Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/226b8c83-9647-47e2-847b-1787f3d54040.roa
File: 226b8c83-9647-47e2-847b-1787f3d54040.roa (raw, json)
Hash identifier: Ue3p9UyUHokBSDrV0l4Fieylf2DD9rWg74D4wVMpQJo=
Subject key identifier: 79:0D:97:4B:49:83:3F:DD:DE:74:C1:AE:16:11:75:7B:3B:EE:B0:2D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2EED5D466926409185AE5E271BB662ABF1213157
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/226b8c83-9647-47e2-847b-1787f3d54040.roa
Signing time: Tue 17 Jun 2025 00:50:37 +0000
ROA not before: Tue 17 Jun 2025 00:50:37 +0000
ROA not after: Tue 22 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.94.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ed:5d:46:69:26:40:91:85:ae:5e:27:1b:b6:62:ab:f1:21:31:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 17 00:50:37 2025 GMT
Not After : Jul 22 23:59:59 2025 GMT
Subject: serialNumber=70172c9d71595b0646136c931d11964130d97ba6ae0d073984e907c7ab99372a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:7a:d5:49:4f:4e:86:85:40:f0:95:59:06:
18:ae:5a:10:51:cb:a8:85:25:9c:b7:ef:7c:7a:01:
f7:93:e5:d2:21:3a:34:80:b8:30:36:d3:a8:9d:50:
0f:80:3d:43:ff:b7:94:eb:09:5e:ad:ec:23:be:33:
db:31:69:72:e3:03:33:a2:c8:4a:0b:1c:c5:a4:84:
c8:d7:b4:61:a0:99:f7:86:97:5d:de:5d:75:d6:e5:
65:7a:62:8c:91:ac:87:5b:d1:b5:2d:5f:8f:a4:be:
20:9f:cc:0a:98:cd:45:75:88:e3:47:52:f4:48:88:
3c:23:1f:35:dd:4a:28:47:ab:ee:9e:8f:10:79:f9:
61:bf:42:a9:ea:38:5f:49:4b:31:31:a9:92:8e:eb:
a3:92:6e:54:17:9e:5c:d4:3e:cc:f8:d7:cb:b7:7f:
7f:60:4e:5c:67:53:6e:d5:4f:93:5d:a7:b1:84:64:
17:0d:46:f1:a5:66:ad:06:19:dc:94:f0:fd:df:60:
e0:72:b9:8c:59:b4:6a:ae:76:5e:1a:17:98:c3:de:
b5:68:3b:1a:72:e4:91:c5:25:35:a2:c3:99:47:04:
36:2a:3f:37:41:23:d1:f1:f4:02:cb:52:3e:f3:58:
84:f9:39:16:f9:b4:24:01:3b:fd:1d:4b:ab:39:23:
cf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0D:97:4B:49:83:3F:DD:DE:74:C1:AE:16:11:75:7B:3B:EE:B0:2D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/226b8c83-9647-47e2-847b-1787f3d54040.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.94.0.0/15
Signature Algorithm: sha256WithRSAEncryption
39:9f:18:0f:73:a9:1f:bd:8b:69:97:4f:12:37:c3:d3:d2:34:
1c:60:26:43:4e:2f:bf:28:c3:35:af:da:4e:8b:98:8b:a1:0f:
36:25:56:3e:83:b8:51:cc:ab:63:d5:2f:3c:fb:46:9a:db:ba:
2d:d2:6a:16:0f:14:ce:e3:f9:ac:98:ad:58:6a:a6:6a:7b:5c:
28:bd:63:4f:99:28:e3:16:44:99:31:65:f5:0e:9b:cb:8b:76:
b7:32:61:35:0b:2b:7f:1a:b8:7c:f7:24:d4:23:4f:10:a9:9d:
3b:aa:cd:1c:5f:6b:14:c7:33:38:3b:67:9f:7a:8a:fe:5f:9c:
c6:63:d0:b4:eb:51:67:b2:5e:55:b3:a8:99:9b:8c:33:8e:a6:
12:d0:58:a5:e0:b2:5f:9b:d7:b7:2e:11:ab:12:9f:5c:fe:4a:
5c:31:0f:5c:e4:b6:ab:7f:f4:b0:05:72:ff:27:55:d4:aa:5f:
7f:07:6f:24:04:2d:a9:70:db:bf:be:1f:73:17:41:35:6b:c1:
07:c9:fb:fa:af:09:48:22:fe:3e:3b:cb:ec:f9:9a:4e:2f:57:
d2:d0:1d:d2:34:14:6e:51:c0:cc:18:c3:e0:e3:aa:12:59:f8:
10:5f:84:fa:2f:6d:29:24:66:48:19:fa:9a:f3:50:28:d0:41:
b3:cf:b0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:05:21 2025 by rpki-client