Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a1b27e87-801f-4c9e-98a2-f81b54e8b8d9.roa
File: a1b27e87-801f-4c9e-98a2-f81b54e8b8d9.roa (raw, json)
Hash identifier: tLdZ1ECdMwhlyDwgzvgjzLm1gRq7lUg2bgxZLVm/0Wk=
Subject key identifier: 8D:00:F6:76:99:22:21:34:94:55:73:BF:16:B9:36:73:C3:27:59:0D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3A83D5444A43489174D0661153682293A2C4B6C2
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a1b27e87-801f-4c9e-98a2-f81b54e8b8d9.roa
Signing time: Tue 17 Jun 2025 00:51:04 +0000
ROA not before: Tue 17 Jun 2025 00:51:04 +0000
ROA not after: Tue 22 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.112.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:83:d5:44:4a:43:48:91:74:d0:66:11:53:68:22:93:a2:c4:b6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 17 00:51:04 2025 GMT
Not After : Jul 22 23:59:59 2025 GMT
Subject: serialNumber=4da601a828f917a443a73abb38b88ef011d088d45eab4b1cc1c274a6b649a29c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:97:9c:57:d4:44:e9:ca:b1:ab:a9:31:c1:
25:c4:2b:d9:72:59:99:d4:77:ce:cc:8b:8c:bf:33:
22:b5:9a:60:1c:64:34:b3:fc:9f:9e:a2:96:5b:18:
a1:ac:2f:85:b3:b1:e6:98:dd:eb:d1:84:a6:a8:9c:
be:f0:e6:09:e9:c9:52:ee:c0:e1:33:ba:6a:ec:25:
e6:9c:3d:39:6b:dc:cc:19:dd:f8:b3:20:8e:52:14:
48:d7:8e:a4:1e:f0:48:13:15:0d:53:f6:1a:65:82:
e9:ba:ad:c8:7f:af:fa:fa:a5:9f:32:51:4c:8a:46:
2c:32:64:bb:48:d3:b8:82:db:ac:37:76:33:d7:38:
c6:45:7d:28:e0:c3:d4:5f:cf:ea:e7:6f:ec:27:66:
21:c0:be:4b:77:e8:87:f0:47:13:4d:12:2b:82:d9:
74:64:94:9b:71:bc:fd:ac:e7:55:52:64:3b:8d:3b:
41:ad:03:39:7f:24:a5:c0:60:0d:2d:97:0d:a1:96:
3d:1c:3c:3c:b3:01:ed:61:a7:26:f1:9f:7c:88:52:
a9:b6:b3:37:0c:43:fc:b0:b5:f1:ae:9f:60:6e:2f:
ca:b3:01:1d:bf:bb:65:f5:06:42:78:b0:b4:81:65:
b0:1f:5a:0f:54:f7:e8:2c:d5:02:58:54:26:af:5f:
15:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:00:F6:76:99:22:21:34:94:55:73:BF:16:B9:36:73:C3:27:59:0D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a1b27e87-801f-4c9e-98a2-f81b54e8b8d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.112.0.0/15
Signature Algorithm: sha256WithRSAEncryption
10:3e:91:62:7a:66:11:8c:77:c0:af:4e:7d:fb:b8:1d:13:d7:
ea:ee:23:0a:a2:f3:74:15:4c:93:96:e1:e0:26:a8:57:f8:8d:
18:e8:ef:8e:57:d9:47:a4:9f:fe:c1:ec:45:cb:58:2d:f5:2c:
46:fd:51:27:53:13:f3:a4:e9:21:9f:2c:36:91:8d:8e:79:1d:
5b:c8:b3:eb:7d:b2:4e:f8:90:84:d2:3d:4e:00:0c:2e:27:02:
39:f0:63:76:b7:88:5e:53:9f:ec:05:b6:7d:c5:40:af:bd:24:
87:41:7e:5b:94:3b:b5:37:29:24:9f:35:69:2b:49:cc:77:d8:
18:72:dc:10:28:1c:ad:89:bb:1c:a4:9c:49:2c:53:11:4a:9b:
3b:e2:16:65:10:38:ed:a4:b0:a6:f2:13:74:97:4f:7f:7b:84:
3f:87:f3:12:f3:b7:76:c6:5d:59:ab:35:ea:5c:3c:37:dd:0a:
3f:cb:bd:41:1c:25:a1:00:39:a6:8a:0d:b9:23:b9:70:83:c7:
82:0c:49:bf:4d:2c:46:55:d2:19:d8:39:5b:c8:c3:a8:6a:58:
01:a3:b0:f3:ad:54:bc:5c:56:e3:3f:4c:e6:c8:b1:1f:24:96:
d1:e3:6d:86:e9:61:79:e5:1c:58:0c:95:ba:81:97:4e:26:c5:
83:b4:73:2a
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUOoPVREpDSJF00GYRU2gik6LEtsIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA2MTcwMDUxMDRaFw0yNTA3MjIyMzU5NTlaMHoxSTBHBgNV
BAUTQDRkYTYwMWE4MjhmOTE3YTQ0M2E3M2FiYjM4Yjg4ZWYwMTFkMDg4ZDQ1ZWFi
NGIxY2MxYzI3NGE2YjY0OWEyOWMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMLGl5xX1ETpyrGrqTHBJcQr2XJZmdR3zsyLjL8zIrWaYBxkNLP8n56illsY
oawvhbOx5pjd69GEpqicvvDmCenJUu7A4TO6auwl5pw9OWvczBnd+LMgjlIUSNeO
pB7wSBMVDVP2GmWC6bqtyH+v+vqlnzJRTIpGLDJku0jTuILbrDd2M9c4xkV9KODD
1F/P6udv7CdmIcC+S3foh/BHE00SK4LZdGSUm3G8/aznVVJkO407Qa0DOX8kpcBg
DS2XDaGWPRw8PLMB7WGnJvGffIhSqbazNwxD/LC18a6fYG4vyrMBHb+7ZfUGQniw
tIFlsB9aD1T36CzVAlhUJq9fFf0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSNAPZ2
mSIhNJRVc78WuTZzwydZDTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YTFiMjdlODctODAxZi00YzllLTk4YTItZjgxYjU0ZThiOGQ5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATNwMA0G
CSqGSIb3DQEBCwUAA4IBAQAQPpFiemYRjHfAr059+7gdE9fq7iMKovN0FUyTluHg
JqhX+I0Y6O+OV9lHpJ/+wexFy1gt9SxG/VEnUxPzpOkhnyw2kY2OeR1byLPrfbJO
+JCE0j1OAAwuJwI58GN2t4heU5/sBbZ9xUCvvSSHQX5blDu1NykknzVpK0nMd9gY
ctwQKBytibscpJxJLFMRSps74hZlEDjtpLCm8hN0l09/e4Q/h/MS87d2xl1ZqzXq
XDw33Qo/y71BHCWhADmmig25I7lwg8eCDEm/TSxGVdIZ2DlbyMOoalgBo7DzrVS8
XFbjP0zmyLEfJJbR422G6WF55RxYDJW6gZdOJsWDtHMq
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:59:07 2025 by rpki-client