Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/87cbc454-e777-437d-a43a-911995d2a7ce.roa
File: 87cbc454-e777-437d-a43a-911995d2a7ce.roa (raw, json)
Hash identifier: 8NWYGBI7Az6mqSeu1PeZla92Tz+PYT4QtwgV276EJxM=
Subject key identifier: 8C:EB:9C:52:ED:90:37:D3:52:74:AF:E6:0D:8E:1F:67:2E:84:DF:AE
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3188913E22DFEF17519874F3D41A7B3DDFDFEBDD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/87cbc454-e777-437d-a43a-911995d2a7ce.roa
Signing time: Fri 08 Aug 2025 00:40:08 +0000
ROA not before: Fri 08 Aug 2025 00:40:08 +0000
ROA not after: Fri 12 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.21.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:88:91:3e:22:df:ef:17:51:98:74:f3:d4:1a:7b:3d:df:df:eb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 00:40:08 2025 GMT
Not After : Sep 12 23:59:59 2025 GMT
Subject: serialNumber=7ddf9e38b3c4e76cc0172cc947ec8a9424fc0cefa678f2916dfa335b153c5053, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d8:b5:49:a0:fb:d3:39:41:74:74:1c:d3:8d:
1c:13:f4:bf:a2:7b:4b:26:99:a7:cd:cc:e1:9d:01:
7f:11:b8:da:3c:9c:44:3e:36:1c:56:e6:bb:86:a9:
b3:d0:17:ef:c8:94:bc:fc:ff:25:b6:6f:94:f7:84:
f7:78:53:4d:81:11:f9:28:90:76:9b:af:5b:42:fc:
21:4a:e6:f1:81:68:3b:cf:a1:18:95:ed:b5:9a:43:
28:5f:14:bc:d6:d8:c1:83:95:17:9b:93:5b:a3:6b:
5f:01:65:ab:0d:5e:dc:2f:9e:61:5c:fc:10:97:d2:
76:84:2d:b4:c7:20:c6:61:b2:d8:53:61:9d:06:29:
de:ed:8a:c4:45:26:04:b1:46:91:42:25:10:f6:d2:
60:1d:75:de:f1:b4:6e:38:f6:b9:bd:b8:59:5c:b7:
79:7c:a6:1f:7e:d8:b0:39:bd:fc:98:47:be:86:04:
61:45:d7:cf:a3:61:54:de:00:db:9a:15:60:b7:58:
72:d5:1c:0f:b4:54:10:d4:4b:bd:b4:c0:3a:96:f8:
f3:30:af:f1:cb:37:53:f0:bb:af:e1:60:04:66:b8:
6d:84:fe:b4:22:6f:14:ca:d5:76:77:a9:99:69:a4:
13:93:6f:b4:9f:64:ed:25:c1:70:b7:4e:b9:4b:d3:
f7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EB:9C:52:ED:90:37:D3:52:74:AF:E6:0D:8E:1F:67:2E:84:DF:AE
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/87cbc454-e777-437d-a43a-911995d2a7ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.21.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cc:30:69:81:d4:01:72:bd:be:cc:db:35:66:5d:dd:7f:6c:3d:
52:db:ba:18:54:02:5b:75:17:0d:df:f4:9b:e1:c7:20:5e:20:
ff:4f:6d:71:06:8f:69:03:a5:74:ad:d4:c5:99:0f:48:8c:dc:
7f:fa:8d:6b:a2:be:24:36:42:63:c7:70:83:59:70:01:a2:9c:
69:df:9f:43:97:e1:9b:ff:bf:0c:e3:ef:aa:92:a9:23:c7:43:
68:c1:21:2d:c0:b3:14:44:f3:82:54:22:64:40:f8:fa:95:b9:
8e:ca:23:6e:f4:43:48:aa:aa:e1:33:0f:9a:94:e4:17:03:4d:
cb:33:58:24:8a:3d:a3:73:f1:74:2c:a6:c0:49:d5:f2:8b:3b:
08:48:f7:f7:f8:1e:83:73:59:54:a3:0d:4c:7f:fa:01:34:c4:
d6:71:a2:cf:b1:b2:bf:85:04:fc:2d:f0:40:d6:71:85:b4:0c:
83:7d:2e:68:20:f0:44:9e:77:0b:9d:e0:cf:8c:da:97:91:e8:
91:86:17:38:f5:27:0c:c2:7b:11:e5:e5:5c:ab:46:a0:f5:e2:
59:fd:fd:60:18:37:a1:7b:12:da:e4:fc:c6:45:7e:64:87:2f:
e9:ff:58:6d:d9:3d:bf:7d:7d:c9:2d:20:2a:8a:66:ba:60:5e:
97:db:4e:ba
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUMYiRPiLf7xdRmHTz1Bp7Pd/f690wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA4MDgwMDQwMDhaFw0yNTA5MTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDdkZGY5ZTM4YjNjNGU3NmNjMDE3MmNjOTQ3ZWM4YTk0MjRmYzBjZWZhNjc4
ZjI5MTZkZmEzMzViMTUzYzUwNTMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPHYtUmg+9M5QXR0HNONHBP0v6J7SyaZp83M4Z0BfxG42jycRD42HFbmu4ap
s9AX78iUvPz/JbZvlPeE93hTTYER+SiQdpuvW0L8IUrm8YFoO8+hGJXttZpDKF8U
vNbYwYOVF5uTW6NrXwFlqw1e3C+eYVz8EJfSdoQttMcgxmGy2FNhnQYp3u2KxEUm
BLFGkUIlEPbSYB113vG0bjj2ub24WVy3eXymH37YsDm9/JhHvoYEYUXXz6NhVN4A
25oVYLdYctUcD7RUENRLvbTAOpb48zCv8cs3U/C7r+FgBGa4bYT+tCJvFMrVdnep
mWmkE5NvtJ9k7SXBcLdOuUvT92UCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSM65xS
7ZA301J0r+YNjh9nLoTfrjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ODdjYmM0NTQtZTc3Ny00MzdkLWE0M2EtOTExOTk1ZDJhN2NlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADMVMA0G
CSqGSIb3DQEBCwUAA4IBAQDMMGmB1AFyvb7M2zVmXd1/bD1S27oYVAJbdRcN3/Sb
4ccgXiD/T21xBo9pA6V0rdTFmQ9IjNx/+o1ror4kNkJjx3CDWXABopxp359Dl+Gb
/78M4++qkqkjx0NowSEtwLMURPOCVCJkQPj6lbmOyiNu9ENIqqrhMw+alOQXA03L
M1gkij2jc/F0LKbASdXyizsISPf3+B6Dc1lUow1Mf/oBNMTWcaLPsbK/hQT8LfBA
1nGFtAyDfS5oIPBEnncLneDPjNqXkeiRhhc49ScMwnsR5eVcq0ag9eJZ/f1gGDeh
exLa5PzGRX5khy/p/1ht2T2/fX3JLSAqima6YF6X2066
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:40:11 2025 by rpki-client