Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0a36b38b-9bd1-4014-823d-9204a303350e.roa
File: 0a36b38b-9bd1-4014-823d-9204a303350e.roa (raw, json)
Hash identifier: B6Yu87EKi1/wLobOI3WJ5Ml6ZjIJpq73LogC9TxafTc=
Subject key identifier: E2:04:5B:8D:45:B3:7F:AF:58:9F:E7:51:2E:D2:C2:CD:BA:09:34:7D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 501FFB09519945B04417054D1C80615DF7F134B2
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0a36b38b-9bd1-4014-823d-9204a303350e.roa
Signing time: Tue 29 Apr 2025 00:30:03 +0000
ROA not before: Tue 29 Apr 2025 00:30:03 +0000
ROA not after: Tue 03 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.21.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:1f:fb:09:51:99:45:b0:44:17:05:4d:1c:80:61:5d:f7:f1:34:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 29 00:30:03 2025 GMT
Not After : Jun 3 23:59:59 2025 GMT
Subject: serialNumber=5902de0c192a58515172fb3013dae85c045838fddcf7e2e46873f2025bb03ea4, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:c8:9e:34:7a:81:16:ab:9c:54:80:95:98:
4e:85:b9:5a:7f:f1:3a:8e:97:86:f7:76:d0:f1:55:
12:78:0a:d3:8e:40:2f:59:fe:1c:0c:52:74:8d:49:
72:0b:cb:8c:7f:ba:a1:78:38:51:49:d2:a1:3e:98:
7b:b6:47:3c:9e:bf:02:1f:dd:28:f9:71:7f:a4:2d:
3c:fb:30:06:09:cf:9c:50:c4:d2:e3:44:d5:e9:19:
b8:77:70:79:a6:5b:0a:4d:e4:62:e0:72:b0:fb:e2:
23:04:11:15:95:5c:96:f9:db:cc:25:19:0b:25:a9:
68:29:c2:92:42:95:a5:d6:a6:c7:39:1b:e5:79:97:
02:66:b8:a4:e5:e2:b0:91:ab:0f:de:0a:05:d1:6c:
37:bf:a3:6a:d7:1c:3a:45:38:db:ef:0b:39:56:9b:
d4:30:0f:8f:32:82:3a:ba:ff:f3:b2:b6:94:9b:d5:
ea:db:a9:39:26:1a:98:f1:86:67:ec:a0:12:db:b0:
33:f3:49:bf:6f:e9:d4:11:65:3d:ce:31:68:bc:04:
4f:0a:c3:82:69:b6:48:60:c3:96:96:2b:37:1d:61:
77:46:d6:fc:b1:a8:31:b6:07:f2:09:b0:57:a1:70:
f3:be:c2:2c:50:b3:ba:fd:b0:75:c5:93:0e:1f:dc:
a9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:04:5B:8D:45:B3:7F:AF:58:9F:E7:51:2E:D2:C2:CD:BA:09:34:7D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0a36b38b-9bd1-4014-823d-9204a303350e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.21.183.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:0e:d9:b4:4e:c7:45:5f:a3:0b:76:5d:5e:53:4c:e9:a5:07:
02:1c:e5:12:e5:d8:d1:2b:84:4f:96:ff:ee:8e:ef:a0:4f:8c:
92:7d:63:0e:bd:f7:d5:a8:81:11:49:fb:fd:1c:8c:9c:47:be:
d7:82:79:82:9d:25:00:3f:87:b9:41:3c:72:ff:4a:7c:d7:e2:
f1:ad:f0:fa:3a:c1:cb:98:45:4f:78:3f:80:0b:f6:92:88:93:
a9:6d:24:f8:ce:20:42:2a:38:98:c2:34:a6:c3:66:62:e4:62:
93:b3:75:55:98:34:7d:6f:90:63:cf:d3:d1:65:c8:23:89:37:
b6:1a:41:b3:63:07:1f:a6:a7:65:e3:ce:43:7a:01:e5:37:19:
79:df:2b:73:79:86:7d:8a:36:58:66:dc:78:4a:71:86:44:53:
a7:38:35:72:1f:4f:f2:b3:c5:ed:5d:df:e4:a0:7e:2e:fd:39:
17:77:60:9d:3a:21:fb:a9:57:c1:4a:fc:c1:ab:07:97:db:27:
ff:44:80:e7:b9:70:76:91:aa:57:af:ea:3f:aa:7e:01:3f:54:
9e:c6:04:75:df:d5:2c:d7:e3:11:f7:39:37:f2:ef:62:29:30:
ba:13:2a:b5:1d:fb:b0:51:ac:bb:48:08:99:1b:ef:9c:aa:34:
45:51:b1:9d
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUUB/7CVGZRbBEFwVNHIBhXffxNLIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA0MjkwMDMwMDNaFw0yNTA2MDMyMzU5NTlaMHoxSTBHBgNV
BAUTQDU5MDJkZTBjMTkyYTU4NTE1MTcyZmIzMDEzZGFlODVjMDQ1ODM4ZmRkY2Y3
ZTJlNDY4NzNmMjAyNWJiMDNlYTQxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMm/yJ40eoEWq5xUgJWYToW5Wn/xOo6Xhvd20PFVEngK045AL1n+HAxSdI1J
cgvLjH+6oXg4UUnSoT6Ye7ZHPJ6/Ah/dKPlxf6QtPPswBgnPnFDE0uNE1ekZuHdw
eaZbCk3kYuBysPviIwQRFZVclvnbzCUZCyWpaCnCkkKVpdamxzkb5XmXAma4pOXi
sJGrD94KBdFsN7+jatccOkU42+8LOVab1DAPjzKCOrr/87K2lJvV6tupOSYamPGG
Z+ygEtuwM/NJv2/p1BFlPc4xaLwETwrDgmm2SGDDlpYrNx1hd0bW/LGoMbYH8gmw
V6Fw877CLFCzuv2wdcWTDh/cqakCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTiBFuN
RbN/r1if51Eu0sLNugk0fTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MGEzNmIzOGItOWJkMS00MDE0LTgyM2QtOTIwNGEzMDMzNTBlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADMVtzAN
BgkqhkiG9w0BAQsFAAOCAQEAnQ7ZtE7HRV+jC3ZdXlNM6aUHAhzlEuXY0SuET5b/
7o7voE+Mkn1jDr331aiBEUn7/RyMnEe+14J5gp0lAD+HuUE8cv9KfNfi8a3w+jrB
y5hFT3g/gAv2koiTqW0k+M4gQio4mMI0psNmYuRik7N1VZg0fW+QY8/T0WXII4k3
thpBs2MHH6anZePOQ3oB5TcZed8rc3mGfYo2WGbceEpxhkRTpzg1ch9P8rPF7V3f
5KB+Lv05F3dgnToh+6lXwUr8wasHl9sn/0SA57lwdpGqV6/qP6p+AT9UnsYEdd/V
LNfjEfc5N/LvYikwuhMqtR37sFGsu0gImRvvnKo0RVGxnQ==
-----END CERTIFICATE-----
Generated at Mon May 5 03:45:28 2025 by rpki-client