Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9c8ae942-f8e3-4cdb-8c6e-8aaeda879863.roa
File: 9c8ae942-f8e3-4cdb-8c6e-8aaeda879863.roa (raw, json)
Hash identifier: etIKrflUdgB7sv50nkKx9BTv+0IrnOHqsCJkcJ5e6Mw=
Subject key identifier: A4:4E:AD:49:F1:A0:9F:8D:B4:26:28:DF:01:EC:AC:4B:01:4C:E6:7A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5B06A9C64787D2B1F9EF795CCF3BB4D89547113C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9c8ae942-f8e3-4cdb-8c6e-8aaeda879863.roa
Signing time: Fri 31 Oct 2025 02:00:19 +0000
ROA not before: Fri 31 Oct 2025 02:00:19 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.206.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:06:a9:c6:47:87:d2:b1:f9:ef:79:5c:cf:3b:b4:d8:95:47:11:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 31 02:00:19 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=9aa1347d6383a24c8d19fcedf7964354dbbf6e867f43318bb88bcd618a250173, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:4c:ca:54:a7:42:df:9c:a5:9b:67:4c:f3:65:
94:bc:f0:98:25:16:fa:f3:79:c0:7b:00:d0:f3:71:
d3:88:ad:ce:f1:1d:1f:1f:67:09:db:12:13:3c:40:
84:9e:79:13:89:89:89:de:90:c5:05:72:90:ea:9a:
11:91:c0:7b:e7:62:51:a4:74:2c:f6:5f:34:cb:d5:
2d:54:ff:a2:26:2d:0f:c4:d0:6a:af:c5:78:51:df:
70:7e:da:1f:24:d0:da:1d:3f:d5:c6:e9:25:1c:6f:
7d:3d:cf:07:59:b2:23:8b:cf:fe:08:16:5b:39:26:
e5:6f:15:1e:34:1a:c6:f4:03:d2:8a:e3:dd:82:e0:
77:e9:5c:97:16:72:72:fb:ac:ff:75:d6:e2:bc:ea:
d7:2f:96:00:85:5b:0e:44:59:8f:ef:4d:48:1b:fd:
45:ab:90:e4:40:cb:bf:e0:bd:de:ee:6f:a5:98:97:
9d:89:82:65:71:24:fc:69:8d:28:6a:9d:8b:ee:b2:
ca:59:f1:24:c6:b4:a5:ad:47:9b:f5:fc:74:11:21:
2a:a0:33:42:b4:80:cd:89:10:1a:0e:18:c2:30:3b:
5f:98:79:95:56:21:1f:c2:1b:fa:16:63:4a:ea:24:
e8:fd:17:a6:de:33:24:ab:0b:a5:c3:57:a8:e7:a8:
8b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4E:AD:49:F1:A0:9F:8D:B4:26:28:DF:01:EC:AC:4B:01:4C:E6:7A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9c8ae942-f8e3-4cdb-8c6e-8aaeda879863.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.206.0.0/15
Signature Algorithm: sha256WithRSAEncryption
92:98:19:b9:69:38:c5:43:cc:07:57:2f:63:02:f9:6e:27:10:
1f:88:b0:d2:eb:cf:a7:49:da:26:04:2f:dd:87:82:96:b1:1d:
a8:54:ee:19:5a:ab:46:e1:59:72:12:71:6d:68:79:b8:b5:55:
53:00:e7:22:80:de:fe:6a:a4:de:1c:bd:6c:b0:8d:d1:ca:d6:
18:98:46:b1:09:3c:c0:8d:63:21:5b:1c:4a:67:d9:9c:87:91:
7a:68:0b:0c:fe:34:de:66:d3:41:94:fa:61:f1:93:67:e9:89:
ee:3f:1d:9b:52:c1:d8:51:78:43:d5:1a:d8:fe:e9:ee:23:92:
14:fd:26:c0:41:f9:f5:96:8f:1b:38:91:44:bc:88:51:64:bd:
ce:1b:d8:36:3e:a1:5a:bd:66:5a:0d:f0:75:a8:8b:2a:f8:78:
50:af:14:b1:e5:68:ce:77:94:54:37:d4:5c:eb:20:10:9d:c9:
77:20:63:75:b2:3a:94:b5:7b:a7:66:f4:df:16:04:74:0a:91:
cb:6c:59:c3:a1:6f:42:af:0d:17:a1:be:6f:d7:97:a9:dd:b6:
58:78:51:aa:a7:12:cb:7b:9c:a2:b6:5e:3e:e9:f3:36:06:13:
59:0e:f3:a6:f8:60:d0:2a:ea:0a:9c:e3:42:f1:a3:b3:0e:6c:
99:68:af:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:21:09 2025 by rpki-client