Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9ebfa348-5910-4667-b4db-cfb5bb3acbc8.roa
File: 9ebfa348-5910-4667-b4db-cfb5bb3acbc8.roa (raw, json)
Hash identifier: aokR2Uug5LRiXgb/WMoz6vSUINx+6NLXx/GUCtVIoyY=
Subject key identifier: 03:A9:66:22:6A:52:51:09:C6:E3:11:5D:FA:C3:EF:48:C8:99:88:C4
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 375F1C334025E2B7B41290B9E70D68E071319980
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9ebfa348-5910-4667-b4db-cfb5bb3acbc8.roa
Signing time: Mon 16 Jun 2025 21:51:33 +0000
ROA not before: Mon 16 Jun 2025 21:51:33 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.188.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:5f:1c:33:40:25:e2:b7:b4:12:90:b9:e7:0d:68:e0:71:31:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 16 21:51:33 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=d3cebac85bfa43364a725b78d403702f28b0173df400959812c2f390b2cad01f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:30:1c:5b:8f:bc:95:95:50:c6:e4:ca:1d:
7e:66:1f:c8:59:2c:13:8f:04:57:9b:32:e6:76:06:
14:f2:8c:62:36:33:9c:a3:ae:8a:e9:2b:ed:dd:d1:
03:47:c3:c0:6b:4f:01:8f:4f:62:5b:54:68:11:5d:
da:bd:fd:7c:22:74:d6:40:2e:da:3b:e4:d0:b9:42:
08:79:ab:f9:37:f9:88:f1:c3:a7:c3:f2:88:e9:29:
6a:f6:14:88:bd:59:45:3a:ea:85:6e:f6:e5:32:73:
1f:79:0a:ba:07:9a:1a:28:98:eb:3c:f4:b9:60:2d:
e0:cd:90:4e:aa:28:31:aa:84:17:ae:73:71:2b:f4:
83:cf:38:56:84:7d:93:e9:53:4d:fb:82:34:0b:0a:
f8:ea:94:fe:c5:b8:f5:4e:9b:5c:ee:c1:43:82:83:
28:5a:89:03:5d:2b:86:3f:1e:a7:86:9b:eb:0a:bc:
8d:7c:24:60:13:7e:2f:7b:d6:6c:cd:25:d3:de:a3:
aa:69:ea:f7:fb:7f:cd:8e:1f:e7:04:06:5b:4a:65:
bc:0b:30:ea:95:a8:1a:f0:a9:19:23:27:c0:c2:8c:
e4:a5:8a:f5:2e:d9:26:60:8d:74:6a:95:54:c4:06:
c1:d5:6c:5d:fe:5c:d2:b6:a1:ef:7b:31:9c:29:e0:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A9:66:22:6A:52:51:09:C6:E3:11:5D:FA:C3:EF:48:C8:99:88:C4
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9ebfa348-5910-4667-b4db-cfb5bb3acbc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.188.0.0/15
Signature Algorithm: sha256WithRSAEncryption
7e:d8:20:3d:e1:88:52:5c:67:db:b9:ec:91:1e:a4:fa:ed:75:
9d:f3:16:de:fe:47:9d:80:f0:fe:3f:c2:15:e8:6a:60:1d:e9:
a0:2c:1a:98:10:c7:73:b0:b5:a5:10:19:fd:6e:29:f9:05:65:
26:3c:ec:b6:fd:e8:e9:9f:b0:61:b5:9c:84:12:da:13:b3:ad:
5a:bc:07:95:06:d6:df:dd:48:63:7e:63:78:92:2c:a0:9b:12:
4b:99:a9:61:ba:98:af:5b:e8:f2:89:9b:ae:dc:e9:62:d7:75:
1c:bd:c9:ea:5f:ca:ad:f7:9f:4d:ff:3f:7d:51:42:44:e4:7f:
be:4c:60:d4:f7:e6:62:29:ec:64:fb:a3:06:49:2a:f3:d5:46:
9e:ce:50:93:98:a3:df:60:a5:dd:e6:e4:e7:23:ff:b9:c9:14:
b8:7f:65:02:d6:f1:82:c0:8d:5a:02:14:c5:cc:74:28:6f:bb:
48:8f:46:68:92:c8:5a:b4:22:14:9f:28:94:9e:a4:16:3a:ba:
88:c8:85:53:56:19:8d:84:7f:67:cb:5d:95:3f:49:3d:65:96:
c4:dd:39:27:f9:a7:0c:25:14:a7:c5:75:7f:68:87:03:b5:0e:
e3:51:57:3d:5b:31:b9:fc:03:d7:c3:c6:4f:54:ed:07:30:ce:
67:4c:e3:60
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUN18cM0Al4re0EpC55w1o4HExmYAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA2MTYyMTUxMzNaFw0yNTA3MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQGQzY2ViYWM4NWJmYTQzMzY0YTcyNWI3OGQ0MDM3MDJmMjhiMDE3M2RmNDAw
OTU5ODEyYzJmMzkwYjJjYWQwMWYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM73MBxbj7yVlVDG5ModfmYfyFksE48EV5sy5nYGFPKMYjYznKOuiukr7d3R
A0fDwGtPAY9PYltUaBFd2r39fCJ01kAu2jvk0LlCCHmr+Tf5iPHDp8PyiOkpavYU
iL1ZRTrqhW725TJzH3kKugeaGiiY6zz0uWAt4M2QTqooMaqEF65zcSv0g884VoR9
k+lTTfuCNAsK+OqU/sW49U6bXO7BQ4KDKFqJA10rhj8ep4ab6wq8jXwkYBN+L3vW
bM0l096jqmnq9/t/zY4f5wQGW0plvAsw6pWoGvCpGSMnwMKM5KWK9S7ZJmCNdGqV
VMQGwdVsXf5c0rah73sxnCngP+0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQDqWYi
alJRCcbjEV36w+9IyJmIxDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
OWViZmEzNDgtNTkxMC00NjY3LWI0ZGItY2ZiNWJiM2FjYmM4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATO8MA0G
CSqGSIb3DQEBCwUAA4IBAQB+2CA94YhSXGfbueyRHqT67XWd8xbe/kedgPD+P8IV
6GpgHemgLBqYEMdzsLWlEBn9bin5BWUmPOy2/ejpn7BhtZyEEtoTs61avAeVBtbf
3UhjfmN4kiygmxJLmalhupivW+jyiZuu3Oli13UcvcnqX8qt959N/z99UUJE5H++
TGDU9+ZiKexk+6MGSSrz1UaezlCTmKPfYKXd5uTnI/+5yRS4f2UC1vGCwI1aAhTF
zHQob7tIj0ZokshatCIUnyiUnqQWOrqIyIVTVhmNhH9ny12VP0k9ZZbE3Tkn+acM
JRSnxXV/aIcDtQ7jUVc9WzG5/APXw8ZPVO0HMM5nTONg
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:59:57 2025 by rpki-client