Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/383c1f6d-4e0e-4e33-a2ce-f49386dcc1f1.roa
File: 383c1f6d-4e0e-4e33-a2ce-f49386dcc1f1.roa (raw, json)
Hash identifier: er02bpa1R8gpVfE2YZfidiKVtl50FcDzyxVKuinmZAo=
Subject key identifier: F5:45:F0:3F:E5:E3:82:E4:B4:0F:51:D7:52:E9:B2:37:83:F0:19:23
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7FADB33AA0730AE774B5CD6858DC6952724B6196
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/383c1f6d-4e0e-4e33-a2ce-f49386dcc1f1.roa
Signing time: Mon 16 Jun 2025 21:50:49 +0000
ROA not before: Mon 16 Jun 2025 21:50:49 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 200.224.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:ad:b3:3a:a0:73:0a:e7:74:b5:cd:68:58:dc:69:52:72:4b:61:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 16 21:50:49 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=f03f9566d141feea33da103704569acbc5a52d4c41e61bd8bc429ad3103d84b0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:a3:74:60:7d:ea:e2:ce:34:bf:f1:e8:8a:
7e:9b:6d:39:2d:8f:57:d8:7c:58:2f:5f:e1:0d:3d:
c8:a3:22:1e:a4:29:b2:15:6d:87:65:0e:26:d9:87:
a0:83:d0:1e:19:02:85:a1:7f:2e:d6:10:dc:c4:db:
e4:93:c7:4d:f8:93:d3:b3:3e:7b:77:4c:68:5a:30:
2c:3f:35:df:31:4e:c0:c6:ff:f3:9d:aa:6d:d3:d2:
43:7a:fa:84:22:4d:a5:41:50:10:bc:d5:12:d9:cd:
ac:02:bf:29:a1:55:06:62:1b:aa:45:49:f9:f4:5e:
85:d6:02:84:1c:45:c8:fc:2a:b9:d9:cc:5f:14:d5:
4a:eb:b0:97:01:22:c9:1e:24:45:da:d9:c8:76:08:
85:56:77:7a:59:c3:b8:8c:17:bd:c5:71:9b:02:96:
8d:cf:1d:4d:71:c1:9e:b7:b2:fe:5e:92:58:1a:cb:
a3:ea:b1:9a:27:a3:99:6a:71:b9:1b:0f:09:e8:a2:
61:c0:0b:e7:03:57:68:1f:f9:65:ed:32:69:8e:79:
71:f9:1b:61:af:4b:5b:67:f9:72:5b:d8:98:6f:f5:
e1:2e:fb:8d:66:aa:66:ab:30:1c:57:16:12:35:ca:
58:f7:47:be:45:e9:fc:27:cf:4f:21:a8:99:02:61:
1b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:45:F0:3F:E5:E3:82:E4:B4:0F:51:D7:52:E9:B2:37:83:F0:19:23
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/383c1f6d-4e0e-4e33-a2ce-f49386dcc1f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.224.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:b2:f0:25:cc:6c:37:76:04:12:58:3b:44:24:90:20:44:11:
70:f7:76:2c:a6:3f:3a:2d:1b:93:76:0e:f3:fb:20:40:8e:ab:
8e:cb:1e:03:6f:bc:0f:5f:c8:f3:fd:93:d1:e3:38:6c:00:f6:
94:cf:68:97:38:b3:80:0d:b0:4b:f4:41:1a:a3:cb:a6:98:9e:
82:bf:21:bc:54:51:c3:37:51:39:3c:c3:ed:f8:3d:b8:5b:b8:
45:fa:a6:72:8f:8d:94:dc:27:47:62:5c:09:90:b0:16:10:d0:
f0:f2:e4:35:c8:f3:c0:3d:25:76:8e:f5:56:98:53:e0:02:a5:
6f:3c:cf:4f:c9:49:ec:a0:c8:a3:a2:66:34:ca:c3:bd:4e:09:
87:30:fc:70:be:1a:4f:f0:f2:ee:e9:40:29:49:a4:98:f5:4e:
2f:73:cb:53:e1:a0:d9:b2:88:ab:8b:c0:44:de:07:46:b2:e2:
2d:48:b8:2f:10:6c:11:11:ae:a9:f9:4d:fa:3d:45:68:8c:6e:
a4:fa:63:69:0a:e6:a8:e5:6f:c7:6a:42:52:b2:4d:61:11:4d:
ea:c5:73:7d:cf:72:00:29:58:7f:42:cd:ae:9b:74:7a:83:b3:
94:fa:dd:a2:90:91:97:d8:0f:80:1c:b9:ba:76:3b:d5:90:44:
11:4e:12:82
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUf62zOqBzCud0tc1oWNxpUnJLYZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA2MTYyMTUwNDlaFw0yNTA3MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQGYwM2Y5NTY2ZDE0MWZlZWEzM2RhMTAzNzA0NTY5YWNiYzVhNTJkNGM0MWU2
MWJkOGJjNDI5YWQzMTAzZDg0YjAxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK65o3RgferizjS/8eiKfpttOS2PV9h8WC9f4Q09yKMiHqQpshVth2UOJtmH
oIPQHhkChaF/LtYQ3MTb5JPHTfiT07M+e3dMaFowLD813zFOwMb/852qbdPSQ3r6
hCJNpUFQELzVEtnNrAK/KaFVBmIbqkVJ+fRehdYChBxFyPwqudnMXxTVSuuwlwEi
yR4kRdrZyHYIhVZ3elnDuIwXvcVxmwKWjc8dTXHBnrey/l6SWBrLo+qxmiejmWpx
uRsPCeiiYcAL5wNXaB/5Ze0yaY55cfkbYa9LW2f5clvYmG/14S77jWaqZqswHFcW
EjXKWPdHvkXp/CfPTyGomQJhG8kCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBT1RfA/
5eOC5LQPUddS6bI3g/AZIzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MzgzYzFmNmQtNGUwZS00ZTMzLWEyY2UtZjQ5Mzg2ZGNjMWYxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMjgMA0G
CSqGSIb3DQEBCwUAA4IBAQBKsvAlzGw3dgQSWDtEJJAgRBFw93Yspj86LRuTdg7z
+yBAjquOyx4Db7wPX8jz/ZPR4zhsAPaUz2iXOLOADbBL9EEao8ummJ6CvyG8VFHD
N1E5PMPt+D24W7hF+qZyj42U3CdHYlwJkLAWENDw8uQ1yPPAPSV2jvVWmFPgAqVv
PM9PyUnsoMijomY0ysO9TgmHMPxwvhpP8PLu6UApSaSY9U4vc8tT4aDZsoiri8BE
3gdGsuItSLgvEGwREa6p+U36PUVojG6k+mNpCuao5W/HakJSsk1hEU3qxXN9z3IA
KVh/Qs2um3R6g7OU+t2ikJGX2A+AHLm6djvVkEQRThKC
-----END CERTIFICATE-----
Generated at Sun Jun 29 03:25:16 2025 by rpki-client