Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/faa5ec1e-61dd-4ddb-a08f-0b29cab481e1.roa
File: faa5ec1e-61dd-4ddb-a08f-0b29cab481e1.roa (raw, json)
Hash identifier: 2RItsuPwQE6nCQudZDh7V2ZNuspzxnW5LPAkrRCvRBY=
Subject key identifier: 67:DD:81:A5:E4:32:2C:C8:6A:B9:2A:98:44:B0:EC:E2:B4:87:E2:90
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 313675FB79E0174176371CE25C71444855040A8B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/faa5ec1e-61dd-4ddb-a08f-0b29cab481e1.roa
Signing time: Fri 08 Aug 2025 00:40:06 +0000
ROA not before: Fri 08 Aug 2025 00:40:06 +0000
ROA not after: Fri 12 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:36:75:fb:79:e0:17:41:76:37:1c:e2:5c:71:44:48:55:04:0a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 00:40:06 2025 GMT
Not After : Sep 12 23:59:59 2025 GMT
Subject: serialNumber=674bc81d65ed462708ee0cf58e867742795f27ee8dc6e9cf59d12bdc2ec87d5b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:75:d4:34:0b:f6:d7:78:97:12:65:f7:d4:50:
ff:9d:60:7f:05:9f:d8:bc:f2:df:cd:4e:3b:18:ae:
85:ed:7d:68:c4:f8:f9:d7:df:1b:fe:c3:d5:4a:7b:
1f:fc:48:7f:d8:65:f0:c7:d8:9a:8c:ac:89:63:32:
ee:25:9b:69:c5:09:95:47:18:3a:78:64:43:f2:7f:
09:26:c1:83:f3:c9:cf:e9:e6:ab:16:78:93:31:0f:
e5:68:ba:17:f4:61:12:6a:ce:37:38:fe:f0:c6:ee:
89:dc:c9:07:b6:0e:4e:8b:1a:58:61:1f:f2:01:2f:
45:e2:c1:04:47:19:eb:e7:fc:c8:99:aa:d7:5d:4a:
9e:29:9d:cc:41:93:da:e7:34:79:98:b7:c3:0e:f1:
24:d0:29:75:7d:5e:6d:58:51:bc:3c:73:fe:df:95:
d4:bf:a5:a6:90:fe:25:e5:51:ae:cd:ad:d6:88:7d:
97:07:8d:55:c9:44:f3:a7:55:c6:98:02:52:37:55:
ab:1a:b6:69:73:07:00:32:bf:39:fc:12:23:eb:1b:
77:7d:29:b4:61:ad:f1:d7:19:53:bf:33:2f:6a:c1:
2b:8b:f1:d5:ba:b3:4e:0b:3d:ce:26:9b:a5:6a:5f:
e5:b1:21:e7:60:ce:92:6d:e7:bb:da:b5:d6:8b:ff:
2a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DD:81:A5:E4:32:2C:C8:6A:B9:2A:98:44:B0:EC:E2:B4:87:E2:90
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/faa5ec1e-61dd-4ddb-a08f-0b29cab481e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.240.0/22
Signature Algorithm: sha256WithRSAEncryption
02:da:8b:2a:7d:4a:c1:0d:5b:f3:24:3c:cd:50:6e:08:06:2f:
37:5b:67:13:74:7f:fc:fc:97:c3:13:66:2e:8a:93:b3:a0:3f:
a9:b2:b2:c0:89:69:83:ee:aa:52:be:cc:da:82:f5:24:8a:43:
fd:65:f5:e0:80:8c:70:aa:12:53:30:0e:c1:e7:4c:18:9f:7e:
18:34:14:51:9c:cc:8c:9c:fd:20:b8:c4:88:56:c3:75:0b:90:
0e:5f:7b:43:ef:66:64:a5:8c:cb:17:04:2e:97:b5:a2:ff:eb:
f2:5c:92:42:3f:a4:06:c7:5d:12:29:c9:80:98:4a:10:6d:38:
62:27:82:85:bb:07:34:e9:81:c9:9d:bf:26:2f:53:c5:d8:96:
35:5f:b2:f0:ee:95:12:35:8f:47:f0:ee:aa:f0:ef:32:0a:a2:
12:2f:b2:d2:f4:94:c6:8d:eb:6b:07:60:94:2e:86:8b:cb:e8:
2b:0e:45:aa:1f:fb:68:de:0c:8b:a5:c4:f6:d1:62:eb:95:11:
60:97:4a:db:41:e1:bc:07:dc:8a:b3:4a:a6:77:e7:e9:10:ae:
d9:f1:43:e1:9b:17:83:3a:5c:c8:f3:d3:98:b6:ed:24:22:f2:
fb:af:6c:b2:16:a9:a3:af:e2:78:e8:9f:7b:59:f7:50:08:94:
b9:64:b9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:37:29 2025 by rpki-client