Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fa9f76b3-644f-4e7b-96b8-a50117fd4d67.roa
File: fa9f76b3-644f-4e7b-96b8-a50117fd4d67.roa (raw, json)
Hash identifier: pmihT8bM9D6+6eMA+9ixk4R3nQTmSXVcLxI9yNzjn5o=
Subject key identifier: B0:7B:A5:EF:76:E8:ED:F0:44:B2:77:5A:21:B5:71:9A:18:50:BC:4C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 728FDB7A406D399480CC9FC5A8CD027EB30B89F8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fa9f76b3-644f-4e7b-96b8-a50117fd4d67.roa
Signing time: Tue 05 Aug 2025 20:30:35 +0000
ROA not before: Tue 05 Aug 2025 20:30:35 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.76.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:8f:db:7a:40:6d:39:94:80:cc:9f:c5:a8:cd:02:7e:b3:0b:89:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 5 20:30:35 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=2c7ce692bd6becdd346c7fc9e367d8d248169f7e760f271b7a8cc9e206b97649, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:3c:92:c2:9e:92:8f:f5:7c:2c:87:fa:77:
72:d5:ac:4c:39:65:92:50:84:29:82:db:b7:fd:5f:
92:40:43:5a:29:78:56:4c:2f:9b:e1:db:95:9b:41:
93:3b:cd:b1:64:c6:30:25:e6:56:89:c8:f6:b1:2a:
0e:67:58:33:f0:b8:0a:ed:fe:f8:87:e3:95:47:28:
d4:5d:04:2a:4f:dd:30:31:d8:7c:dd:a7:60:1f:d7:
1e:b0:e8:c8:ad:f1:fc:df:87:9e:79:b4:16:14:27:
e7:4a:09:cb:5c:95:fb:cc:b7:be:e7:e4:99:e4:d2:
ee:18:90:ae:e9:23:99:b4:de:36:00:9c:53:2b:bd:
e2:4e:c0:be:cc:b1:16:f9:03:38:97:72:d7:1a:a8:
69:b0:15:2a:06:0d:18:3e:f8:d1:cb:76:7c:6c:d1:
46:cd:df:c5:a1:5c:9d:14:e0:1d:66:ae:48:7f:19:
c8:fd:44:2d:ee:19:d5:59:81:cf:8c:e1:e2:4c:d7:
a4:95:62:50:08:93:37:7a:e8:b3:4b:b7:2e:f3:d0:
08:f6:74:d6:92:3a:1b:47:c1:df:36:58:50:fe:0e:
5f:e4:9b:5c:76:57:19:ce:18:30:a5:ae:a5:26:73:
0e:4b:35:c2:77:51:4e:fb:62:41:1a:d3:cd:9e:63:
94:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7B:A5:EF:76:E8:ED:F0:44:B2:77:5A:21:B5:71:9A:18:50:BC:4C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fa9f76b3-644f-4e7b-96b8-a50117fd4d67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.76.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cf:e9:a7:4d:99:c3:4d:25:af:be:65:57:ac:98:73:27:a5:41:
b7:c0:67:ca:0c:70:89:1c:11:16:8f:18:fa:89:54:f9:f5:6e:
dd:04:2d:b6:89:0b:6f:15:0e:62:c6:b0:35:ca:7d:e7:c4:c6:
98:2c:66:38:0f:5d:9b:ad:16:f5:db:7a:3f:e6:dd:17:36:ec:
bb:54:f2:28:cb:f7:e0:2e:71:8b:52:eb:a5:4c:ef:75:08:92:
59:dc:48:db:62:f6:d3:b4:ca:02:b7:3a:40:ed:aa:f3:aa:5a:
a5:6b:e5:5c:24:30:54:68:84:ed:ff:7a:7b:0b:a6:2d:64:91:
c6:11:27:fd:32:40:c9:c7:87:25:55:e8:d8:7a:8b:83:db:96:
4a:72:17:56:f1:1e:c9:22:ac:0b:a9:0f:66:57:84:bd:db:3e:
d3:b8:53:2a:47:1e:a4:c3:d1:e8:c4:9d:f2:05:f5:ae:f6:30:
dd:04:8e:fc:e0:96:ba:32:20:26:fb:5d:01:3d:0d:28:44:6f:
31:08:f5:0a:0c:92:c5:b2:f5:73:25:83:30:15:de:54:44:88:
ed:97:37:1b:2e:bf:8e:df:3b:71:a2:d9:d8:75:9f:12:46:2e:
71:d1:bb:69:6b:6a:72:1c:1d:5c:53:8f:cb:49:72:27:9e:12:
f3:21:cc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:06:55 2025 by rpki-client