Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1b39e9a7-4f3d-4cfc-975f-d9eaceed0ed2.roa
File: 1b39e9a7-4f3d-4cfc-975f-d9eaceed0ed2.roa (raw, json)
Hash identifier: HFcLfhwhQPxoiFcELOozP+qiqFAgP+PSAAGADDWr4HQ=
Subject key identifier: 48:95:72:2C:84:00:61:96:47:B9:C5:89:7B:CA:D5:F4:83:AA:9B:05
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3364A2F5A37D1A5611B5A9B002077C01AC877429
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1b39e9a7-4f3d-4cfc-975f-d9eaceed0ed2.roa
Signing time: Tue 05 Aug 2025 20:20:07 +0000
ROA not before: Tue 05 Aug 2025 20:20:07 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.134.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:64:a2:f5:a3:7d:1a:56:11:b5:a9:b0:02:07:7c:01:ac:87:74:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 5 20:20:07 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=44a42e4d99470ade58c7f4bed6f5ba12c16ccb834da90f69dd8798df4ca25069, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7a:be:24:53:34:ef:2f:e7:01:f4:84:10:da:
e5:f3:70:a4:c0:98:b8:28:b9:72:64:0c:5a:98:2b:
1c:1c:0e:59:c5:38:ac:4a:30:02:fc:5a:99:5b:ff:
fa:24:c7:38:7d:ea:e1:11:43:7f:94:76:a4:19:68:
b0:9a:0a:5a:82:9e:36:76:3e:cd:18:93:56:4d:54:
82:58:e4:f2:27:91:3e:c8:4c:6c:50:28:c1:5c:85:
50:0e:bb:57:e1:c7:7e:25:7a:9b:ab:44:b0:1e:e7:
bf:6f:62:66:4a:20:8d:27:60:94:ec:f9:d4:31:d8:
68:31:cc:d4:7b:3e:84:ab:dc:22:f8:f2:cc:14:77:
d9:f5:3c:23:57:a4:96:3b:8f:13:d5:fe:b0:ea:d6:
c6:9f:86:0d:3d:9c:10:04:0f:33:43:40:09:a2:24:
7f:21:76:0a:13:97:a0:d8:fc:4f:98:3d:13:ca:9e:
f8:1a:79:59:93:a6:5c:a8:4c:bb:ff:fe:7d:a2:90:
3b:9c:40:de:8c:25:11:59:52:3e:c6:7d:b2:cc:f7:
34:39:d7:1c:e1:0b:8b:20:5d:80:d9:a0:31:5d:8e:
ec:d3:82:58:f8:dd:9c:eb:23:d3:be:fd:8a:f0:60:
c8:ee:3a:7d:9d:0c:a2:2a:58:17:67:46:33:4f:21:
76:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:95:72:2C:84:00:61:96:47:B9:C5:89:7B:CA:D5:F4:83:AA:9B:05
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1b39e9a7-4f3d-4cfc-975f-d9eaceed0ed2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.134.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:08:30:a4:21:d5:19:f4:3a:a1:4c:bb:d2:c4:37:54:d6:2c:
46:83:71:94:11:9d:21:75:c7:85:2d:b7:09:7a:f3:d7:c0:5c:
6d:95:d0:cd:97:e9:bd:49:8c:4e:e8:e7:8b:76:03:45:7d:70:
27:7a:98:d9:32:5b:cc:6e:04:43:ec:74:b3:31:47:92:47:85:
80:a3:0c:5b:e1:67:fb:3e:5b:b8:43:24:c8:a0:c3:cd:25:b4:
e3:b6:30:7d:7f:1e:a4:a4:f1:50:87:ba:9e:13:47:bf:64:80:
ac:e2:22:86:70:47:1a:96:a8:28:86:96:64:73:aa:76:f4:07:
81:19:1c:13:af:9f:01:09:da:af:8f:54:92:32:9e:67:2c:39:
57:3c:a9:4a:ad:70:cb:32:c0:5d:84:7c:69:f5:df:ff:dc:47:
ed:ab:da:9f:cd:69:70:31:65:ca:20:3a:3a:bb:a3:88:b4:58:
9c:14:c4:ea:ca:2d:19:ca:f1:76:fa:42:a0:09:18:1c:e4:de:
0b:a4:fb:75:27:0b:1d:89:2b:92:32:52:9a:0c:d6:36:99:bb:
c0:5c:a9:07:c1:82:4c:34:91:af:99:0c:ed:95:e4:27:c9:a1:
47:77:2c:e2:d2:64:9d:b2:63:4f:ac:7c:82:7c:ca:8d:85:ab:
5a:aa:57:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:37:24 2025 by rpki-client