Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/54f9687d-a273-4060-846b-ce640aca7c79.roa
File: 54f9687d-a273-4060-846b-ce640aca7c79.roa (raw, json)
Hash identifier: a5FeVV+ivSDo5y9Jbk+lrjvoXOaAAF0JEPE0UTfoHBs=
Subject key identifier: BE:CF:81:72:4C:23:BA:37:75:F9:78:26:73:28:E4:2D:6F:59:6C:80
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5F439D6352DDCA3E27A81C56F011BC4CF0C2A40B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/54f9687d-a273-4060-846b-ce640aca7c79.roa
Signing time: Mon 29 Sep 2025 15:40:11 +0000
ROA not before: Mon 29 Sep 2025 15:40:11 +0000
ROA not after: Mon 03 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.44.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:43:9d:63:52:dd:ca:3e:27:a8:1c:56:f0:11:bc:4c:f0:c2:a4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 29 15:40:11 2025 GMT
Not After : Nov 3 23:59:59 2025 GMT
Subject: serialNumber=9347766d788c9654fd0b5bcc36d80ad2d5278d9e4bb7a4ca8b74a9abef3a77e5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:4b:0d:47:3c:e8:99:bf:7e:ff:5b:8e:d0:
2a:31:9c:95:ca:00:0a:85:f1:1f:1e:a2:85:11:29:
33:a7:65:ea:af:4e:8a:e3:54:32:f2:04:6c:e6:a4:
b7:9c:f8:db:33:45:46:4f:8d:28:94:62:d5:94:01:
68:04:df:cf:b3:0a:23:33:40:42:f8:ed:58:41:96:
80:66:30:4e:f4:02:80:fd:91:be:09:d3:3c:8b:23:
4e:78:d6:08:99:a8:0b:4a:ae:81:bc:68:e1:61:b0:
06:37:1c:fb:9d:05:d7:e0:9e:7a:dd:db:7a:94:ee:
b4:9e:c9:2d:12:4c:34:a9:1b:90:c2:a4:ef:e8:8b:
17:04:e6:44:b5:bf:e8:78:cb:08:76:ba:de:8c:71:
a4:ac:19:3a:c5:c6:70:eb:d3:82:17:37:13:dd:93:
35:df:63:24:af:fc:2f:c5:8b:cd:37:83:16:de:50:
89:3a:90:cf:bc:22:c4:6e:50:61:dc:3f:d9:75:0f:
f0:d1:5e:c5:e0:5b:71:dc:90:d0:df:48:52:94:de:
d9:8e:de:dc:7d:61:a6:79:11:b7:e9:06:4b:d2:f9:
79:5f:99:48:12:f3:64:e2:44:2d:f4:17:c0:37:fa:
9f:42:d4:1f:0d:90:cc:3c:77:9d:e0:7c:48:c6:c3:
cd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CF:81:72:4C:23:BA:37:75:F9:78:26:73:28:E4:2D:6F:59:6C:80
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/54f9687d-a273-4060-846b-ce640aca7c79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.44.0.0/14
Signature Algorithm: sha256WithRSAEncryption
4e:a0:40:4c:6a:0a:fb:e8:6d:b6:fe:fd:81:f7:37:eb:eb:8c:
54:c2:29:c9:2e:16:f2:b7:5f:1a:a3:01:b3:65:b4:44:a9:eb:
0e:73:02:2e:60:ef:87:27:ae:24:a8:ab:db:d0:28:8d:fe:c8:
26:b2:73:a9:af:84:8d:af:94:83:59:ff:75:19:ff:58:c2:d4:
50:74:62:5e:6c:53:1c:61:9c:2c:bb:34:0e:f5:2f:9c:e4:07:
db:cb:36:75:ad:cf:0e:99:7b:d0:b0:2e:ba:5d:ef:71:0f:7b:
83:d7:67:45:b9:4e:0a:be:7a:a8:67:6c:80:03:e3:9d:2c:f1:
e3:19:be:4f:59:cf:e5:07:52:63:30:16:df:1b:a8:20:aa:10:
f7:63:34:7c:5f:d5:3e:31:1d:78:91:0b:09:82:a0:15:52:ac:
3f:f9:c5:43:e6:7a:b1:e1:32:f0:88:b9:0f:ed:12:50:93:63:
78:49:dd:8e:b9:ff:f7:93:cc:39:52:78:25:5f:58:2a:68:8a:
b4:c9:b9:73:49:75:f7:52:de:54:29:00:e1:bf:28:25:c4:37:
14:c0:3a:04:b2:dc:5f:a6:8e:05:be:92:ed:0f:fb:85:1b:9a:
ac:3d:fe:1b:b3:2a:9c:ab:aa:46:65:3a:9b:a7:60:98:9d:57:
3b:f8:5b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:01:27 2025 by rpki-client