Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80a19bac-b522-4340-8501-74870117a3ce.roa
File: 80a19bac-b522-4340-8501-74870117a3ce.roa (raw, json)
Hash identifier: EXXs2a8J9MWo4+CJ5bavnquyqtK2u6WuhJWx7BTsCRU=
Subject key identifier: 4A:CD:78:AD:BD:CA:5B:80:71:C4:11:AA:F3:91:D6:8A:10:84:32:2D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 36E12CC6FA06E0D5AA3C47124E7DF50FA66519E0
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80a19bac-b522-4340-8501-74870117a3ce.roa
Signing time: Fri 11 Jul 2025 21:00:42 +0000
ROA not before: Fri 11 Jul 2025 21:00:42 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.80.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:e1:2c:c6:fa:06:e0:d5:aa:3c:47:12:4e:7d:f5:0f:a6:65:19:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 11 21:00:42 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=f931ff529f01f43850a7c5bd603b6e5e989478077f9cd04f20403fb0b8784cac, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cd:c8:a6:1e:6c:f1:ba:cd:72:44:7b:8a:64:
54:35:84:01:08:66:37:38:96:40:b9:e5:d2:29:ef:
58:1e:81:ea:de:7c:a6:a3:52:bc:39:a7:5f:6a:82:
b8:71:e5:6f:cd:72:c2:1b:7b:7d:57:bd:06:85:3d:
63:63:77:fc:d8:6c:1c:d5:8a:46:e2:38:5f:ca:16:
99:95:98:63:43:9f:05:92:63:8c:e1:ed:74:fd:d3:
fc:4c:7f:71:bc:5f:72:68:56:64:74:45:0a:ae:bb:
75:4e:89:dd:35:8e:3a:89:a4:48:f1:55:80:d3:be:
c1:fd:24:c8:56:22:ca:7e:7d:a5:7a:46:b7:f5:8b:
37:ce:c8:a5:39:df:48:e5:0e:e0:39:46:e3:aa:d4:
59:72:ea:78:a5:2f:40:43:09:49:d9:2a:68:3b:bf:
2e:f7:2a:a0:c7:42:4a:da:d9:b3:15:f5:b1:cc:c0:
60:15:70:a0:01:a4:f9:a1:db:f4:2c:0f:66:ce:32:
c1:b1:de:57:e2:18:66:82:ce:37:02:a9:ae:d0:b2:
c1:c0:e3:64:a8:53:a8:7b:14:cb:02:7e:a2:97:7e:
ed:7b:aa:97:29:e8:50:e0:df:05:96:0e:f7:f1:42:
3b:d0:a5:d2:64:ee:b7:64:aa:b0:8a:67:f2:7b:02:
30:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CD:78:AD:BD:CA:5B:80:71:C4:11:AA:F3:91:D6:8A:10:84:32:2D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80a19bac-b522-4340-8501-74870117a3ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.80.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:10:ea:48:82:56:73:27:e4:26:0a:d3:d3:6c:da:b4:4f:68:
fd:5e:52:2e:22:bf:3b:01:92:fc:66:dc:84:ec:1b:59:db:14:
13:b3:e4:ee:db:8a:6a:a3:f4:0a:ed:b1:a7:4e:f9:91:fb:b3:
a3:15:f5:71:44:34:53:04:5f:02:2c:6a:14:38:1e:c1:77:a8:
6f:c4:34:f2:87:2e:a4:6b:50:8e:55:27:f8:1b:3f:12:18:c8:
94:4a:1d:78:fc:50:74:24:5e:2e:cd:14:02:1a:9a:81:41:31:
3f:c5:14:c5:23:21:e6:3f:0a:3c:0e:2d:6c:40:dd:01:0a:1f:
e2:9a:59:1a:c1:af:b3:7a:2d:8e:e3:37:ae:53:47:d4:d8:c3:
ad:3c:cf:77:50:e8:2e:68:25:41:8e:e7:e6:85:56:ac:99:d2:
08:77:14:77:b4:a6:d0:e1:15:49:28:20:e7:82:cf:23:ba:d8:
e1:6d:aa:78:77:d8:23:a1:93:f5:d2:d3:12:a2:1b:37:d2:22:
1c:da:6f:94:3e:68:76:69:55:b8:3c:49:62:b8:2b:4b:02:2b:
cf:b2:8a:35:fe:d5:05:4e:e7:a9:e0:e5:6d:83:0d:5c:ea:f9:
4d:85:a6:b4:ea:09:58:f2:a9:bf:42:00:2c:13:6a:e3:87:ea:
00:54:77:77
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUNuEsxvoG4NWqPEcSTn31D6ZlGeAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA3MTEyMTAwNDJaFw0yNTA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQGY5MzFmZjUyOWYwMWY0Mzg1MGE3YzViZDYwM2I2ZTVlOTg5NDc4MDc3Zjlj
ZDA0ZjIwNDAzZmIwYjg3ODRjYWMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN3NyKYebPG6zXJEe4pkVDWEAQhmNziWQLnl0invWB6B6t58pqNSvDmnX2qC
uHHlb81ywht7fVe9BoU9Y2N3/NhsHNWKRuI4X8oWmZWYY0OfBZJjjOHtdP3T/Ex/
cbxfcmhWZHRFCq67dU6J3TWOOomkSPFVgNO+wf0kyFYiyn59pXpGt/WLN87IpTnf
SOUO4DlG46rUWXLqeKUvQEMJSdkqaDu/LvcqoMdCStrZsxX1sczAYBVwoAGk+aHb
9CwPZs4ywbHeV+IYZoLONwKprtCywcDjZKhTqHsUywJ+opd+7XuqlynoUODfBZYO
9/FCO9Cl0mTut2SqsIpn8nsCMGECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRKzXit
vcpbgHHEEarzkdaKEIQyLTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ODBhMTliYWMtYjUyMi00MzQwLTg1MDEtNzQ4NzAxMTdhM2NlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNQMA0G
CSqGSIb3DQEBCwUAA4IBAQBWEOpIglZzJ+QmCtPTbNq0T2j9XlIuIr87AZL8ZtyE
7BtZ2xQTs+Tu24pqo/QK7bGnTvmR+7OjFfVxRDRTBF8CLGoUOB7Bd6hvxDTyhy6k
a1COVSf4Gz8SGMiUSh14/FB0JF4uzRQCGpqBQTE/xRTFIyHmPwo8Di1sQN0BCh/i
mlkawa+zei2O4zeuU0fU2MOtPM93UOguaCVBjufmhVasmdIIdxR3tKbQ4RVJKCDn
gs8jutjhbap4d9gjoZP10tMSohs30iIc2m+UPmh2aVW4PEliuCtLAivPsoo1/tUF
Tuep4OVtgw1c6vlNhaa06glY8qm/QgAsE2rjh+oAVHd3
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:18:25 2025 by rpki-client