Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa
File: f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa (raw, json)
Hash identifier: cTgNK4kw0c6Itt88E0BuiHc1JsARt2ffftKOeByENog=
Subject key identifier: 73:D0:B1:E2:B8:60:AC:97:77:74:9C:0C:24:19:97:24:19:86:BD:87
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4052088E59784BA14C1E877C048B0971E7196A8D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa
Signing time: Mon 16 Jun 2025 21:50:15 +0000
ROA not before: Mon 16 Jun 2025 21:50:15 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 193.26.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:52:08:8e:59:78:4b:a1:4c:1e:87:7c:04:8b:09:71:e7:19:6a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 16 21:50:15 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=e3c96067784a710d3d26e26be48d63fc2319b4707f6cdc728808171550af68ac, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f7:9f:d1:9f:bd:1d:1c:da:9d:5f:c7:6c:30:
27:a0:b0:2d:47:fd:97:98:8d:e2:d1:49:79:01:e7:
da:10:cb:b7:40:6c:da:91:1b:59:ef:e2:49:55:eb:
3d:05:c3:da:7f:23:36:0a:1f:be:69:1d:f6:d1:05:
89:37:25:71:30:0d:02:c8:68:7f:db:2a:7a:ce:93:
41:d5:02:1d:55:92:15:f7:30:0a:94:d8:0f:ff:97:
da:ec:91:8f:e3:50:7c:64:05:2c:9c:a8:1c:e5:f5:
c5:fe:b3:87:cb:fb:e4:d0:8b:49:13:0b:3e:96:2f:
9c:b8:06:21:70:a5:b2:ef:34:46:ef:62:f0:4b:3f:
16:f3:ae:8f:b8:97:3f:c0:91:bf:4a:73:1e:48:71:
17:02:c9:48:26:3d:ee:51:77:1f:29:13:3c:41:fb:
e7:0b:04:c1:91:28:86:c1:c2:c5:18:8b:aa:91:05:
b9:f4:e0:ed:83:97:04:69:15:e4:8b:da:81:b5:78:
16:54:f1:56:7a:a8:da:1d:1f:3f:35:1b:d1:cc:a2:
13:98:49:83:63:f7:fa:e9:af:bd:c5:e4:68:3b:b7:
2f:dc:be:fe:3e:e5:00:28:e5:47:40:b6:02:b7:07:
d0:3b:7f:bb:48:57:b7:92:71:39:c1:2b:87:0f:cb:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D0:B1:E2:B8:60:AC:97:77:74:9C:0C:24:19:97:24:19:86:BD:87
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.64.0/19
Signature Algorithm: sha256WithRSAEncryption
cb:d6:e4:a0:21:eb:02:e7:9b:66:f5:2c:d6:c9:47:e0:ae:44:
37:87:96:ed:cd:b4:96:4c:41:9c:5f:11:c4:a6:be:ec:b5:85:
29:4f:38:ed:f0:4a:91:a6:39:14:eb:d7:20:d4:70:d3:21:a7:
ac:9a:96:6f:19:47:ce:d4:b6:42:22:f5:6b:23:9f:45:10:b8:
8c:96:56:22:61:31:71:bb:63:4d:b5:85:f6:6f:e7:a0:28:b5:
65:1f:5a:46:e8:cc:92:7c:b6:03:42:0d:1d:6b:b9:ec:26:bf:
1b:53:cd:44:f3:6f:1f:46:c4:bb:1c:73:69:cc:c0:71:ba:bc:
c5:31:cc:31:67:29:21:a6:57:4f:44:93:e9:65:36:56:20:a1:
df:92:30:4a:77:2c:a2:23:9e:ea:ad:5d:98:5f:95:cf:e5:0f:
fe:d9:4f:74:a8:6b:33:50:91:71:2d:ea:01:4c:64:b7:33:0c:
ec:9d:a3:16:fb:3e:dc:77:42:f9:44:88:21:40:15:45:dd:46:
fd:d4:78:fd:9e:a7:43:15:ee:03:4f:89:c6:ad:94:6f:60:2b:
fc:71:e8:07:e5:86:ff:e3:17:c2:30:19:c4:1b:9c:60:17:e7:
d8:6b:a9:b9:75:27:3c:3e:f7:1b:e3:91:d4:bd:0e:94:f8:62:
6a:e7:c9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:20:13 2025 by rpki-client