Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/21ed4032-a4d1-486a-97f8-a4eed91bb627.roa
File: 21ed4032-a4d1-486a-97f8-a4eed91bb627.roa (raw, json)
Hash identifier: dB1eTTGzkD9e/9x0ah47zreMkq5wbrmytQ83sQ2VQo8=
Subject key identifier: 4E:13:85:AD:1F:DC:94:93:BC:70:8C:99:04:74:05:F0:0A:CE:FA:E8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6C9631ACA334BE77EF78DCF447B57864593AFB88
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/21ed4032-a4d1-486a-97f8-a4eed91bb627.roa
Signing time: Mon 31 Mar 2025 21:30:06 +0000
ROA not before: Mon 31 Mar 2025 21:30:06 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 194.52.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:96:31:ac:a3:34:be:77:ef:78:dc:f4:47:b5:78:64:59:3a:fb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Mar 31 21:30:06 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:ac:dc:ba:de:5e:6b:01:19:65:8e:de:57:
4f:25:9a:1e:9a:9e:18:0c:3a:d0:ca:a5:77:f6:24:
b6:eb:cd:42:ca:06:ad:d2:be:15:6d:80:35:2d:3a:
22:a6:d1:28:19:71:ea:be:89:17:f8:19:76:07:f4:
b6:70:21:06:45:dd:ca:4a:4b:a3:54:03:d8:e1:bc:
1d:40:7a:dc:8c:48:1d:7c:79:8b:05:95:f8:a6:d6:
c9:3b:c7:28:29:ac:ac:3f:ee:ba:07:00:d8:58:f7:
f5:91:37:7b:40:a0:a5:c6:34:71:84:64:b6:73:cb:
d8:fd:3d:92:98:1d:d0:3e:bc:b2:c9:af:23:7c:b9:
32:ea:df:71:ac:99:43:1f:26:40:d2:57:cd:48:36:
c5:3f:d3:3f:3c:96:ff:d6:35:24:1d:97:6c:70:46:
0f:37:29:6f:d5:22:63:78:56:2d:0b:69:d9:3f:cf:
55:4f:2a:c7:34:eb:4c:ce:e8:52:87:61:2a:18:36:
84:76:79:3b:2b:51:a6:f4:38:33:9e:5b:28:8b:40:
2b:9d:b1:f6:34:7f:4d:5c:32:0e:5e:40:7e:c6:d4:
e6:e8:1c:96:3b:4a:74:e0:22:76:f3:cf:d2:64:c9:
31:d8:c4:a9:30:2a:f3:e8:d5:51:82:34:b0:25:89:
28:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:13:85:AD:1F:DC:94:93:BC:70:8C:99:04:74:05:F0:0A:CE:FA:E8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/21ed4032-a4d1-486a-97f8-a4eed91bb627.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.52.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:b2:91:f2:55:8c:48:b0:ef:b6:6f:71:1f:89:69:40:7b:11:
f1:2e:f4:2a:cf:cb:22:2b:f2:a3:78:90:d8:ad:da:a2:75:93:
c1:0b:eb:8a:01:c0:bc:5d:a9:e3:cf:05:fe:72:cc:00:a1:f1:
0b:7d:0c:03:1e:b3:d8:a8:50:a2:fd:79:0a:fd:68:d1:54:e5:
09:f7:3f:fd:06:47:2d:1a:8d:50:00:05:48:ef:55:bb:24:e7:
7f:cf:8a:8d:4f:b3:7f:7f:66:73:4f:df:18:21:21:0e:f8:87:
88:f5:1c:3f:4d:15:13:34:32:9a:83:2c:90:1e:92:c1:02:fa:
4e:10:3a:a2:37:85:d3:3d:05:42:a9:4e:9a:fb:20:32:99:0f:
d7:d5:d1:85:34:52:e8:dc:93:41:0f:6d:c5:7e:64:34:00:0f:
6e:76:51:ce:de:f4:89:1a:8a:72:e0:8c:5e:20:ba:f3:f7:e8:
01:ef:64:64:c3:2a:9c:a0:be:75:48:d8:75:e4:19:b8:02:12:
c9:98:e6:bb:65:b7:13:ec:6c:39:94:0c:a9:92:9f:d7:ba:c5:
06:fd:e1:e4:50:06:8e:e0:c1:c6:e0:40:69:1f:a7:fb:6c:64:
3d:e9:7f:53:b0:db:61:cf:f6:0d:d1:d7:22:48:ea:ef:cd:b5:
c0:a4:a8:9b
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUbJYxrKM0vnfveNz0R7V4ZFk6+4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTAzMzEyMTMwMDZaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDkyOTJlMDZjMmZmZjg5ZTg3NTBkZTg5YTc3NzE1YWMxNjBmYWViODEyMTFi
ODJiNzEyMjc2YmNiNmZjMTBlYWQxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMlFrNy63l5rARlljt5XTyWaHpqeGAw60Mqld/YktuvNQsoGrdK+FW2ANS06
IqbRKBlx6r6JF/gZdgf0tnAhBkXdykpLo1QD2OG8HUB63IxIHXx5iwWV+KbWyTvH
KCmsrD/uugcA2Fj39ZE3e0CgpcY0cYRktnPL2P09kpgd0D68ssmvI3y5MurfcayZ
Qx8mQNJXzUg2xT/TPzyW/9Y1JB2XbHBGDzcpb9UiY3hWLQtp2T/PVU8qxzTrTM7o
UodhKhg2hHZ5OytRpvQ4M55bKItAK52x9jR/TVwyDl5AfsbU5ugcljtKdOAidvPP
0mTJMdjEqTAq8+jVUYI0sCWJKLMCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBROE4Wt
H9yUk7xwjJkEdAXwCs766DAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MjFlZDQwMzItYTRkMS00ODZhLTk3ZjgtYTRlZWQ5MWJiNjI3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMI0MA0G
CSqGSIb3DQEBCwUAA4IBAQCkspHyVYxIsO+2b3EfiWlAexHxLvQqz8siK/KjeJDY
rdqidZPBC+uKAcC8XanjzwX+cswAofELfQwDHrPYqFCi/XkK/WjRVOUJ9z/9Bkct
Go1QAAVI71W7JOd/z4qNT7N/f2ZzT98YISEO+IeI9Rw/TRUTNDKagyyQHpLBAvpO
EDqiN4XTPQVCqU6a+yAymQ/X1dGFNFLo3JNBD23FfmQ0AA9udlHO3vSJGopy4Ixe
ILrz9+gB72RkwyqcoL51SNh15Bm4AhLJmOa7ZbcT7Gw5lAypkp/XusUG/eHkUAaO
4MHG4EBpH6f7bGQ96X9TsNthz/YN0dciSOrvzbXApKib
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:05 2025 by rpki-client