Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc353215-935f-47d2-9298-767ccc0eae1a.roa
File: fc353215-935f-47d2-9298-767ccc0eae1a.roa (raw, json)
Hash identifier: BH6QqhXOkXgd6T2cUqz40J+JqNnxM6GYmfxM2uhgHnk=
Subject key identifier: A3:39:22:CC:F0:5E:3C:32:AE:66:98:69:A9:07:ED:94:93:89:46:41
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 587DF13FB447F20FFE0AC317B3ACD9F7BE929FCB
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc353215-935f-47d2-9298-767ccc0eae1a.roa
Signing time: Mon 16 Jun 2025 22:00:50 +0000
ROA not before: Mon 16 Jun 2025 22:00:50 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 85.151.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:7d:f1:3f:b4:47:f2:0f:fe:0a:c3:17:b3:ac:d9:f7:be:92:9f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 16 22:00:50 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=8d63d9c0cdbb66229e16f648a1128f75aad9468e5a88d9d4efb72f06f9cc66c8, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:3e:2e:3a:5e:d0:0a:bc:7b:c9:5a:16:01:
fa:ec:76:21:9d:44:29:e0:37:e3:58:90:c1:e3:5f:
c5:7b:5c:6e:26:46:b9:c1:c6:0f:9a:80:4a:d8:6b:
08:c6:44:04:1c:76:63:c0:1d:c1:bc:96:9d:14:e4:
47:32:ab:dc:18:70:9e:b8:11:e7:09:c9:b4:b5:17:
db:f8:ba:27:1f:7b:ee:98:e5:27:d4:ce:a6:0d:02:
24:34:43:71:7b:07:1a:c5:cd:85:f9:f1:87:c7:e6:
aa:9a:9f:10:fa:29:e9:f7:5c:27:8c:90:ac:29:4e:
04:5f:f3:89:92:1c:96:f4:d5:38:31:bc:0a:af:9a:
69:43:dc:1f:cd:8c:bd:0d:b1:d8:c8:da:be:b6:f9:
2d:25:6f:e0:d9:54:77:e1:6e:a2:fc:34:84:df:66:
0d:6d:10:dc:6b:45:15:a1:09:60:17:57:cc:2c:bc:
6e:5b:bf:22:10:ec:88:76:11:2b:37:f0:37:da:fd:
a4:46:8e:60:0f:83:32:9b:7e:3f:b8:ba:8c:2b:d5:
50:e5:19:db:20:ae:61:cb:b2:86:cd:48:3a:42:25:
dd:f7:81:8f:1d:87:b4:45:f1:d4:45:e3:99:d4:69:
35:a4:d7:0e:1c:db:fc:67:e2:89:75:63:1c:f2:06:
50:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:39:22:CC:F0:5E:3C:32:AE:66:98:69:A9:07:ED:94:93:89:46:41
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc353215-935f-47d2-9298-767ccc0eae1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cd:e4:e4:5d:50:19:61:d7:fe:3c:05:e7:9c:d3:a0:e0:c1:0b:
8a:62:b5:2c:d9:97:ee:64:35:e5:38:7c:c4:15:22:bc:39:1b:
64:07:e0:75:8c:42:2d:c0:6b:40:43:a4:bb:26:c1:46:6b:86:
68:f5:20:f1:e2:e5:20:c3:fb:57:f5:47:db:98:49:48:cc:e4:
b9:ec:cc:a3:5f:78:e9:a5:25:35:67:27:c7:86:80:a5:91:57:
98:86:3c:c8:7d:9f:98:37:68:f6:1b:5b:a4:29:ff:b0:df:b2:
b2:97:29:e5:75:f2:0c:05:67:9c:00:1f:ab:f9:39:cf:e0:fa:
37:24:58:14:6a:61:70:bf:41:fc:e5:98:71:33:64:6e:ac:2d:
e7:ce:db:ff:55:09:fc:25:f4:79:16:c7:6b:2c:74:72:0a:eb:
59:42:90:de:fc:70:c4:a2:27:f3:34:14:46:bc:f6:0d:0d:f7:
f5:a2:e9:5d:b5:76:d9:df:40:f2:83:3f:e8:95:5b:7e:15:60:
48:7d:a8:30:c4:c3:e6:2e:6e:05:d8:41:54:2c:7f:e7:ac:36:
03:6a:06:8e:ab:2c:04:ea:dc:cc:b6:b6:a6:d0:37:37:25:d1:
e6:31:92:74:1d:75:4f:da:51:d6:f3:e6:c0:ea:72:a5:33:f5:
b4:74:d8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:25:59 2025 by rpki-client