Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f060e190-89f7-4009-9831-b2d429343b80.roa
File: f060e190-89f7-4009-9831-b2d429343b80.roa (raw, json)
Hash identifier: /tlTCUVhLacGP68GdYloR+wfdeGtSxuBdP4S7nXsCTo=
Subject key identifier: 99:01:5D:E6:FB:78:16:60:C6:17:6B:8A:D5:12:C1:24:4E:4A:17:D7
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 63ACF60DFAEDDA9A2E161A7467304C901E1785C6
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f060e190-89f7-4009-9831-b2d429343b80.roa
Signing time: Fri 23 May 2025 00:50:59 +0000
ROA not before: Fri 23 May 2025 00:50:59 +0000
ROA not after: Fri 27 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:ac:f6:0d:fa:ed:da:9a:2e:16:1a:74:67:30:4c:90:1e:17:85:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 23 00:50:59 2025 GMT
Not After : Jun 27 23:59:59 2025 GMT
Subject: serialNumber=735f4a7df97f96441fb6e87be96b55d69feb3e910a2bf779f7ecadca305eaf28, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:05:c5:07:59:5e:84:7e:06:8b:c3:62:71:
df:11:72:c2:ae:5c:90:a2:f7:80:80:b7:81:c7:99:
47:81:37:85:04:28:f7:ce:a2:ab:85:d3:e7:9b:b0:
48:44:54:39:59:1b:19:00:b9:95:4d:b5:1a:ce:9c:
8e:64:75:76:b2:92:32:64:46:28:ef:74:1c:41:c6:
3c:47:e3:61:b2:c9:bd:3a:e4:63:0d:c0:04:f9:c4:
6f:3d:67:65:4a:0b:d4:bb:b7:15:a3:d9:0d:b7:53:
f1:84:8a:0e:ec:4a:3c:31:3d:5a:35:c2:72:76:fc:
e2:b1:44:c7:07:a6:e3:73:eb:de:91:c2:db:5e:16:
10:f9:b0:80:f6:87:7c:36:db:9f:63:ae:2a:de:c0:
aa:50:91:16:36:d2:bd:84:f2:5d:dc:88:c6:b6:5c:
84:cc:5b:cb:66:33:11:ab:41:3a:6a:20:17:ae:43:
01:67:e9:76:78:26:6a:91:10:22:01:e3:0b:1b:56:
1b:cd:48:39:53:77:c1:64:9a:ae:4c:d4:3a:1b:50:
5f:9d:f6:ba:6c:21:dc:7f:7e:80:8f:ba:be:12:a8:
83:20:c6:1d:38:2f:b5:6c:6c:b0:15:c3:34:e2:90:
4d:f1:ba:3c:57:46:2b:8a:d8:ef:9e:9a:c9:e5:0d:
dc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:01:5D:E6:FB:78:16:60:C6:17:6B:8A:D5:12:C1:24:4E:4A:17:D7
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f060e190-89f7-4009-9831-b2d429343b80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.0.0/15
Signature Algorithm: sha256WithRSAEncryption
0c:27:85:dd:d0:40:65:eb:c4:cc:9d:a9:38:05:7c:81:70:71:
74:ae:10:e7:2e:11:f3:dd:da:80:d4:84:90:ea:96:36:60:6d:
d9:aa:fa:f7:b8:b7:c6:d3:6d:81:1b:ad:55:f5:69:69:27:b5:
65:5f:21:af:73:0f:17:18:b9:9e:9a:84:e0:07:cd:41:91:1d:
07:4b:a4:85:77:71:34:ab:a2:7a:79:fd:ce:8f:c4:3e:73:d8:
8a:06:c2:89:ab:bb:29:47:d3:32:1a:8e:9e:b6:b1:0f:2a:a8:
a7:1d:f9:04:de:4e:87:c0:2f:08:5d:93:71:55:d0:b0:77:29:
c3:42:1a:40:b2:b9:7c:ad:df:6c:4b:05:ee:3b:f4:17:b1:1f:
c9:1b:1c:77:e4:a6:da:0c:a9:0d:2f:f2:2d:ed:07:55:5e:38:
0c:2e:63:e9:19:fe:72:73:1c:23:b1:85:43:98:a7:79:68:c2:
ab:cc:d2:42:b4:35:6f:ba:aa:49:a8:77:41:2f:52:07:2d:89:
37:6e:bc:af:5f:76:2e:03:d0:51:9d:b0:a9:41:05:65:0d:17:
08:b1:4f:aa:b2:b2:80:c1:a9:b7:63:8e:ce:a4:38:f6:2d:83:
d4:f8:8c:96:c2:bc:08:06:11:7c:58:6e:08:33:66:f9:6c:a0:
b9:3b:4f:a2
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUY6z2Dfrt2pouFhp0ZzBMkB4XhcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA1MjMwMDUwNTlaFw0yNTA2MjcyMzU5NTlaMHoxSTBHBgNV
BAUTQDczNWY0YTdkZjk3Zjk2NDQxZmI2ZTg3YmU5NmI1NWQ2OWZlYjNlOTEwYTJi
Zjc3OWY3ZWNhZGNhMzA1ZWFmMjgxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKEmBcUHWV6EfgaLw2Jx3xFywq5ckKL3gIC3gceZR4E3hQQo986iq4XT55uw
SERUOVkbGQC5lU21Gs6cjmR1drKSMmRGKO90HEHGPEfjYbLJvTrkYw3ABPnEbz1n
ZUoL1Lu3FaPZDbdT8YSKDuxKPDE9WjXCcnb84rFExwem43Pr3pHC214WEPmwgPaH
fDbbn2OuKt7AqlCRFjbSvYTyXdyIxrZchMxby2YzEatBOmogF65DAWfpdngmapEQ
IgHjCxtWG81IOVN3wWSarkzUOhtQX532umwh3H9+gI+6vhKogyDGHTgvtWxssBXD
NOKQTfG6PFdGK4rY756ayeUN3K8CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSZAV3m
+3gWYMYXa4rVEsEkTkoX1zAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZjA2MGUxOTAtODlmNy00MDA5LTk4MzEtYjJkNDI5MzQzYjgwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATMQMA0G
CSqGSIb3DQEBCwUAA4IBAQAMJ4Xd0EBl68TMnak4BXyBcHF0rhDnLhHz3dqA1ISQ
6pY2YG3Zqvr3uLfG022BG61V9WlpJ7VlXyGvcw8XGLmemoTgB81BkR0HS6SFd3E0
q6J6ef3Oj8Q+c9iKBsKJq7spR9MyGo6etrEPKqinHfkE3k6HwC8IXZNxVdCwdynD
QhpAsrl8rd9sSwXuO/QXsR/JGxx35KbaDKkNL/It7QdVXjgMLmPpGf5ycxwjsYVD
mKd5aMKrzNJCtDVvuqpJqHdBL1IHLYk3bryvX3YuA9BRnbCpQQVlDRcIsU+qsrKA
wam3Y47OpDj2LYPU+IyWwrwIBhF8WG4IM2b5bKC5O0+i
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:11:39 2025 by rpki-client