Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b2cfc52a-1f15-43b9-93f9-9828d60fbe69.roa
File: b2cfc52a-1f15-43b9-93f9-9828d60fbe69.roa (raw, json)
Hash identifier: q2Lm8gWOJ3bRG8d8sy56YYewByaPUpHWELCG+I5eaUw=
Subject key identifier: 86:8A:73:30:D0:2E:AD:9C:44:E0:87:F3:B5:63:20:C8:F7:04:CC:AC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 12503B5F9A60CBE01B17F3F5A72969A2489D5EB8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b2cfc52a-1f15-43b9-93f9-9828d60fbe69.roa
Signing time: Mon 16 Jun 2025 21:50:14 +0000
ROA not before: Mon 16 Jun 2025 21:50:14 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 193.218.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:50:3b:5f:9a:60:cb:e0:1b:17:f3:f5:a7:29:69:a2:48:9d:5e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 16 21:50:14 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=6eca26e136a8e69968e04bcb0e4ad6d2d0929be47bdcef9e923020bb282fe61d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:28:21:01:d9:6d:92:47:d4:c3:a2:c7:22:
08:08:97:c1:64:1e:ab:74:ac:32:32:ce:3c:32:ea:
f9:08:87:ed:8c:27:41:80:d2:96:28:45:b2:a5:56:
ad:e5:8d:1c:ce:fa:d8:e9:06:aa:48:ed:f0:6c:27:
86:70:b8:02:84:f9:fd:5a:28:e0:92:34:fe:e8:b6:
fb:b1:de:d1:02:80:01:c2:d8:03:b9:9e:ec:ea:d6:
23:02:d6:59:a9:fe:94:1a:08:7b:f5:70:e9:d2:1d:
c5:66:9a:5c:76:5d:30:86:fd:ed:f8:56:05:09:14:
cb:70:28:de:d0:25:9c:0b:f2:69:62:8f:13:cc:af:
a7:ee:ef:62:07:4c:06:78:5a:55:9d:e1:ae:7c:b1:
97:d8:ac:e2:cb:7e:8c:ac:39:62:01:d9:fc:17:d3:
eb:0b:4a:fc:6f:d9:b6:8c:76:99:a1:10:f0:65:42:
0b:d0:e7:20:ac:9e:68:f4:b1:fd:7b:66:16:9a:ee:
a1:c9:a2:ba:0c:4a:9c:17:67:17:3b:64:33:8c:77:
e5:e0:20:45:14:6a:1c:b1:df:25:de:8c:69:70:c2:
de:d3:f1:76:29:0e:3b:f7:63:08:89:3a:c9:a6:57:
10:95:f1:98:17:6f:ca:30:81:22:4e:f9:5f:bd:e8:
7b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8A:73:30:D0:2E:AD:9C:44:E0:87:F3:B5:63:20:C8:F7:04:CC:AC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b2cfc52a-1f15-43b9-93f9-9828d60fbe69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.122.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:59:a3:1f:d6:19:67:e9:c6:7a:a0:7f:85:3a:65:5a:62:5a:
bc:37:65:e5:be:66:27:d6:6b:04:38:df:7a:e2:92:84:e1:a4:
86:01:07:2e:2c:6d:d2:7d:4b:13:8c:16:d1:66:ef:03:e1:4d:
d1:4c:88:cd:4b:6a:a9:44:e8:52:ff:e6:0a:0c:3b:c0:f6:1e:
ff:f7:35:19:29:8c:20:1d:90:dd:0c:22:9e:e2:22:06:af:8e:
ca:f9:03:76:e6:72:c2:8c:07:25:29:ed:a9:63:02:13:81:2e:
8f:92:96:9b:7e:de:da:0f:e4:28:4f:15:56:52:c5:47:ea:28:
a3:f9:c2:84:54:17:07:92:6a:f1:ca:9e:3a:5a:5e:15:99:7a:
e0:de:f0:5e:8f:77:0b:90:f1:41:a5:71:6d:b1:5e:fe:c2:26:
d6:8a:b8:67:f1:8c:fc:9e:44:f8:71:65:e9:54:77:01:8d:5b:
0c:6a:d2:19:6d:8b:ac:90:3f:21:2a:46:c2:45:dd:43:3f:fe:
3e:02:89:91:88:53:66:c5:d0:47:a6:fe:85:67:7e:ce:04:a6:
17:3a:18:ea:70:52:4e:4c:3c:9f:85:f2:73:49:42:12:2c:fc:
d3:c0:31:06:99:2b:fa:72:29:d3:c5:47:8c:ab:74:c8:15:75:
84:19:37:43
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUElA7X5pgy+AbF/P1pylpokidXrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA2MTYyMTUwMTRaFw0yNTA3MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDZlY2EyNmUxMzZhOGU2OTk2OGUwNGJjYjBlNGFkNmQyZDA5MjliZTQ3YmRj
ZWY5ZTkyMzAyMGJiMjgyZmU2MWQxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKpcKCEB2W2SR9TDosciCAiXwWQeq3SsMjLOPDLq+QiH7YwnQYDSlihFsqVW
reWNHM762OkGqkjt8GwnhnC4AoT5/Voo4JI0/ui2+7He0QKAAcLYA7me7OrWIwLW
Wan+lBoIe/Vw6dIdxWaaXHZdMIb97fhWBQkUy3Ao3tAlnAvyaWKPE8yvp+7vYgdM
BnhaVZ3hrnyxl9is4st+jKw5YgHZ/BfT6wtK/G/Ztox2maEQ8GVCC9DnIKyeaPSx
/XtmFpruocmiugxKnBdnFztkM4x35eAgRRRqHLHfJd6MaXDC3tPxdikOO/djCIk6
yaZXEJXxmBdvyjCBIk75X73oe2cCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSGinMw
0C6tnETgh/O1YyDI9wTMrDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YjJjZmM1MmEtMWYxNS00M2I5LTkzZjktOTgyOGQ2MGZiZTY5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHaejAN
BgkqhkiG9w0BAQsFAAOCAQEAsVmjH9YZZ+nGeqB/hTplWmJavDdl5b5mJ9ZrBDjf
euKShOGkhgEHLixt0n1LE4wW0WbvA+FN0UyIzUtqqUToUv/mCgw7wPYe//c1GSmM
IB2Q3QwinuIiBq+OyvkDduZywowHJSntqWMCE4Euj5KWm37e2g/kKE8VVlLFR+oo
o/nChFQXB5Jq8cqeOlpeFZl64N7wXo93C5DxQaVxbbFe/sIm1oq4Z/GM/J5E+HFl
6VR3AY1bDGrSGW2LrJA/ISpGwkXdQz/+PgKJkYhTZsXQR6b+hWd+zgSmFzoY6nBS
Tkw8n4Xyc0lCEiz808AxBpkr+nIp08VHjKt0yBV1hBk3Qw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 05:04:39 2025 by rpki-client