Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a3eae5c-027e-4c38-ab8e-330b3e5bad97.roa
File: 9a3eae5c-027e-4c38-ab8e-330b3e5bad97.roa (raw, json)
Hash identifier: g9/yfS6aAPagDlvB16yUTeMNtR63ghKcnTNDbNsf26g=
Subject key identifier: CB:20:89:AA:FF:28:7C:0F:B2:3D:17:8B:C2:6F:2E:63:A0:11:BB:5A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2B9EB355B33650D436CE61F10CC6BD61D30AD33F
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a3eae5c-027e-4c38-ab8e-330b3e5bad97.roa
Signing time: Mon 16 Jun 2025 21:51:20 +0000
ROA not before: Mon 16 Jun 2025 21:51:20 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.139.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:9e:b3:55:b3:36:50:d4:36:ce:61:f1:0c:c6:bd:61:d3:0a:d3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 16 21:51:20 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=9740db06b563011b1fb50202fd89641248bb65890cd1b4f5ac3df05400c6d937, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:f4:46:01:b5:95:6c:ec:32:48:c7:f2:a1:
46:80:ae:5e:34:00:08:1a:6a:fe:2e:72:fb:57:7c:
d0:02:fb:e7:83:e0:29:df:65:3f:58:01:e7:c9:b1:
0b:34:18:61:e2:0d:72:fd:52:be:94:10:69:3c:a2:
24:24:fb:17:85:8e:27:28:c2:2b:b8:b6:45:b8:83:
75:a9:c7:47:57:af:ed:a1:47:a8:7d:dc:25:24:be:
4a:c2:0a:3a:c7:49:d5:ee:4d:8e:6e:d2:9e:f2:2a:
85:04:d4:39:68:b5:cf:fa:04:19:9a:f7:41:9e:20:
58:48:23:84:24:bc:11:18:6c:02:a8:22:f8:4e:03:
37:0c:77:3a:13:bb:fd:24:c3:28:58:f5:37:ec:d5:
c8:de:93:c9:dc:c0:c9:07:01:54:f0:3c:cd:a5:17:
05:c5:ae:62:11:89:6d:93:8b:c3:a2:b8:1c:7e:be:
85:23:32:b1:72:76:f9:f3:28:d9:b2:e2:f0:d1:a8:
2e:d3:a3:a1:3a:db:38:06:57:26:d1:23:49:32:88:
d9:7a:2f:a8:d9:44:19:71:71:80:b1:85:b9:20:f8:
e3:1d:c7:5c:29:23:cc:ef:a1:3b:6a:f2:55:99:68:
71:14:03:2e:79:7d:ad:49:04:41:89:98:bb:f2:f2:
d1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:20:89:AA:FF:28:7C:0F:B2:3D:17:8B:C2:6F:2E:63:A0:11:BB:5A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a3eae5c-027e-4c38-ab8e-330b3e5bad97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.139.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cf:06:44:f0:d0:a5:73:32:11:1a:5f:7e:08:a4:c0:9d:42:66:
aa:31:0d:d2:6a:64:4c:3c:d1:70:1a:4a:89:5c:36:c5:04:a5:
dc:ab:49:71:3b:78:09:eb:03:e7:6f:b8:f6:d6:16:b4:20:9d:
2a:73:a4:14:c7:a3:9c:b0:3d:f1:27:78:0e:b7:e3:39:68:d0:
ca:47:fb:e7:3e:f6:34:f5:fd:2e:4f:09:e7:fd:7b:11:f1:3a:
16:28:3a:2e:3b:ae:0e:26:19:19:79:9e:ac:14:7e:bf:a6:15:
3c:f7:ed:62:82:96:f0:12:63:d0:50:c6:64:7e:81:28:e1:85:
33:8a:96:65:16:94:54:c7:aa:96:3a:24:0c:26:a6:dc:f8:9b:
07:0d:d0:f7:97:e0:28:96:3f:16:2f:e4:ab:b3:8c:f6:c2:d3:
3f:dd:50:4e:7d:4e:11:9a:ab:20:b5:e9:b8:1d:38:a0:96:46:
24:b2:dc:53:09:61:7b:12:15:cd:34:3c:88:57:60:eb:63:ac:
be:e8:fa:67:a6:bc:88:fd:69:5b:cf:d5:e2:d7:b3:45:70:65:
d6:2a:0c:e3:7d:67:5a:bf:28:7a:44:bc:90:8a:c8:9d:69:28:
b2:d1:03:ae:10:48:db:5e:30:79:95:09:a7:50:9d:60:d5:a2:
f6:15:bf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:04:34 2025 by rpki-client