Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f9c2130f-6f88-42ac-853e-f39d188adb6d.roa
File: f9c2130f-6f88-42ac-853e-f39d188adb6d.roa (raw, json)
Hash identifier: uzSzGm8FzYXgBxv4+es2ko6lOYD1SoqOEvDri8SQNQY=
Subject key identifier: C2:A8:A9:EF:BE:CF:B9:26:84:03:47:C6:79:A9:55:12:82:62:2F:A8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7199D20750970DE5882E7C63F487C8C83DD76F70
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f9c2130f-6f88-42ac-853e-f39d188adb6d.roa
Signing time: Sat 31 May 2025 00:50:27 +0000
ROA not before: Sat 31 May 2025 00:50:27 +0000
ROA not after: Sat 05 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.232.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:99:d2:07:50:97:0d:e5:88:2e:7c:63:f4:87:c8:c8:3d:d7:6f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 31 00:50:27 2025 GMT
Not After : Jul 5 23:59:59 2025 GMT
Subject: serialNumber=929ba1995b00c26ee61d3ed16c5f6164ab2d6f6371e16f338ff0b4c11c4abe5b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3b:37:0d:06:ba:03:9e:1e:83:2c:c6:75:96:
81:21:0f:e3:52:58:85:aa:da:1e:59:3e:d4:87:b5:
25:28:32:cc:ff:c3:ac:60:af:cf:eb:fc:9c:ae:ec:
11:62:ad:ec:2d:69:57:4d:d4:b0:24:ae:4c:78:a1:
53:f5:7f:93:86:f8:cb:3e:c9:7d:57:db:b1:2e:64:
ff:de:2c:73:35:38:8e:69:1d:fb:a6:d0:23:b9:0d:
e5:65:53:ac:ca:f4:d4:01:09:14:39:29:fe:2b:fd:
8e:84:70:9a:cd:83:85:c3:cc:b5:bf:44:99:49:e9:
de:49:4b:a0:71:99:af:d9:1f:47:a1:00:c3:2d:5c:
2c:56:9d:87:23:5c:b4:34:5b:f8:d2:7e:9b:6a:4d:
74:1b:a1:84:4b:a7:c4:9d:ba:0c:de:42:b2:aa:8d:
9a:34:03:4c:d4:51:18:8b:68:76:05:23:2c:76:1d:
f2:9d:20:94:bb:ed:9b:73:63:6e:61:d3:c0:ea:66:
af:c5:98:6b:b8:dd:81:e7:fd:86:4b:dc:0b:32:7b:
14:a6:5e:05:8e:c1:80:9b:09:b5:09:2d:43:5d:07:
b4:97:03:76:d8:06:02:e2:7e:0d:c7:e0:c1:ab:ff:
23:57:42:61:c0:8a:ad:d6:83:50:08:44:04:b7:0c:
e7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A8:A9:EF:BE:CF:B9:26:84:03:47:C6:79:A9:55:12:82:62:2F:A8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f9c2130f-6f88-42ac-853e-f39d188adb6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.232.0.0/15
Signature Algorithm: sha256WithRSAEncryption
cb:aa:94:4d:9d:02:74:e9:6d:ef:7b:89:46:d1:50:e6:a5:eb:
ca:3d:02:d0:c6:06:99:fc:68:01:9e:29:48:80:5c:3c:44:0d:
c6:2d:b2:c4:0e:d8:e5:51:49:0f:82:14:dd:11:ae:8e:59:ec:
c3:79:b9:d9:95:0f:b4:5f:f2:09:48:6c:85:96:e0:3b:71:c7:
1e:13:3a:82:a6:ff:1c:09:35:e9:ce:d8:52:fa:e2:c9:31:c0:
04:b7:eb:80:25:27:75:7d:d8:30:55:42:dc:97:58:bc:60:b8:
df:48:47:2c:16:6c:e5:aa:85:eb:80:81:9f:5e:45:bf:b0:9b:
93:fc:79:5e:8a:12:63:4c:af:0f:d4:fb:bc:c9:2a:64:79:a4:
cf:82:1d:43:33:9e:87:be:b6:c4:16:32:2d:91:8e:99:6a:51:
69:e9:21:d0:66:73:e0:2f:9c:dd:a5:0b:4b:f5:13:09:38:4a:
e7:87:35:c1:bf:c9:86:80:15:62:bd:66:02:06:56:0f:9e:b9:
bc:35:03:0e:9c:6d:85:4d:f0:40:34:37:3c:2d:4a:f6:44:97:
16:e2:a7:12:cc:23:51:ce:e3:43:4e:48:b2:1f:7e:5a:67:91:
ff:44:5f:ac:f1:86:d3:f1:3e:db:bd:03:2e:ae:51:b1:ef:75:
85:25:c6:1d
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUcZnSB1CXDeWILnxj9IfIyD3Xb3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA1MzEwMDUwMjdaFw0yNTA3MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDkyOWJhMTk5NWIwMGMyNmVlNjFkM2VkMTZjNWY2MTY0YWIyZDZmNjM3MWUx
NmYzMzhmZjBiNGMxMWM0YWJlNWIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM47Nw0GugOeHoMsxnWWgSEP41JYharaHlk+1Ie1JSgyzP/DrGCvz+v8nK7s
EWKt7C1pV03UsCSuTHihU/V/k4b4yz7JfVfbsS5k/94sczU4jmkd+6bQI7kN5WVT
rMr01AEJFDkp/iv9joRwms2DhcPMtb9EmUnp3klLoHGZr9kfR6EAwy1cLFadhyNc
tDRb+NJ+m2pNdBuhhEunxJ26DN5CsqqNmjQDTNRRGItodgUjLHYd8p0glLvtm3Nj
bmHTwOpmr8WYa7jdgef9hkvcCzJ7FKZeBY7BgJsJtQktQ10HtJcDdtgGAuJ+Dcfg
wav/I1dCYcCKrdaDUAhEBLcM59UCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTCqKnv
vs+5JoQDR8Z5qVUSgmIvqDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZjljMjEzMGYtNmY4OC00MmFjLTg1M2UtZjM5ZDE4OGFkYjZkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPoMA0G
CSqGSIb3DQEBCwUAA4IBAQDLqpRNnQJ06W3ve4lG0VDmpevKPQLQxgaZ/GgBnilI
gFw8RA3GLbLEDtjlUUkPghTdEa6OWezDebnZlQ+0X/IJSGyFluA7ccceEzqCpv8c
CTXpzthS+uLJMcAEt+uAJSd1fdgwVULcl1i8YLjfSEcsFmzlqoXrgIGfXkW/sJuT
/HleihJjTK8P1Pu8ySpkeaTPgh1DM56HvrbEFjItkY6ZalFp6SHQZnPgL5zdpQtL
9RMJOErnhzXBv8mGgBVivWYCBlYPnrm8NQMOnG2FTfBANDc8LUr2RJcW4qcSzCNR
zuNDTkiyH35aZ5H/RF+s8YbT8T7bvQMurlGx73WFJcYd
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:50:47 2025 by rpki-client