Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e2093baf-9227-4159-b7ff-180369fe3bda.roa
File: e2093baf-9227-4159-b7ff-180369fe3bda.roa (raw, json)
Hash identifier: KDZA9PJS+joVorZR98bbmznsNX+OdRfsP5YFKmM8ceQ=
Subject key identifier: 83:8C:81:52:E5:39:2C:79:C3:5D:12:55:C6:B4:62:5A:C2:FB:96:F4
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4A8C5EDFDE3E6F26E5364BC85969EE2AB070E725
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e2093baf-9227-4159-b7ff-180369fe3bda.roa
Signing time: Mon 16 Jun 2025 22:00:44 +0000
ROA not before: Mon 16 Jun 2025 22:00:44 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.88.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:8c:5e:df:de:3e:6f:26:e5:36:4b:c8:59:69:ee:2a:b0:70:e7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 16 22:00:44 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=ea82b0b706469c6b0c9ac88a69370fd3fee7a8191cc72abad18a35a603512fa6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:2d:51:a6:c0:78:4b:f5:52:7f:7a:d2:ad:
de:93:22:2f:bb:d0:12:b1:09:ab:96:fe:c2:a3:4c:
8f:d7:f9:1a:aa:ae:58:2d:88:1f:f6:41:c8:04:be:
1d:07:69:b8:ad:33:be:59:14:21:21:01:ce:c5:6b:
68:23:e5:d2:6b:2b:e2:0e:a7:e4:c3:bb:64:5a:2f:
f1:fd:a5:d6:0d:31:08:d8:76:d9:1f:a0:83:68:6c:
1a:5d:08:a7:d7:c7:6e:ab:7d:35:f2:05:75:25:93:
c1:c6:35:d0:51:56:41:52:0d:3a:09:93:18:55:d5:
9e:3f:57:62:a2:be:62:89:e7:63:d0:2e:52:f6:74:
ac:44:c6:9d:14:71:ed:17:a4:b4:3c:52:86:fa:1e:
e9:ca:a3:63:5a:6c:ca:06:50:1f:5b:a8:05:ff:4f:
d9:3c:c5:f2:1b:e0:68:f0:25:d3:bc:78:06:4e:60:
2b:69:d0:8e:9f:d3:09:af:81:79:eb:dd:e3:77:a0:
26:97:07:e0:a8:07:33:a3:9c:44:9b:51:53:0d:70:
f7:70:f2:3f:cb:a5:2f:80:3e:0c:83:2c:89:19:62:
7a:5e:ba:9c:3f:8c:81:1b:7d:d1:80:6c:2c:7d:b4:
04:97:02:44:92:d9:34:6d:84:ee:e9:aa:3a:5c:4e:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8C:81:52:E5:39:2C:79:C3:5D:12:55:C6:B4:62:5A:C2:FB:96:F4
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e2093baf-9227-4159-b7ff-180369fe3bda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.88.0.0/16
Signature Algorithm: sha256WithRSAEncryption
64:d3:2b:5f:45:b3:66:16:95:b7:7b:e1:54:7b:0f:7e:94:95:
f2:51:7e:2a:04:ae:6f:90:6d:6f:37:84:db:2a:c6:5a:86:ad:
1a:53:49:66:84:9f:a1:4d:45:8e:8e:d6:ce:22:8b:bf:22:fd:
71:70:e2:46:a7:6d:d3:6e:6f:be:d3:ce:a3:62:5e:6a:c3:c2:
c4:0e:07:6c:a7:69:55:15:b1:9f:6b:ef:3e:66:9a:33:a1:39:
63:49:a3:7b:9f:03:52:96:39:61:0a:23:c4:f2:bd:44:04:ca:
de:5d:9b:c0:18:00:66:2e:f1:28:65:c9:33:72:e9:3c:e0:0c:
02:1b:84:1c:e9:78:28:4e:cd:92:a5:5b:bb:63:04:58:fa:c3:
cb:f4:66:30:49:b9:36:f6:ca:6d:2f:b9:a6:3d:28:2d:92:32:
11:c4:19:7a:84:28:8c:96:ff:86:aa:30:ab:2b:17:23:9b:0f:
6c:90:15:cb:e5:5b:c7:dd:c6:bf:bc:89:f9:91:8f:ed:50:5b:
8b:e7:34:47:44:cd:84:d5:92:c1:c5:8d:18:a4:bf:d9:b9:e7:
de:f4:3e:29:2d:f3:f8:ba:d2:d7:66:2a:87:f9:54:2f:9b:3d:
46:6b:70:0b:03:24:b9:98:fe:01:86:33:82:57:ed:99:0c:ff:
3e:d4:ee:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:06:16 2025 by rpki-client