Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc50f617-7597-4f4e-b8f6-87763b28caf0.roa
File: fc50f617-7597-4f4e-b8f6-87763b28caf0.roa (raw, json)
Hash identifier: UnXBEE2BrtVKnWC3gJzcLTBS/aYN/1sDf6JnrY03k54=
Subject key identifier: 95:36:D6:70:28:90:4F:80:CA:E0:8D:F5:8E:57:37:AB:21:8E:49:2A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 42E7E6FF87C4B868A4177C0838289B439B19467A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc50f617-7597-4f4e-b8f6-87763b28caf0.roa
Signing time: Mon 16 Jun 2025 21:50:59 +0000
ROA not before: Mon 16 Jun 2025 21:50:59 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.121.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e7:e6:ff:87:c4:b8:68:a4:17:7c:08:38:28:9b:43:9b:19:46:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 16 21:50:59 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=757c0b83806f28d0063cb99fcca2326441f1495fed3742889b758e8bbfce3996, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d3:42:b2:70:b6:70:bd:31:97:dc:7b:76:8b:
26:c9:40:24:6c:a1:3b:67:d0:c5:41:0d:78:5b:73:
68:13:11:a8:4d:cb:91:39:86:46:bc:07:4e:f4:07:
74:00:06:dd:bd:15:d5:13:da:07:32:72:3c:2f:c1:
93:7e:10:69:04:9c:e5:b6:42:82:50:d7:f9:ee:52:
e6:0c:5a:cb:63:0a:9a:e6:04:ab:a9:b0:46:05:62:
e7:13:b4:29:e5:06:4c:d7:d9:bf:8d:2c:c5:f5:82:
c0:eb:54:ae:f4:48:1c:15:62:27:01:ca:65:c7:47:
43:5d:fd:7b:40:fa:28:4b:77:c0:3f:eb:cc:91:49:
01:23:d4:ba:e3:e9:7e:90:ec:38:1b:84:e0:6d:87:
c6:fd:e9:d4:f1:88:73:98:ec:ab:ea:11:5b:92:f9:
4d:ba:d8:32:ae:ac:9f:38:e7:91:8e:2f:d9:bd:0c:
e1:d1:c3:f0:9d:93:15:11:15:47:b5:e7:03:da:5e:
89:cf:cc:0d:dc:c9:9e:5c:a7:0b:35:45:ba:55:23:
25:4a:69:a8:a9:65:f9:df:5b:22:7e:a2:7a:88:64:
0a:6d:65:a6:a7:41:4b:f4:51:47:4f:90:3a:69:34:
f6:99:ba:0e:73:01:9a:5c:92:c8:ff:a1:a6:71:7e:
c3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:36:D6:70:28:90:4F:80:CA:E0:8D:F5:8E:57:37:AB:21:8E:49:2A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc50f617-7597-4f4e-b8f6-87763b28caf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.121.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c2:fb:43:ca:19:a0:0a:7b:7e:e5:7c:1d:ba:c9:0b:bc:35:1e:
9f:72:cd:f3:26:54:b0:9a:4b:3e:c9:da:e4:a1:5a:04:4e:96:
07:9c:a1:99:ce:50:15:16:bb:7c:72:4e:d8:9e:d6:5a:ec:2f:
d0:b7:bb:02:b1:67:6b:19:bc:35:ca:72:94:35:75:d0:48:37:
d7:40:f9:65:a5:c6:81:82:4e:80:e8:5c:6d:7c:e6:fe:3e:7f:
1a:51:51:ac:65:8b:19:9d:11:a8:76:de:98:2b:23:cd:4c:16:
1a:1c:f3:51:bc:15:17:76:a4:52:7a:78:64:b6:7a:b6:58:5f:
92:3e:b6:6b:99:6a:d1:89:2a:64:f8:73:b7:5a:84:e7:e3:6b:
cb:28:3c:3f:a8:90:dc:a5:a5:9a:cc:f5:10:d4:56:ac:5d:96:
93:21:02:a2:69:2d:b8:7a:57:aa:d2:cc:c3:47:14:a6:a9:ea:
4e:46:87:d6:35:51:d0:81:ba:9b:7f:0e:43:ad:5b:99:ae:42:
e6:a3:e1:e2:6d:a8:cf:5a:c4:d5:9f:1c:65:d0:82:f3:64:92:
29:6a:8c:34:ec:58:ee:f1:fb:e1:ab:14:5c:56:ed:67:8c:34:
7d:6a:70:4a:7e:64:2c:9e:42:09:10:eb:ac:e7:51:9c:7f:b3:
fb:01:70:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:06:13 2025 by rpki-client