Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83d64fad-2f6b-441a-9079-e9e60d149aec.roa
File: 83d64fad-2f6b-441a-9079-e9e60d149aec.roa (raw, json)
Hash identifier: 2S0p6P5OZcn2wKBWueuQKKz+AQSWCKshldEXPBYukFE=
Subject key identifier: B9:C2:9F:2F:8D:4C:9C:A2:1B:C9:08:6C:A2:4A:7C:A2:E8:3C:1D:9A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7DE7940D94C775298839825DA25D76FE3363E471
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83d64fad-2f6b-441a-9079-e9e60d149aec.roa
Signing time: Fri 08 Aug 2025 00:41:06 +0000
ROA not before: Fri 08 Aug 2025 00:41:06 +0000
ROA not after: Fri 12 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.17.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e7:94:0d:94:c7:75:29:88:39:82:5d:a2:5d:76:fe:33:63:e4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 00:41:06 2025 GMT
Not After : Sep 12 23:59:59 2025 GMT
Subject: serialNumber=14b647c249673db6e6057ec77e514f0ff80ce41c6bb2336f8e7cb099c0d1c406, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:be:a0:b7:99:84:08:0d:86:5e:14:8e:e7:
02:9f:48:05:1a:cb:40:af:6a:1c:f1:9c:1b:6b:8f:
62:67:e8:9b:ba:b7:14:5a:95:28:87:58:5d:c2:39:
41:af:46:3d:f6:dd:08:26:34:7f:b9:6e:5f:fa:62:
b0:d6:84:58:36:5f:09:65:d5:51:17:1b:1d:e4:64:
2e:ef:69:a4:a6:2f:a2:60:4a:a6:e6:aa:5d:67:4d:
7b:2f:99:6c:d4:3f:85:25:d4:76:af:7e:66:51:13:
63:40:9c:ff:a6:55:5d:12:2f:f8:f8:5e:90:5a:18:
ad:90:52:b9:89:f2:a4:46:c4:06:6a:37:04:da:56:
5f:65:f3:5c:5b:97:a2:78:cb:4d:92:b9:39:fe:de:
89:c6:6d:7e:69:49:d7:22:08:ae:d1:6d:23:a7:29:
10:40:8c:81:ec:0e:fd:ec:1a:78:40:12:38:f7:3f:
4e:91:dc:c6:c3:00:65:a3:d8:af:53:ce:c6:36:99:
f1:f3:3d:6b:b3:32:07:8d:bd:ee:5f:ab:f8:57:ac:
57:0a:04:a4:68:17:1b:8a:8f:b1:7a:26:83:51:8e:
fd:24:fb:99:65:a1:02:56:12:ce:04:3b:d6:3e:81:
f4:87:40:ea:e5:93:3f:ca:0a:91:b5:bc:be:24:5b:
f9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C2:9F:2F:8D:4C:9C:A2:1B:C9:08:6C:A2:4A:7C:A2:E8:3C:1D:9A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83d64fad-2f6b-441a-9079-e9e60d149aec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.17.0.0/24
Signature Algorithm: sha256WithRSAEncryption
86:45:75:7c:d1:36:b3:ba:b9:66:dd:98:6e:14:f1:5f:4d:08:
a7:de:37:f9:41:da:c4:49:18:53:8a:ef:e5:45:9c:98:5a:af:
83:6a:92:6d:61:b4:8b:1c:04:34:33:9a:06:91:97:92:4e:20:
4c:4e:d2:ba:66:d9:2f:56:12:b4:bf:19:a3:ab:57:1f:99:6f:
28:33:93:81:7d:87:4a:77:a4:99:a1:96:cb:5e:f8:8e:3c:c9:
a5:ab:59:5e:4c:54:7d:9f:2e:0f:54:0d:3b:03:d1:58:8e:b2:
f8:46:34:ca:6b:03:4d:c7:a2:55:1a:94:24:74:d6:ef:87:59:
e7:e4:b1:7c:d7:0d:46:57:46:ef:d2:25:6f:d0:f9:3e:72:bd:
76:00:1c:4d:bc:d5:a8:0f:17:96:13:5a:25:81:a8:b3:37:4e:
c9:02:f8:9b:33:d4:f2:99:2a:fe:70:ec:ef:f3:3c:07:78:46:
6c:8a:c7:9c:18:da:0d:44:d8:f9:c6:99:f8:04:55:e1:ed:a3:
0c:b8:d0:0a:07:c8:9b:8c:44:95:88:50:56:a9:16:af:56:2b:
61:86:fc:f1:5c:a7:2e:69:ce:00:6d:f1:16:d5:d2:c0:0c:be:
f7:0e:c7:5c:d9:c4:f8:3a:bc:14:9c:75:86:ae:c0:7c:4b:06:
8a:2b:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:39:35 2025 by rpki-client