Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/85056db0-2868-4547-8893-66ae7ad101d4.roa
File: 85056db0-2868-4547-8893-66ae7ad101d4.roa (raw, json)
Hash identifier: /qD0Fja6MqFNkiuNLS3kImtFvw5xp4MhyHX5TFCQeGE=
Subject key identifier: F1:55:5E:74:C5:96:39:2D:E2:74:4C:25:E7:8F:3F:F7:48:E2:CF:F8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6462DC8719E2D13785B46DAA2F185FCB4B424A30
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/85056db0-2868-4547-8893-66ae7ad101d4.roa
Signing time: Fri 26 Sep 2025 20:39:57 +0000
ROA not before: Fri 26 Sep 2025 20:39:57 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.90.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:62:dc:87:19:e2:d1:37:85:b4:6d:aa:2f:18:5f:cb:4b:42:4a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 26 20:39:57 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=41205c739a37e061746729fb74cc9a7d54fad45ffebfb08b0f0fd965267a8597, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:28:6c:a4:6a:b3:0c:8f:67:cc:ce:c7:8a:a9:
4e:a2:5c:0c:ad:7d:48:00:50:d6:30:29:ef:37:00:
d9:0d:98:00:86:f2:dd:e8:30:f6:ed:54:d6:eb:dc:
e7:62:67:8b:c6:20:a0:aa:b1:2c:fc:7c:4a:b7:90:
80:15:12:ea:c7:a3:6d:2b:db:6d:18:7e:8a:9c:7b:
1a:2b:c5:92:cd:05:b5:d6:cd:97:cc:60:ee:79:d6:
9b:0c:c8:4c:64:cc:74:fc:9c:2f:f2:af:2d:68:99:
bb:3f:5b:e1:51:68:3a:23:be:13:d5:c5:df:eb:a7:
53:84:70:50:23:5d:0b:d7:d9:5a:f3:37:38:7f:6a:
d5:8e:a2:06:db:2d:33:50:da:85:d3:79:97:cb:26:
a1:55:a7:83:fe:7f:3b:1c:59:38:7e:d7:8c:5d:24:
f1:4f:77:ae:01:43:31:5c:9b:ca:1b:6b:f9:2b:e7:
ea:c9:52:a7:87:f7:ff:f6:d1:6d:7c:6f:6a:8f:31:
a1:a3:87:cc:70:ca:68:ad:71:72:b2:bc:2a:5e:3e:
cb:43:15:2d:03:18:cf:39:e0:dd:92:26:1c:f0:12:
0f:ac:92:4f:5c:76:fa:94:aa:1f:e0:7f:39:35:cc:
3b:e3:41:ae:c8:cd:bc:a0:44:84:96:0a:20:94:6e:
73:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:55:5E:74:C5:96:39:2D:E2:74:4C:25:E7:8F:3F:F7:48:E2:CF:F8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/85056db0-2868-4547-8893-66ae7ad101d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.90.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:3c:a0:fb:62:29:b4:98:f1:27:d2:ab:51:a1:b7:1b:3c:b4:
d5:f5:df:e4:ec:ec:2c:2d:22:d2:0e:74:ce:b9:3f:a8:09:4c:
6c:02:66:dc:21:4d:39:06:b9:50:af:d4:d5:c2:6a:b7:cf:e8:
7d:ca:71:24:68:9d:6e:fe:a0:c5:af:c2:db:dc:d4:49:2b:f4:
7f:33:cb:ff:be:a0:98:51:db:3b:d3:ac:25:ab:03:48:8f:cc:
8e:bd:6f:74:94:f8:54:8d:08:a4:e3:79:ef:e8:32:c2:98:92:
48:c5:e1:e3:df:b1:fc:bb:2b:b7:65:f1:18:23:01:31:e6:f3:
62:2f:d5:23:08:02:6f:ee:6f:37:01:19:9b:22:48:e0:0c:84:
0a:20:60:3d:75:64:97:70:00:53:50:d8:61:e1:58:28:e7:cf:
19:b9:90:f6:69:27:6f:d8:64:8d:d5:8a:76:ba:46:97:24:a5:
09:94:29:c5:d6:ce:12:1c:3b:0b:48:1f:0b:ba:7a:fd:9f:05:
3c:60:5f:a9:16:3b:12:9d:3b:88:bf:6f:96:a9:40:dd:60:95:
c4:df:9f:f2:be:aa:13:52:30:79:0a:72:ed:aa:ed:9b:1d:34:
6d:56:e2:2e:fc:15:3b:f5:b8:50:ba:a2:ea:60:f0:3a:59:91:
d3:e5:d9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:52:11 2025 by rpki-client