:df:7b:
5d:d2:ba:0c:94:54:fa:ad:80:56:6c:4e:18:54:07:21:be:22:
36:75:f9:43:3a:5d:c7:70:b3:9f:8f:2b:b4:b7:4e:d4:c8:44:
1b:27:26:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:43:19 2025 by rpki-client