
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc353215-935f-47d2-9298-767ccc0eae1a.roa
File: fc353215-935f-47d2-9298-767ccc0eae1a.roa (raw, json)
Hash identifier: 7+3KP6D/dkObJEWnvtzUolTltuHC1FmtMrCJEh+UfWI=
Subject key identifier: E6:BB:DE:A3:A7:EB:45:F4:11:5D:13:C1:C2:7C:B9:F7:94:85:FC:22
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 614B2C36A2169422E50D707AAE88B4162EF16B19
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc353215-935f-47d2-9298-767ccc0eae1a.roa
Signing time: Fri 26 Sep 2025 20:39:27 +0000
ROA not before: Fri 26 Sep 2025 20:39:27 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 85.151.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:4b:2c:36:a2:16:94:22:e5:0d:70:7a:ae:88:b4:16:2e:f1:6b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 26 20:39:27 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=113792c07a4f8cebc790c58e6dbe65c0c7197e4e597c66498034583f7b8f75a7, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:1a:58:4c:d1:5e:d7:24:f9:5d:ea:90:43:
43:98:90:83:aa:c0:c3:3f:5c:cf:8d:b3:9d:f4:da:
77:00:ab:66:d6:45:2c:c1:af:90:50:3f:c7:60:01:
b6:e2:0b:ef:8f:cd:cc:aa:ec:d7:07:d8:14:4b:78:
28:3d:b7:82:b8:39:88:0f:36:76:cc:e5:3e:ac:00:
cf:f3:b7:a1:7d:61:71:90:93:88:67:19:32:e0:54:
35:10:f8:a6:28:53:bd:5e:f0:a4:c4:93:da:69:2e:
15:aa:09:ce:f5:c5:bd:a4:fc:d7:03:aa:cf:e3:77:
42:56:c2:7f:f6:7d:23:df:5c:d1:ec:d2:d0:34:15:
68:51:a4:0a:55:15:b9:6d:3c:71:c7:41:20:a5:bd:
e8:8a:4c:45:99:ac:2d:44:12:d6:83:07:45:41:97:
8e:50:38:5d:39:58:e9:b9:e8:8a:49:1c:11:63:ca:
22:04:e1:1f:7c:8e:b9:53:d4:3b:b2:6d:c6:6b:e0:
6c:0a:ca:6d:19:d6:c7:14:b5:c1:25:44:82:6a:e9:
e6:ef:04:aa:72:6f:b1:33:4b:65:c6:3a:d8:97:2f:
ae:02:00:d2:92:7c:0d:90:47:62:c9:75:de:6c:79:
17:67:63:56:c5:47:47:ac:bf:8d:fe:b7:52:35:5a:
a7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BB:DE:A3:A7:EB:45:F4:11:5D:13:C1:C2:7C:B9:F7:94:85:FC:22
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc353215-935f-47d2-9298-767ccc0eae1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:ef:8d:04:58:43:e4:10:07:4d:70:fc:49:cc:63:3f:54:b0:
d0:db:59:ab:c8:e8:cd:83:14:df:b8:19:58:1d:75:28:63:ed:
a5:94:a8:48:68:5d:66:d4:b1:01:87:70:a2:ad:ee:b2:15:12:
f7:fb:ee:4d:32:ce:ee:b4:08:b4:a4:cf:e1:62:a8:6e:89:b2:
e4:5d:cf:0d:45:61:17:14:ae:f9:d9:ac:d5:b3:15:9a:9e:f2:
56:c2:36:eb:88:7b:7b:a3:58:24:28:32:81:d8:a6:79:b4:25:
18:30:a8:5f:c9:86:33:a5:e0:33:1b:e4:0f:1d:e9:c1:3c:c1:
99:75:ce:e7:17:1f:ae:65:f9:62:8f:0a:8d:19:f3:c4:03:64:
f6:2c:2e:89:fb:68:a1:6c:be:55:ed:90:4e:38:4f:67:47:51:
53:51:22:09:eb:7a:13:c5:52:0e:c2:cd:0e:2a:65:1d:c4:e7:
1c:78:e0:c4:7c:1c:b4:0f:6d:0a:0a:69:eb:f2:ff:2b:97:2a:
c6:05:ff:77:bc:f1:06:70:21:b7:1e:24:d9:c3:b9:1b:64:67:
a8:b6:47:bf:50:dd:1c:e8:26:cd:85:e7:a8:51:8b:6b:f4:7d:
a0:0a:34:62:60:29:b8:b4:c3:b5:aa:52:c2:0a:b8:bd:1f:a8:
ac:2c:e2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:54:13 2025 by rpki-client