Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc50f617-7597-4f4e-b8f6-87763b28caf0.roa
File: fc50f617-7597-4f4e-b8f6-87763b28caf0.roa (raw, json)
Hash identifier: 23FjT8xHkdIh5tiIPq05Qe9j+EmljGIPlMproSLCH7A=
Subject key identifier: 7D:71:87:5A:4A:8C:1C:FC:55:AF:9F:5B:7D:12:C9:A5:07:5B:68:53
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7C8EFD31D10BE5E4B78984B22F6B9CD331DA8B6B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc50f617-7597-4f4e-b8f6-87763b28caf0.roa
Signing time: Fri 26 Sep 2025 20:20:03 +0000
ROA not before: Fri 26 Sep 2025 20:20:03 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.121.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:8e:fd:31:d1:0b:e5:e4:b7:89:84:b2:2f:6b:9c:d3:31:da:8b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 26 20:20:03 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=8f847c622933a448c2c51fe160a61d5acc592cc592debfbda0b418426686cc2d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:14:3c:53:07:bd:90:b8:6d:56:fb:98:55:
71:b9:84:8b:3b:8d:3a:41:3d:6c:c9:46:42:06:c0:
8e:23:96:9d:95:5c:e9:f0:a1:40:b8:5f:3b:b8:41:
af:97:e8:03:ba:3d:86:27:ec:1b:8f:8a:5c:4b:df:
52:9a:15:bf:80:ac:f5:01:10:7a:28:a3:e4:ac:0d:
b7:0e:49:ed:19:3f:76:e6:a3:ab:35:e6:d2:fb:b9:
3d:ed:83:2c:7f:09:b3:61:09:45:bf:85:b0:01:30:
fa:90:37:2f:b7:d7:a1:c2:2e:ca:72:5e:f6:cb:85:
51:fb:09:d7:68:70:7b:dd:4f:cc:4b:7c:fd:49:3f:
99:46:d5:a0:d7:07:51:b9:b2:db:dc:3a:1f:07:19:
b9:bf:08:68:1c:a2:ef:ab:01:70:29:af:d6:7b:6d:
18:b4:82:2e:aa:9f:0f:5a:05:e2:4e:b5:7c:9f:df:
5b:82:b7:96:43:6d:66:04:59:82:1c:9d:6b:e2:99:
06:52:3c:70:93:a5:b1:32:65:83:48:7a:53:22:c3:
49:ce:30:e4:e2:f9:c8:3f:9c:ec:a9:af:ce:8b:bc:
21:be:0b:92:43:04:7a:cc:fb:8f:bc:55:f7:55:e5:
10:d0:0f:3b:0c:67:7d:80:e5:4b:26:88:16:78:fb:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:71:87:5A:4A:8C:1C:FC:55:AF:9F:5B:7D:12:C9:A5:07:5B:68:53
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc50f617-7597-4f4e-b8f6-87763b28caf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.121.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:87:12:de:7c:3c:4e:ff:7b:d8:d1:4c:45:45:25:e0:78:4d:
9e:73:ea:eb:5a:b3:df:1e:2c:a1:27:56:31:0a:d1:d6:20:3e:
70:58:f4:8e:38:87:9c:66:f9:fe:0e:f1:ec:f2:fd:d0:fd:c8:
23:e5:6c:4b:7d:29:c4:a5:72:4e:99:0b:1b:31:62:16:bc:98:
cc:a4:df:9c:e1:1e:6a:fd:70:25:f4:a0:98:61:48:2e:4e:66:
92:d3:c4:39:63:f8:c5:bc:33:6b:15:74:48:8a:eb:de:1d:65:
0a:4d:c1:8e:8e:e3:d1:f9:38:af:0d:c4:59:46:01:9f:38:de:
5b:ad:79:eb:b4:66:12:ce:4e:30:1f:7d:da:41:45:db:42:16:
e7:ea:26:58:ab:8e:d0:3a:3a:cd:b4:dc:2a:4b:39:26:eb:c9:
54:8d:89:35:9c:d5:9b:0b:7d:aa:57:4f:ea:b9:56:5b:02:03:
37:ed:4f:55:43:25:a9:b0:a7:bb:b8:58:65:b7:f2:4c:a9:de:
6f:f5:76:da:19:c1:4a:45:28:17:92:8e:b5:19:8b:b1:47:84:
95:25:bd:aa:17:26:2f:e4:26:a4:b1:2b:f7:9b:46:70:1b:90:
af:e9:30:ba:10:e4:54:bc:c4:48:3c:e6:5a:e7:7c:48:b9:02:
51:5e:7d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:54:57 2025 by rpki-client