Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e2093baf-9227-4159-b7ff-180369fe3bda.roa
File: e2093baf-9227-4159-b7ff-180369fe3bda.roa (raw, json)
Hash identifier: vz4A7uuutUbOKoyKDRnnTnGK6vFZnwoHN3CYPi2NDlM=
Subject key identifier: 65:00:5D:64:0E:A9:68:AC:F1:BA:32:34:AB:DD:95:B7:5D:36:EF:D6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 05FE5CCE1CD9DA815DC1005C4A49FCF96ED88171
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e2093baf-9227-4159-b7ff-180369fe3bda.roa
Signing time: Fri 25 Apr 2025 20:40:41 +0000
ROA not before: Fri 25 Apr 2025 20:40:41 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.88.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:fe:5c:ce:1c:d9:da:81:5d:c1:00:5c:4a:49:fc:f9:6e:d8:81:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 25 20:40:41 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=133b19d2e233c2b006e9d2f5768f489677a4d505117e2eb4b5ebc6c5b2d3407f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:35:75:93:60:c0:af:54:34:f4:ed:90:7f:
33:c2:c8:96:01:0f:71:00:8d:95:91:b4:fe:63:a2:
92:7b:bf:35:99:ec:30:a2:79:03:a7:72:bf:0e:36:
16:3a:e3:30:d0:9b:d7:1a:22:c7:e9:e5:96:b3:23:
19:7d:87:20:78:e6:ad:29:8e:d1:a2:ac:7c:67:ad:
6c:fe:43:e4:4a:48:47:a4:ed:11:8d:33:79:b0:3c:
9a:f0:f1:95:a9:d6:b9:e5:74:2e:e3:7d:11:0d:19:
68:42:dc:4e:4a:09:fd:e7:61:5a:9d:c1:c1:23:3a:
6e:02:d2:c0:5e:13:54:43:ab:44:ec:89:3b:b7:e4:
52:b0:c5:4c:32:87:91:23:a5:3d:6a:a4:cc:3f:43:
28:11:a1:5a:f2:f4:c7:0d:60:10:06:42:2b:dd:1a:
18:34:5a:ce:98:94:20:42:cb:c1:ed:4f:16:80:61:
ea:72:56:64:82:4c:64:7a:10:f3:17:83:3c:4b:04:
21:6a:29:d2:f2:3e:d9:7b:29:0c:78:98:83:e3:1e:
e5:a8:d9:ef:d3:88:30:ea:f3:98:d8:42:11:ec:ba:
79:59:e1:08:e7:21:8c:43:cc:04:b3:4c:ce:e6:e9:
21:2e:a9:78:98:eb:ec:ba:bd:f7:13:da:44:c0:24:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:00:5D:64:0E:A9:68:AC:F1:BA:32:34:AB:DD:95:B7:5D:36:EF:D6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e2093baf-9227-4159-b7ff-180369fe3bda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.88.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:98:1d:84:8b:60:a1:c3:03:ec:26:32:1d:d8:78:27:89:0d:
38:88:74:e4:c6:14:6b:c2:36:00:4a:07:05:7d:39:f0:73:ea:
d6:95:e8:aa:b9:d8:ce:68:e5:9f:58:f1:b1:04:bc:75:a8:12:
99:97:3c:54:fd:07:96:91:00:0d:5c:f9:25:35:97:7d:b5:e4:
f0:fe:c5:53:d7:9c:7e:06:30:82:2c:6e:01:23:5a:02:d2:ab:
6c:6c:62:1f:24:ef:c9:6d:c0:2a:13:e4:4b:b5:7e:80:f6:f4:
d6:7e:41:a0:00:2d:75:54:1b:d3:56:36:58:37:1c:3d:a3:79:
7d:d4:84:10:61:78:9e:51:ed:82:c3:04:a4:28:52:6c:0c:1a:
80:c4:30:81:e0:ef:2b:03:c6:57:8f:fb:40:a5:0d:47:59:59:
b0:1e:f3:f5:6f:6e:8e:b1:3d:af:b2:21:d1:cf:9b:71:09:9b:
52:0f:db:f9:f3:c2:c6:57:42:22:27:18:3a:90:bb:38:d8:4f:
cb:19:76:ce:a8:f3:34:f9:2a:fb:e5:34:7d:87:7c:56:8e:6e:
72:1c:cb:03:b6:f9:e9:d7:f9:ce:ce:8b:c1:45:c8:75:f3:b6:
3e:a9:cf:09:6f:bf:e1:10:67:4d:72:f8:4e:5e:43:da:88:fe:
72:b8:38:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:36:39 2025 by rpki-client