Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e680ffe7-d77c-4433-81f9-ffbf76a45a6d.roa
File: e680ffe7-d77c-4433-81f9-ffbf76a45a6d.roa (raw, json)
Hash identifier: b3peYlSQkSPTXDUujAdazR/Nl3WVxqNIZ3Uab1tgJR0=
Subject key identifier: 15:38:E2:C1:F9:17:CE:2E:6B:B7:4C:CE:9E:FA:AC:68:EF:39:4B:8D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 677A4A6DA6041B4A545C71A4D5A0F164C54FC967
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e680ffe7-d77c-4433-81f9-ffbf76a45a6d.roa
Signing time: Mon 16 Jun 2025 21:50:17 +0000
ROA not before: Mon 16 Jun 2025 21:50:17 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 193.57.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:7a:4a:6d:a6:04:1b:4a:54:5c:71:a4:d5:a0:f1:64:c5:4f:c9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 16 21:50:17 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=f4a31db4eb2b092673ca267291d6c80dd855f94f02075f8d8edda522241eb283, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:3f:1d:b6:53:ed:d5:72:88:dd:f6:3b:22:
9b:54:c4:fb:4f:2f:ef:6c:0e:19:d0:be:f8:23:42:
61:13:ad:e8:a4:b8:14:9c:53:cb:c4:15:a2:d1:96:
13:05:49:5d:1c:e1:de:a0:3d:7d:3a:8e:66:7d:23:
f4:a6:5a:e7:e6:b3:56:53:19:27:6a:58:6d:31:cd:
19:27:a5:0b:76:ec:01:23:6e:95:e9:5f:f1:7f:7f:
e6:6b:c7:da:60:de:b3:77:5e:4b:f3:e6:7a:46:b2:
f9:ea:97:e5:61:c5:f7:82:cc:9f:81:50:9c:6e:ba:
35:f6:68:01:32:5e:27:49:bc:25:4c:fc:80:6b:0c:
e4:38:f9:00:eb:40:3c:74:85:a9:59:a6:1e:d2:a3:
7f:91:69:2c:9f:d5:82:97:c2:6a:3b:e5:46:3f:a9:
7d:b3:ac:73:ee:60:fe:92:06:43:b9:44:6e:bd:d7:
3a:3e:21:e8:01:73:e2:8f:dc:d6:8f:70:dc:6b:48:
2e:22:c4:58:03:82:5a:d9:a6:a2:5d:68:4e:22:5f:
a9:f9:e8:ec:37:e5:fd:71:f9:0c:b6:4e:6a:d7:e4:
69:af:3a:ac:8a:57:7f:3c:16:86:82:ee:65:43:0b:
d0:41:a8:8e:01:d0:78:f3:e3:44:1c:d4:ab:de:aa:
de:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:38:E2:C1:F9:17:CE:2E:6B:B7:4C:CE:9E:FA:AC:68:EF:39:4B:8D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e680ffe7-d77c-4433-81f9-ffbf76a45a6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.181.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:25:3d:04:0d:07:d9:d7:b7:33:57:29:a5:36:1f:4c:06:12:
2f:1c:ff:e0:ea:ce:d1:e7:d3:30:5d:d7:54:92:45:51:52:77:
cd:d6:9d:e0:25:e7:42:a6:bc:50:6f:cf:22:0f:36:69:b7:c1:
30:69:7a:37:b1:5d:df:a8:b0:4d:32:3f:42:0d:ac:c7:84:df:
6b:9a:78:b7:77:54:fa:14:04:47:da:d9:4c:d6:11:f8:50:b1:
81:2d:4a:5b:d8:3c:f8:1f:99:08:6e:ea:21:b2:33:5d:8a:6c:
aa:95:87:ae:fe:5b:72:43:5f:58:69:17:49:60:9c:4b:34:01:
50:41:6a:56:bc:5e:48:dd:57:32:e9:54:0e:de:57:42:7b:b8:
84:4f:fe:d3:9e:36:af:67:e0:bf:4a:1c:3d:28:83:02:47:93:
00:85:01:90:b8:9a:4f:cf:a0:5a:0e:ef:3f:88:ed:f8:ac:36:
88:1a:a5:64:a9:74:73:b7:30:dc:89:09:7f:5f:6b:d2:14:63:
42:f4:e0:86:e2:ac:5a:21:eb:22:06:9e:65:0b:8d:82:aa:26:
7e:2e:94:bf:6b:d4:89:4f:38:22:f9:6b:65:62:cf:6a:37:bc:
1e:23:bf:1d:16:78:36:32:03:f9:97:7c:ac:ff:3e:fa:ab:7e:
18:23:93:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:54:45 2025 by rpki-client