Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ce87dbb9-4413-42c2-ba81-44ccdf95bd2c.roa
File: ce87dbb9-4413-42c2-ba81-44ccdf95bd2c.roa (raw, json)
Hash identifier: snqP7ECwaz/oTACWmNKGmkR9t06L0QXeLf2jTheakts=
Subject key identifier: 99:94:91:FA:1F:93:38:5E:2B:5F:24:2D:29:A9:9C:4C:53:A2:6F:F8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6236214320D2271A7E395C264CB08F8AF9A7AC94
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ce87dbb9-4413-42c2-ba81-44ccdf95bd2c.roa
Signing time: Mon 16 Jun 2025 22:00:49 +0000
ROA not before: Mon 16 Jun 2025 22:00:49 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 57.99.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:36:21:43:20:d2:27:1a:7e:39:5c:26:4c:b0:8f:8a:f9:a7:ac:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 16 22:00:49 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=6720b6f72d1f20006070ee894af1cb0c474aa2561d8dce9bcbf10a6fd226f65e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:cd:77:ee:0c:33:26:0e:61:9a:01:79:7a:
37:78:f3:ca:c4:98:55:c9:7e:32:0a:15:1a:be:40:
87:51:8a:81:db:e6:8e:30:59:4c:4f:5e:76:12:85:
43:a7:28:61:1b:98:f3:ba:76:7d:1a:ef:f7:f5:92:
b0:e0:b8:c4:7d:37:b1:e3:e9:98:ea:60:c4:40:8e:
46:f6:04:76:32:24:d0:1e:2d:6d:7a:d6:2a:82:c7:
6d:81:a8:77:e5:2a:c2:9b:b0:98:30:9a:78:a7:ae:
bc:af:2b:e3:cb:d0:09:3c:64:11:f9:55:83:cc:f6:
0a:69:34:33:3b:c0:b4:88:c9:f3:e6:43:81:ec:52:
83:9f:5c:79:64:4d:38:b4:07:59:0f:20:f8:65:cd:
52:32:cd:bb:85:ec:5a:82:45:ec:f4:b2:28:ce:b7:
84:03:73:59:dc:2e:75:55:23:fe:9c:27:97:f7:8a:
8a:95:a2:c6:39:0f:48:bb:81:ea:a1:5b:08:60:70:
3b:c5:63:48:6a:2b:e4:4c:60:dd:53:20:fb:a4:13:
32:4d:e7:07:c5:3d:0a:8b:92:bd:46:99:f7:a7:e8:
76:f6:da:b4:e6:a9:44:25:64:a7:3b:a0:22:66:51:
7f:2f:aa:97:43:e1:86:27:42:22:21:54:dc:74:e7:
22:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:94:91:FA:1F:93:38:5E:2B:5F:24:2D:29:A9:9C:4C:53:A2:6F:F8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ce87dbb9-4413-42c2-ba81-44ccdf95bd2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.99.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:04:30:d3:49:e5:b1:b9:14:bb:79:55:5d:27:0e:df:b9:e4:
11:9a:d1:a9:62:06:75:a6:02:e2:42:31:65:82:23:05:a5:9a:
9a:13:f5:bf:7c:ba:5c:7f:45:e2:71:1d:b8:f4:e9:27:62:8e:
16:92:71:73:42:54:0f:d2:e2:8a:8e:28:4b:5f:c1:bf:21:4a:
50:69:9b:e9:6a:a2:22:cd:d4:e0:5b:b1:bc:67:cb:5d:95:bb:
81:56:ab:18:67:c4:61:4b:50:86:55:3b:36:b3:a5:47:50:e3:
97:fc:ab:2f:5d:a5:a8:24:a4:cc:aa:44:48:b9:4d:32:fb:cc:
bd:df:d2:a0:a1:76:d7:68:7c:74:da:c2:7e:b6:5c:90:3e:21:
72:a5:ba:3e:7c:b4:9e:2d:c4:ff:ff:2f:0c:c9:59:2e:bd:01:
2f:db:e0:be:2f:11:5b:12:24:ca:db:b5:bb:b0:93:2e:92:be:
20:21:3b:51:cf:ac:74:18:35:be:c8:3a:8c:83:3a:c5:99:fc:
ad:96:f1:6b:74:1c:f8:06:a6:99:3f:1f:ef:ce:1c:43:f4:fe:
15:65:2b:71:4b:82:51:b7:f2:98:d9:c2:26:e2:77:38:b8:67:
1c:d7:35:6b:dd:58:e1:0e:6e:e6:08:ff:21:1e:5b:f7:19:51:
cc:91:12:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:15:19 2025 by rpki-client