Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa
File: 83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa (raw, json)
Hash identifier: bPRLkqXc5ySjB0uZIsuslxmx0JdMb2nBEdH8orzcqec=
Subject key identifier: 7F:4A:F0:5A:07:E9:D1:9E:40:53:73:8A:B4:D4:05:BC:8D:F6:5F:BD
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 20A4ED8902FFD05701C4450C364BA900C37EB9E8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa
Signing time: Mon 16 Jun 2025 21:50:51 +0000
ROA not before: Mon 16 Jun 2025 21:50:51 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 213.72.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:a4:ed:89:02:ff:d0:57:01:c4:45:0c:36:4b:a9:00:c3:7e:b9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 16 21:50:51 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=8bf99528577fa9810bf3cc441cd2f966a64890e54e982cfa1d86047fd5d8c69a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:f7:4f:fb:1c:41:c0:1f:24:43:33:69:18:
d3:21:0b:a0:b0:37:33:9b:a8:32:b5:68:51:96:72:
f5:19:bd:69:2f:65:b2:4b:20:7f:6f:41:7b:45:57:
3f:8d:0d:7f:82:7c:dc:eb:d2:61:86:50:05:bd:74:
d1:47:28:51:fc:92:ab:9a:90:1e:8b:cf:b1:97:ab:
e0:f5:92:e8:68:2b:95:ab:74:a7:69:19:14:35:a5:
54:a7:ce:ec:a5:21:fb:c2:2a:32:81:f9:ee:2a:f5:
55:b1:b9:6a:30:98:f6:8e:48:26:5c:53:66:4c:ac:
1b:48:b5:1a:41:3c:b0:1e:4a:25:5b:b5:90:f7:09:
48:c7:62:f6:29:27:22:ed:7a:ec:cb:ce:a8:0a:3a:
c2:a2:94:2c:0e:e4:11:f0:26:a6:07:99:7c:dc:15:
40:12:db:5e:b6:cc:61:ac:64:c9:00:6a:40:59:d5:
6a:a9:ac:75:a0:1a:2a:8a:92:24:a3:34:e3:31:c1:
dd:aa:99:26:19:3a:79:7a:69:8e:64:f0:4e:11:c4:
23:a4:84:4c:90:f7:7f:2d:90:67:77:f2:fd:bb:7f:
55:38:a0:31:18:81:56:3e:9d:6e:cf:35:32:43:81:
1a:94:8c:13:75:36:be:61:18:e2:f8:33:72:a9:8e:
ba:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4A:F0:5A:07:E9:D1:9E:40:53:73:8A:B4:D4:05:BC:8D:F6:5F:BD
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.72.0.0/17
Signature Algorithm: sha256WithRSAEncryption
25:ca:2b:4a:6d:d3:21:42:f5:19:ec:dc:79:3f:a0:70:e2:02:
7d:cc:27:90:78:c9:35:d8:ca:94:8b:fb:71:09:4d:16:50:78:
88:7a:96:cb:82:bc:07:96:9f:0f:61:0c:ef:e4:19:61:fe:2b:
fd:d9:83:d2:9e:1d:80:e5:aa:04:5d:3a:37:2c:ac:45:06:44:
cc:0a:57:fb:77:79:d7:9a:f6:cb:43:1f:16:8d:4c:19:00:08:
98:a7:2f:de:10:6d:ed:98:eb:48:78:57:b1:5f:c3:35:7c:67:
7b:0e:43:5d:db:e9:4a:74:1e:5d:ec:f4:63:5c:49:df:34:e3:
62:1e:8a:e9:ba:44:8d:41:28:d3:8b:e7:1d:ae:10:e2:ce:7c:
0c:be:e1:29:ad:77:f0:95:3e:1a:57:0f:d7:e8:f9:af:f8:97:
32:fa:4a:51:f1:e6:b3:bf:81:8a:db:cf:f7:ed:ad:e8:4c:8c:
31:33:c2:e5:a2:89:65:87:93:db:a1:02:89:4a:44:5a:4f:03:
64:0c:9a:6e:f2:b6:f5:38:ea:ae:1b:5f:7c:21:91:b7:23:82:
6e:d4:32:c8:e3:f8:7c:f7:b5:4b:5b:86:d4:5b:73:f3:0f:58:
be:a9:9b:56:a7:48:bd:60:84:63:1c:1f:6f:68:fc:9a:a9:4d:
0f:08:93:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:24:49 2025 by rpki-client