Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/157e5e79-2e0b-4b8f-adb2-fd57f3d28ab6.roa
File: 157e5e79-2e0b-4b8f-adb2-fd57f3d28ab6.roa (raw, json)
Hash identifier: Zgfz5wQoSf+0Z0V+Ftbsp82QQ+CFzT7SK7Xn8GHyG4o=
Subject key identifier: 02:46:67:16:68:51:D1:0F:0E:1F:FA:20:EC:F5:64:55:9D:96:A5:2D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 71F1FAA312DA549AD783B2A149AEFF2ADE7D1F96
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/157e5e79-2e0b-4b8f-adb2-fd57f3d28ab6.roa
Signing time: Fri 15 Aug 2025 15:50:01 +0000
ROA not before: Fri 15 Aug 2025 15:50:01 +0000
ROA not after: Fri 19 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 80.203.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:f1:fa:a3:12:da:54:9a:d7:83:b2:a1:49:ae:ff:2a:de:7d:1f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 15 15:50:01 2025 GMT
Not After : Sep 19 23:59:59 2025 GMT
Subject: serialNumber=feb815730fa82a3d9ac4b13847fa13e8e6a1ad691d633f6d4990adc26d459ed2, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:fd:7a:e5:36:81:ec:bf:8a:bf:ea:92:b7:
1a:7d:71:4e:88:37:1f:14:97:54:12:fb:01:66:91:
9a:c8:e9:da:5c:db:5b:df:cc:84:f6:f1:62:17:ac:
73:23:ca:26:4d:02:20:3a:f2:49:2f:60:84:08:e0:
32:44:51:9a:d4:c1:65:bd:00:b2:c1:a7:c1:9b:85:
3e:a0:d8:15:ed:74:b3:e5:d9:80:eb:8b:da:c7:fc:
5b:da:97:8b:19:e4:a8:90:f1:79:2d:cd:13:79:50:
3d:0d:26:34:71:c3:1f:15:4b:13:9c:ec:e1:d6:c8:
fb:5e:52:30:98:7e:2c:ed:25:2c:91:21:8e:02:14:
4e:fe:f6:28:db:03:c2:10:4f:c0:57:7f:42:54:c8:
f3:c7:c9:df:36:cb:23:e1:a3:34:cf:cb:cb:7f:8d:
51:cb:8a:f5:cd:35:8b:3d:5f:d2:51:10:ca:92:bb:
88:b1:ce:ab:11:5b:bb:97:5d:a9:2c:e2:a0:a7:98:
7d:bf:a0:f3:22:2e:2c:7c:6a:41:47:6c:9e:dc:37:
46:a1:a9:63:16:fe:3d:49:14:35:58:1c:c8:53:45:
ba:96:c3:5b:cc:e0:b4:e1:9d:b5:48:7e:48:53:e3:
42:45:a5:0d:c8:c9:fc:0d:a9:ad:c8:57:51:7a:bd:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:46:67:16:68:51:D1:0F:0E:1F:FA:20:EC:F5:64:55:9D:96:A5:2D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/157e5e79-2e0b-4b8f-adb2-fd57f3d28ab6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.203.128.0/17
Signature Algorithm: sha256WithRSAEncryption
55:d3:df:c1:14:a4:85:79:c7:8f:4e:ca:5c:5f:92:ff:02:e4:
3b:61:0f:ff:29:89:70:2f:0a:6b:10:99:73:95:b5:ea:96:41:
6f:6d:17:77:be:4e:5b:ad:4d:02:e0:2a:16:1c:1b:b0:a0:95:
75:e0:77:98:17:b2:60:89:29:03:cb:cc:86:96:b7:2a:5e:38:
2f:44:1d:58:10:95:32:dd:21:11:89:bc:87:46:47:4f:ea:54:
1a:03:10:30:34:1a:a5:cd:f4:6d:cb:22:df:68:c6:74:04:f3:
e6:a5:3f:83:e4:68:9a:1d:4c:4e:5d:30:83:c5:d3:c3:7b:ea:
21:e6:ce:43:30:47:5e:44:49:08:fd:2a:e5:80:6d:1a:0c:19:
05:20:07:16:6a:c8:72:c3:95:6e:73:cd:e9:fb:16:25:9a:75:
f1:cc:88:a1:c9:7e:0e:47:b1:eb:69:c5:d5:c7:e8:09:a3:98:
55:0c:6f:9d:dd:e2:d6:2d:47:56:b3:57:9e:37:ba:c8:24:bd:
22:88:04:21:e6:81:b4:e4:e1:0d:0f:35:77:af:87:34:44:ba:
bc:cd:c5:55:af:ea:5d:55:3d:50:e8:a1:63:3b:34:7b:9c:51:
9f:eb:42:a5:08:a6:48:40:ba:eb:ad:54:34:33:60:52:a4:ff:
90:a2:64:1c
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUcfH6oxLaVJrXg7KhSa7/Kt59H5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA4MTUxNTUwMDFaFw0yNTA5MTkyMzU5NTlaMHoxSTBHBgNV
BAUTQGZlYjgxNTczMGZhODJhM2Q5YWM0YjEzODQ3ZmExM2U4ZTZhMWFkNjkxZDYz
M2Y2ZDQ5OTBhZGMyNmQ0NTllZDIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALTy/XrlNoHsv4q/6pK3Gn1xTog3HxSXVBL7AWaRmsjp2lzbW9/MhPbxYhes
cyPKJk0CIDrySS9ghAjgMkRRmtTBZb0AssGnwZuFPqDYFe10s+XZgOuL2sf8W9qX
ixnkqJDxeS3NE3lQPQ0mNHHDHxVLE5zs4dbI+15SMJh+LO0lLJEhjgIUTv72KNsD
whBPwFd/QlTI88fJ3zbLI+GjNM/Ly3+NUcuK9c01iz1f0lEQypK7iLHOqxFbu5dd
qSzioKeYfb+g8yIuLHxqQUdsntw3RqGpYxb+PUkUNVgcyFNFupbDW8zgtOGdtUh+
SFPjQkWlDcjJ/A2prchXUXq9B68CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQCRmcW
aFHRDw4f+iDs9WRVnZalLTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MTU3ZTVlNzktMmUwYi00YjhmLWFkYjItZmQ1N2YzZDI4YWI2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB1DLgDAN
BgkqhkiG9w0BAQsFAAOCAQEAVdPfwRSkhXnHj07KXF+S/wLkO2EP/ymJcC8KaxCZ
c5W16pZBb20Xd75OW61NAuAqFhwbsKCVdeB3mBeyYIkpA8vMhpa3Kl44L0QdWBCV
Mt0hEYm8h0ZHT+pUGgMQMDQapc30bcsi32jGdATz5qU/g+Romh1MTl0wg8XTw3vq
IebOQzBHXkRJCP0q5YBtGgwZBSAHFmrIcsOVbnPN6fsWJZp18cyIocl+Dkex62nF
1cfoCaOYVQxvnd3i1i1HVrNXnje6yCS9IogEIeaBtOThDQ81d6+HNES6vM3FVa/q
XVU9UOihYzs0e5xRn+tCpQimSEC6661UNDNgUqT/kKJkHA==
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:37:27 2025 by rpki-client