Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7a9d4970-8e9c-4d11-a1c6-772a571334fd.roa
File: 7a9d4970-8e9c-4d11-a1c6-772a571334fd.roa (raw, json)
Hash identifier: S84zcGwIpjPXeyCzzxo4P8WdZazSyBsNcyaN2bHC6Ww=
Subject key identifier: 75:81:C8:61:72:88:1F:EF:80:7F:9E:2D:99:2E:9D:7D:28:44:ED:6C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 16EFCC25071DCC1D648C3352EBA009D2E92A0EFF
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7a9d4970-8e9c-4d11-a1c6-772a571334fd.roa
Signing time: Wed 25 Jun 2025 00:50:19 +0000
ROA not before: Wed 25 Jun 2025 00:50:19 +0000
ROA not after: Wed 30 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 185.143.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:ef:cc:25:07:1d:cc:1d:64:8c:33:52:eb:a0:09:d2:e9:2a:0e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 25 00:50:19 2025 GMT
Not After : Jul 30 23:59:59 2025 GMT
Subject: serialNumber=019a7bb4fe310e48133c0260c7726f74a5c6d7a53bee460fb0e498b58135d4c5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:29:06:ce:9b:54:39:0b:ff:95:16:8e:df:
4e:52:29:5a:3b:85:5d:35:e3:ec:44:44:b7:f6:b1:
7b:57:9f:97:40:50:ab:66:57:5d:4e:d3:8e:62:bb:
4c:49:0b:b9:b3:a3:16:1e:bc:cb:48:52:80:51:cd:
76:5c:63:a8:df:c7:cc:d6:6c:7b:d6:b7:79:53:21:
cf:15:3e:17:69:76:33:91:27:d8:7d:87:bb:f2:ea:
86:9e:b6:c4:6a:05:c6:ee:44:38:b1:ad:07:fa:30:
aa:15:9b:ac:87:dd:1d:47:97:65:d4:04:81:a0:cb:
60:ca:7e:42:20:35:7a:3e:8c:0e:39:d8:b4:cc:55:
99:08:4a:e3:30:f7:ca:6c:79:c3:4d:07:9d:d8:e1:
7f:7b:40:96:39:1b:b1:f7:2a:3c:50:5d:56:35:9d:
8b:7a:fd:ae:c9:e6:eb:bb:96:4f:f6:34:47:48:e6:
7a:16:60:0b:23:d5:18:c7:61:14:77:14:bb:bd:a3:
67:b4:c7:b7:d7:4a:55:ee:06:8b:7a:d2:c2:75:28:
41:17:9a:f2:92:7d:2f:26:b8:b0:f8:2d:66:2a:aa:
47:04:05:4a:50:4c:4b:43:60:a4:f2:f2:cd:5c:a0:
1c:be:ef:ba:34:df:71:cb:47:7b:32:dc:e5:00:ae:
fb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:81:C8:61:72:88:1F:EF:80:7F:9E:2D:99:2E:9D:7D:28:44:ED:6C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7a9d4970-8e9c-4d11-a1c6-772a571334fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.16.0/22
Signature Algorithm: sha256WithRSAEncryption
03:15:2f:35:7b:89:74:e8:a4:2c:39:44:a8:c2:c3:dd:ad:bb:
7f:e7:3f:bf:2a:bd:79:51:7a:7f:04:78:63:94:fa:8e:49:ba:
01:44:b3:6e:f0:96:64:80:6d:1c:6d:6e:13:86:3b:6d:4f:c3:
ce:ce:cc:a1:4b:55:96:03:f3:89:c3:11:b4:57:d6:cb:b0:c8:
9b:44:b0:f5:6e:d7:52:fd:6c:a3:d1:9b:aa:d5:b3:c8:8f:fe:
71:05:3c:ba:82:41:53:5a:29:46:ac:d9:1c:c3:2e:90:5a:50:
98:04:21:c9:70:02:97:a3:66:9d:9e:d0:00:a8:f5:78:83:0a:
d8:62:84:e9:9d:9a:a0:ba:75:d7:6f:29:90:20:74:c5:e1:2b:
ce:fc:45:12:e8:6d:3c:9b:86:6c:6f:74:9c:72:7c:86:ec:43:
2b:1b:0b:c1:7e:fe:8c:c8:4b:7c:36:4b:83:46:cd:36:db:d2:
f7:c1:f2:e7:c7:ed:8d:20:1a:7e:a8:3e:73:4d:f1:40:af:5b:
94:83:f5:7f:3f:c2:67:b7:b6:d2:43:d1:20:71:35:c0:f6:84:
18:d7:4e:bc:90:ce:ea:8c:32:11:7e:f3:49:74:53:a5:03:98:
b2:86:dd:d3:ab:24:0e:6c:a5:cb:75:02:df:ff:12:cb:af:04:
16:0c:dc:49
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUFu/MJQcdzB1kjDNS66AJ0ukqDv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA2MjUwMDUwMTlaFw0yNTA3MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQDAxOWE3YmI0ZmUzMTBlNDgxMzNjMDI2MGM3NzI2Zjc0YTVjNmQ3YTUzYmVl
NDYwZmIwZTQ5OGI1ODEzNWQ0YzUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKU2KQbOm1Q5C/+VFo7fTlIpWjuFXTXj7EREt/axe1efl0BQq2ZXXU7TjmK7
TEkLubOjFh68y0hSgFHNdlxjqN/HzNZse9a3eVMhzxU+F2l2M5En2H2Hu/Lqhp62
xGoFxu5EOLGtB/owqhWbrIfdHUeXZdQEgaDLYMp+QiA1ej6MDjnYtMxVmQhK4zD3
ymx5w00Hndjhf3tAljkbsfcqPFBdVjWdi3r9rsnm67uWT/Y0R0jmehZgCyPVGMdh
FHcUu72jZ7THt9dKVe4Gi3rSwnUoQRea8pJ9Lya4sPgtZiqqRwQFSlBMS0NgpPLy
zVygHL7vujTfcctHezLc5QCu+5kCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBR1gchh
cogf74B/ni2ZLp19KETtbDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
N2E5ZDQ5NzAtOGU5Yy00ZDExLWExYzYtNzcyYTU3MTMzNGZkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmPEDAN
BgkqhkiG9w0BAQsFAAOCAQEAAxUvNXuJdOikLDlEqMLD3a27f+c/vyq9eVF6fwR4
Y5T6jkm6AUSzbvCWZIBtHG1uE4Y7bU/Dzs7MoUtVlgPzicMRtFfWy7DIm0Sw9W7X
Uv1so9GbqtWzyI/+cQU8uoJBU1opRqzZHMMukFpQmAQhyXACl6NmnZ7QAKj1eIMK
2GKE6Z2aoLp1128pkCB0xeErzvxFEuhtPJuGbG90nHJ8huxDKxsLwX7+jMhLfDZL
g0bNNtvS98Hy58ftjSAafqg+c03xQK9blIP1fz/CZ7e20kPRIHE1wPaEGNdOvJDO
6owyEX7zSXRTpQOYsobd06skDmyly3UC3/8Sy68EFgzcSQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 03:02:59 2025 by rpki-client