Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/96060ba0-0bb4-49bc-8bf6-4a1495ffddf4.roa
File: 96060ba0-0bb4-49bc-8bf6-4a1495ffddf4.roa (raw, json)
Hash identifier: 6f3YwR8B5UDEplBCGg0toZ8GNaKjyw6Ko7qm0tXU2Rw=
Subject key identifier: F9:CD:F9:2D:AB:EC:DF:C8:D1:C5:67:B2:3E:1B:00:DA:1F:D8:0A:0E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 527E5EA704BF654C0421C5F621D99EAAA64104C2
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/96060ba0-0bb4-49bc-8bf6-4a1495ffddf4.roa
Signing time: Fri 08 Aug 2025 00:40:08 +0000
ROA not before: Fri 08 Aug 2025 00:40:08 +0000
ROA not after: Fri 12 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.20.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:7e:5e:a7:04:bf:65:4c:04:21:c5:f6:21:d9:9e:aa:a6:41:04:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 00:40:08 2025 GMT
Not After : Sep 12 23:59:59 2025 GMT
Subject: serialNumber=3aae579f63b42b28ecfd6af5ebd5778b3d8fa857df303998fae17054f2b99009, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:48:2e:91:72:a3:0e:25:53:5f:e2:de:b8:
b6:fe:19:31:07:5b:04:d5:ae:c2:85:42:0e:79:7e:
c9:fc:4e:e6:96:4f:fe:4f:ae:c5:56:2e:23:59:c4:
2b:39:be:00:3d:10:df:c0:2b:f4:0c:9f:b0:c6:79:
8d:d9:29:e7:c6:1a:d0:2a:98:d1:ac:5f:d2:d0:b3:
ba:57:dc:f0:98:79:ee:38:88:7c:2f:2f:54:12:f8:
c8:a6:9c:e1:e4:72:42:8b:94:f1:e3:3a:bd:6d:44:
8e:bc:b7:b7:61:88:c0:8f:f7:1c:cc:4f:2e:bf:9c:
82:3e:9d:f6:7b:5c:ec:da:98:7f:6f:22:92:60:ad:
e2:09:25:83:17:c1:94:2a:9f:f0:ce:84:be:92:b8:
31:1d:82:0a:28:94:21:74:11:9e:df:2e:62:96:da:
bc:6b:65:c0:36:fd:ba:23:b6:0f:1b:1d:a9:2b:79:
1f:2a:f8:c9:fe:9d:33:17:cf:96:17:71:97:5d:bd:
8b:23:55:79:0f:14:e0:d1:c3:a9:7a:ec:fb:df:5e:
6a:d2:aa:ff:47:36:3a:a6:3a:0d:c5:4f:79:94:f8:
95:a3:5a:84:b6:08:a7:c5:69:84:98:a9:e4:de:17:
34:02:0d:88:76:00:45:03:d7:1f:2c:33:3b:80:72:
d8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CD:F9:2D:AB:EC:DF:C8:D1:C5:67:B2:3E:1B:00:DA:1F:D8:0A:0E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/96060ba0-0bb4-49bc-8bf6-4a1495ffddf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.20.0.0/14
Signature Algorithm: sha256WithRSAEncryption
1c:3f:af:5e:9f:82:c2:ba:d7:f5:0e:0c:87:7e:97:15:2a:13:
24:18:d0:13:b2:d3:79:40:1d:d3:68:94:d3:6e:6c:99:16:22:
9f:bb:cb:e3:c3:c8:0d:52:28:fb:81:f0:56:00:5e:1f:ad:2f:
2a:48:a8:cc:22:f0:f1:98:3c:8d:bc:c6:f0:ff:65:0f:84:8d:
c6:a5:3b:59:82:2e:2b:f2:2e:61:7e:c3:4c:ee:7f:5e:0f:10:
38:44:39:f1:96:97:63:39:7b:86:88:c9:a7:68:70:4d:6f:b7:
da:cf:4b:e2:96:e8:42:d8:ab:28:25:bf:d5:59:25:91:b0:85:
04:8d:0e:d5:1f:56:1c:2c:ed:3b:77:f3:0d:b5:56:1b:63:03:
b3:a5:b0:d8:6e:71:98:17:61:78:c3:bd:0f:75:9c:14:43:6c:
bf:e3:37:7b:da:e5:87:bf:e2:58:ba:3a:55:d1:e1:e2:65:b5:
cb:5f:9d:15:45:38:a8:46:46:7e:18:87:c5:bc:44:96:4c:6c:
aa:ca:e0:7d:46:ef:7c:f0:92:1d:56:58:2a:2f:e5:d1:94:c9:
e3:c2:ab:4f:ba:9d:23:53:4c:42:e4:55:5e:49:2e:91:5a:15:
7b:ff:8f:48:08:39:e2:e7:cc:3a:94:34:f0:52:b5:39:d3:39:
0b:ec:0c:68
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUUn5epwS/ZUwEIcX2IdmeqqZBBMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA4MDgwMDQwMDhaFw0yNTA5MTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDNhYWU1NzlmNjNiNDJiMjhlY2ZkNmFmNWViZDU3NzhiM2Q4ZmE4NTdkZjMw
Mzk5OGZhZTE3MDU0ZjJiOTkwMDkxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKRsSC6RcqMOJVNf4t64tv4ZMQdbBNWuwoVCDnl+yfxO5pZP/k+uxVYuI1nE
Kzm+AD0Q38Ar9AyfsMZ5jdkp58Ya0CqY0axf0tCzulfc8Jh57jiIfC8vVBL4yKac
4eRyQouU8eM6vW1Ejry3t2GIwI/3HMxPLr+cgj6d9ntc7NqYf28ikmCt4gklgxfB
lCqf8M6EvpK4MR2CCiiUIXQRnt8uYpbavGtlwDb9uiO2DxsdqSt5Hyr4yf6dMxfP
lhdxl129iyNVeQ8U4NHDqXrs+99eatKq/0c2OqY6DcVPeZT4laNahLYIp8VphJip
5N4XNAINiHYARQPXHywzO4By2LMCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBT5zfkt
q+zfyNHFZ7I+GwDaH9gKDjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
OTYwNjBiYTAtMGJiNC00OWJjLThiZjYtNGExNDk1ZmZkZGY0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAjMUMA0G
CSqGSIb3DQEBCwUAA4IBAQAcP69en4LCutf1DgyHfpcVKhMkGNATstN5QB3TaJTT
bmyZFiKfu8vjw8gNUij7gfBWAF4frS8qSKjMIvDxmDyNvMbw/2UPhI3GpTtZgi4r
8i5hfsNM7n9eDxA4RDnxlpdjOXuGiMmnaHBNb7faz0viluhC2KsoJb/VWSWRsIUE
jQ7VH1YcLO07d/MNtVYbYwOzpbDYbnGYF2F4w70PdZwUQ2y/4zd72uWHv+JYujpV
0eHiZbXLX50VRTioRkZ+GIfFvESWTGyqyuB9Ru988JIdVlgqL+XRlMnjwqtPup0j
U0xC5FVeSS6RWhV7/49ICDni58w6lDTwUrU50zkL7Axo
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:42:12 2025 by rpki-client