Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/387a5e5f-3658-431f-b236-d486cddcae07.roa
File: 387a5e5f-3658-431f-b236-d486cddcae07.roa (raw, json)
Hash identifier: a5xa4jogv+HUlajMW7tZ+ng0zx1M4DpS602nLvT5rfM=
Subject key identifier: 07:A7:E3:B2:28:D4:86:7E:7F:B7:EE:F9:BE:97:04:A3:AD:BC:CE:55
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6EE9D480FB96993DB59A44A4DD2CAAED5996D34D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/387a5e5f-3658-431f-b236-d486cddcae07.roa
Signing time: Tue 04 Nov 2025 00:20:04 +0000
ROA not before: Tue 04 Nov 2025 00:20:04 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 83.119.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e9:d4:80:fb:96:99:3d:b5:9a:44:a4:dd:2c:aa:ed:59:96:d3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 4 00:20:04 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=e7a712f6503547122d0019cbe26349ddcdbb92a824be540f972bf188dc1337ce, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:26:6a:40:d9:72:7f:42:1d:51:f5:e7:92:2d:
a0:64:78:6d:72:6a:98:6f:f0:c6:a5:ec:7e:ac:ca:
20:86:c8:14:f7:52:87:75:12:d5:c1:50:85:9a:29:
cb:a2:1e:80:2e:7f:79:88:58:6c:44:8f:50:79:31:
2f:33:05:fd:af:22:07:3a:ea:ac:f9:6b:58:6f:73:
af:51:27:a1:95:33:2d:2a:84:ad:6e:14:d6:cd:e1:
09:b0:c5:e1:1c:83:ae:96:f8:66:07:54:65:b1:18:
1f:48:b5:59:7f:21:d7:5b:bc:6f:32:08:f6:7a:5b:
ad:63:da:c2:9a:cc:ba:02:4b:c0:4c:2d:45:78:91:
b0:ba:a9:21:4d:06:f0:87:b1:22:88:3c:17:54:48:
a9:08:4f:79:67:b9:b6:f0:3f:fc:bf:46:e9:52:dc:
25:1f:25:90:25:10:24:b5:43:e0:24:14:e8:e4:c5:
22:50:6a:46:dc:d0:4d:e4:2a:9f:b6:9a:cb:7b:84:
45:cc:b5:60:93:31:90:9b:99:9a:b6:ae:9d:5b:c8:
12:9a:2f:fa:2d:5b:10:f9:17:13:6a:44:c1:a4:f5:
ac:14:41:ff:25:c0:0b:72:d8:52:f1:56:2a:36:35:
6e:81:64:97:c6:3e:61:fb:a4:6f:5c:2b:67:d2:b7:
8e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A7:E3:B2:28:D4:86:7E:7F:B7:EE:F9:BE:97:04:A3:AD:BC:CE:55
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/387a5e5f-3658-431f-b236-d486cddcae07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.128.0/17
Signature Algorithm: sha256WithRSAEncryption
c8:d1:a0:1c:1c:c3:d4:69:66:c4:ea:7e:25:4d:c1:6c:10:f0:
fd:b7:44:b7:c1:40:38:02:14:61:e2:1a:20:78:6c:ef:10:bf:
2e:cc:ab:4f:ab:d6:5b:7e:ec:8d:13:e3:c3:99:be:55:25:b6:
41:52:1e:ac:bb:46:37:0a:43:2c:74:85:dd:c2:3e:e0:2b:18:
22:83:fc:5e:49:03:15:69:33:42:57:65:38:a9:c0:86:3c:4c:
16:8c:14:03:4b:1b:bd:84:e9:a1:2e:86:3e:37:ed:27:98:74:
14:a2:aa:95:0c:5c:8e:ce:3e:9a:c2:cd:b3:22:aa:30:07:bf:
a6:ea:48:a9:a6:78:e7:e1:ea:37:03:82:15:88:d9:d5:43:7a:
e3:c3:4f:9b:cc:ad:2a:2e:99:3b:69:0c:4e:74:d0:5a:43:19:
4f:9c:08:4c:e6:29:91:0f:6a:fc:5b:9b:5a:33:9a:e6:5f:67:
37:27:22:9c:01:7a:b6:a0:4a:9d:70:a0:04:12:5e:56:99:da:
a7:76:33:3b:3f:bd:51:22:75:1c:11:03:e9:b0:6e:22:3d:04:
21:45:42:0b:f6:26:f5:ab:0e:5b:4f:d0:e6:2f:d3:76:34:3e:
3e:43:19:52:6a:91:e7:4a:c5:f3:41:28:04:89:91:dc:a3:f4:
6f:54:e0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:00 2025 by rpki-client