Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/387a5e5f-3658-431f-b236-d486cddcae07.roa
File: 387a5e5f-3658-431f-b236-d486cddcae07.roa (raw, json)
Hash identifier: Qe5h6k91y27Cj/9KFre0lu3aK1q7uN3018W645zyw6o=
Subject key identifier: F2:DB:FF:41:F4:C5:D4:18:C6:2C:43:2E:DF:E6:8E:5A:A5:A4:B7:1A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0A999FE945F8108D5EF439CAB81A181E0D04797B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/387a5e5f-3658-431f-b236-d486cddcae07.roa
Signing time: Fri 25 Jul 2025 17:00:03 +0000
ROA not before: Fri 25 Jul 2025 17:00:03 +0000
ROA not after: Fri 29 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 83.119.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:99:9f:e9:45:f8:10:8d:5e:f4:39:ca:b8:1a:18:1e:0d:04:79:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 25 17:00:03 2025 GMT
Not After : Aug 29 23:59:59 2025 GMT
Subject: serialNumber=7d9ecf6aa45a552e4e0850601ed0ce7fec1233283c874bdcde2099916d48093d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2f:6b:3e:f7:28:25:37:cf:4a:82:b0:d5:40:
b8:40:31:81:b7:68:04:d0:f9:ee:a5:42:02:3b:2f:
57:9c:31:12:d8:4d:16:9c:27:17:4e:18:68:77:00:
21:29:7a:28:df:34:5a:dc:74:25:59:cd:69:38:24:
ec:b7:1d:a3:21:03:a0:e5:e3:bc:8f:86:88:5e:fb:
ec:dc:a8:6c:1d:d7:94:6e:5a:0c:fe:9c:3d:88:3c:
7b:f3:c6:79:f9:90:2e:9e:27:d6:8e:75:a7:e6:c1:
98:e0:26:9f:4f:e6:6e:ec:84:b0:76:2e:e9:3c:af:
79:9f:66:41:f2:bc:e2:91:b4:64:84:42:89:1d:fa:
90:ea:3f:cb:cf:7e:c5:22:f7:67:3e:ea:d0:76:bf:
1f:21:b5:a0:33:42:01:74:3b:ba:98:b2:28:a5:3f:
5e:19:ff:58:57:6a:62:94:f2:32:48:21:fd:d1:59:
cb:b8:8f:70:16:90:64:39:58:6b:56:3e:c8:bc:f4:
25:25:85:c6:00:10:45:f8:2f:23:d8:b5:ac:cd:fc:
51:b7:75:20:90:38:f5:1d:bd:c2:3c:d0:b9:aa:f9:
4f:04:d2:13:b7:f5:c5:05:cc:dc:b9:bd:ad:e7:73:
8c:04:3d:18:f0:c0:e3:a2:42:f3:9e:3c:82:b9:ac:
ed:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DB:FF:41:F4:C5:D4:18:C6:2C:43:2E:DF:E6:8E:5A:A5:A4:B7:1A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/387a5e5f-3658-431f-b236-d486cddcae07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.128.0/17
Signature Algorithm: sha256WithRSAEncryption
bd:01:58:70:7c:3d:85:70:1c:61:af:d3:56:43:cd:64:4d:98:
71:d9:f8:d5:70:f5:c5:c0:16:85:94:84:5f:de:a0:78:47:0f:
98:5c:d6:26:c6:c3:4d:e3:ef:a7:af:82:86:c1:5a:03:1a:44:
5e:fa:25:00:cc:e4:a8:b1:a1:45:e1:4c:5b:e1:cc:6d:06:44:
eb:5c:9c:3e:89:1f:f0:e4:15:27:d9:eb:1b:87:78:b3:68:1d:
d5:37:5b:0f:11:52:bc:0d:54:b7:f9:c5:05:03:09:67:a0:d2:
1d:c1:9e:bd:5a:fc:12:2b:16:da:3c:3a:44:47:66:54:a2:db:
e5:96:46:e5:58:67:19:d2:28:6a:63:27:ea:bb:9c:d4:c8:36:
c5:ca:99:c4:1f:d1:a7:84:91:9a:ba:5a:5f:65:2d:fb:7e:6e:
b6:d4:91:8b:b2:00:a5:62:ad:b2:2f:40:4f:9e:95:0c:e4:ec:
b7:ff:36:4e:89:6e:b3:4f:ca:57:a9:9e:f8:ed:03:12:5a:2c:
08:e1:6a:3a:45:82:bd:af:a4:63:ce:ed:d4:0b:49:d1:2c:4b:
78:84:59:ac:6a:b7:d4:3f:b8:d0:33:6d:a5:df:93:60:62:83:
bf:22:da:5c:d7:68:ae:cf:e2:38:29:61:08:27:a5:cd:ed:1d:
28:87:25:4c
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUCpmf6UX4EI1e9DnKuBoYHg0EeXswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA3MjUxNzAwMDNaFw0yNTA4MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQDdkOWVjZjZhYTQ1YTU1MmU0ZTA4NTA2MDFlZDBjZTdmZWMxMjMzMjgzYzg3
NGJkY2RlMjA5OTkxNmQ0ODA5M2QxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKYvaz73KCU3z0qCsNVAuEAxgbdoBND57qVCAjsvV5wxEthNFpwnF04YaHcA
ISl6KN80Wtx0JVnNaTgk7LcdoyEDoOXjvI+GiF777NyobB3XlG5aDP6cPYg8e/PG
efmQLp4n1o51p+bBmOAmn0/mbuyEsHYu6TyveZ9mQfK84pG0ZIRCiR36kOo/y89+
xSL3Zz7q0Ha/HyG1oDNCAXQ7upiyKKU/Xhn/WFdqYpTyMkgh/dFZy7iPcBaQZDlY
a1Y+yLz0JSWFxgAQRfgvI9i1rM38Ubd1IJA49R29wjzQuar5TwTSE7f1xQXM3Lm9
redzjAQ9GPDA46JC8548grms7YMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTy2/9B
9MXUGMYsQy7f5o5apaS3GjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
Mzg3YTVlNWYtMzY1OC00MzFmLWIyMzYtZDQ4NmNkZGNhZTA3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB1N3gDAN
BgkqhkiG9w0BAQsFAAOCAQEAvQFYcHw9hXAcYa/TVkPNZE2Ycdn41XD1xcAWhZSE
X96geEcPmFzWJsbDTePvp6+ChsFaAxpEXvolAMzkqLGhReFMW+HMbQZE61ycPokf
8OQVJ9nrG4d4s2gd1TdbDxFSvA1Ut/nFBQMJZ6DSHcGevVr8EisW2jw6REdmVKLb
5ZZG5VhnGdIoamMn6ruc1Mg2xcqZxB/Rp4SRmrpaX2Ut+35uttSRi7IApWKtsi9A
T56VDOTst/82Tolus0/KV6me+O0DElosCOFqOkWCva+kY87t1AtJ0SxLeIRZrGq3
1D+40DNtpd+TYGKDvyLaXNdors/iOClhCCelze0dKIclTA==
-----END CERTIFICATE-----
Generated at Tue Aug 5 08:21:51 2025 by rpki-client