Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fb2bc1bb-cbbe-4f6c-8ef3-eabfdb4fa7b9.roa
File: fb2bc1bb-cbbe-4f6c-8ef3-eabfdb4fa7b9.roa (raw, json)
Hash identifier: yDATs2frznGuNef1/axBQihSW48MZgxyDhr21RZKjJ4=
Subject key identifier: 32:05:7D:8E:4B:C3:C1:7B:5B:73:37:42:46:62:51:80:61:A2:87:6E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2C15ECB36E5F78F6995CB96B140EB5CA6BF585FE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fb2bc1bb-cbbe-4f6c-8ef3-eabfdb4fa7b9.roa
Signing time: Mon 16 Jun 2025 21:50:50 +0000
ROA not before: Mon 16 Jun 2025 21:50:50 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 212.167.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:15:ec:b3:6e:5f:78:f6:99:5c:b9:6b:14:0e:b5:ca:6b:f5:85:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 16 21:50:50 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=dff11ad9f6f8fd2af300f151a18cd8e5614cc0d1b28d21a159e5f96824cf0183, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8d:31:78:b7:e8:35:b8:10:74:91:c4:a9:2b:
67:29:84:fe:a2:d7:92:28:05:e1:91:57:b7:08:0c:
d7:1b:61:c0:3b:f2:0e:80:23:9f:d6:15:d0:c8:e2:
32:68:d3:d3:5f:ea:35:d8:0a:35:06:12:6c:71:11:
3f:29:9e:4d:5f:45:20:01:19:2b:03:29:41:ec:15:
bb:1a:50:ff:d0:19:77:95:b5:9c:5e:f2:48:c9:88:
2d:80:72:97:e9:20:53:77:1c:5d:82:5d:37:e7:bf:
0b:96:55:e9:fc:38:ab:e1:43:81:5f:04:fd:2e:e0:
b1:17:68:a0:58:21:83:fe:5e:64:d3:71:e0:09:bd:
c4:36:e1:76:de:02:79:bc:71:3f:7f:6b:f4:e2:1d:
d5:63:3e:a4:7e:a8:03:33:59:16:84:13:ef:29:9b:
ac:48:95:af:7d:5c:b8:92:ce:0f:a1:a8:29:0b:7d:
5b:e1:39:88:81:a5:5c:77:c8:3c:40:e8:8c:59:ac:
e2:9b:c4:66:7b:a4:95:b4:50:16:aa:9f:86:f8:d3:
7b:cd:88:c2:3d:ac:29:4c:8d:6c:d7:e7:df:a2:d3:
70:8e:55:24:c3:0b:82:1d:91:83:38:34:8a:a6:67:
f5:ed:be:67:fb:5a:d7:e2:96:b7:f3:36:e8:8c:a6:
f8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:05:7D:8E:4B:C3:C1:7B:5B:73:37:42:46:62:51:80:61:A2:87:6E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fb2bc1bb-cbbe-4f6c-8ef3-eabfdb4fa7b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.167.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:0f:d4:4b:95:54:56:25:18:83:aa:78:8f:dd:38:e4:cb:8e:
f1:5b:d9:ae:3b:20:cc:04:13:08:aa:35:a8:07:02:bd:72:3e:
14:b6:4a:99:e1:8e:a0:0e:7e:36:4f:60:90:f4:28:27:92:ae:
32:33:58:47:f9:aa:df:b1:31:6b:72:f9:b9:ba:ce:65:b5:ca:
49:c4:c5:6b:15:4e:5e:2b:71:9f:fb:9e:7d:75:88:ee:cd:b4:
c3:2a:99:1f:22:4a:07:e9:98:48:5a:ea:e8:3d:53:3a:c3:78:
c2:d4:8e:e2:cc:c7:43:f0:1f:f7:b9:72:18:38:cc:5a:d7:e4:
3c:d0:02:c5:ff:a2:fc:f3:42:b1:5e:76:e7:04:bd:ee:ba:c1:
11:af:b1:93:23:b5:43:02:89:45:50:fe:70:14:ed:62:45:07:
b3:44:b2:3d:cc:3a:a9:9a:a4:10:50:d2:d3:3c:e8:04:e9:5b:
10:14:80:f5:fe:1b:f3:bc:7b:d4:18:39:47:fe:ef:98:0c:e5:
8d:36:4d:30:91:b0:dc:c6:d1:6b:d7:8e:6a:17:2c:ea:1e:c3:
98:23:12:81:67:1b:97:c3:8b:df:38:00:62:06:24:bc:b9:9b:
67:b9:f9:fa:d8:0a:96:a8:dd:65:2d:a1:31:ac:89:86:b2:0f:
ac:16:0a:d6
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIULBXss25fePaZXLlrFA61ymv1hf4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA2MTYyMTUwNTBaFw0yNTA3MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQGRmZjExYWQ5ZjZmOGZkMmFmMzAwZjE1MWExOGNkOGU1NjE0Y2MwZDFiMjhk
MjFhMTU5ZTVmOTY4MjRjZjAxODMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKWNMXi36DW4EHSRxKkrZymE/qLXkigF4ZFXtwgM1xthwDvyDoAjn9YV0Mji
MmjT01/qNdgKNQYSbHERPymeTV9FIAEZKwMpQewVuxpQ/9AZd5W1nF7ySMmILYBy
l+kgU3ccXYJdN+e/C5ZV6fw4q+FDgV8E/S7gsRdooFghg/5eZNNx4Am9xDbhdt4C
ebxxP39r9OId1WM+pH6oAzNZFoQT7ymbrEiVr31cuJLOD6GoKQt9W+E5iIGlXHfI
PEDojFms4pvEZnuklbRQFqqfhvjTe82Iwj2sKUyNbNfn36LTcI5VJMMLgh2Rgzg0
iqZn9e2+Z/ta1+KWt/M26Iym+B0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQyBX2O
S8PBe1tzN0JGYlGAYaKHbjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZmIyYmMxYmItY2JiZS00ZjZjLThlZjMtZWFiZmRiNGZhN2I5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANSnMA0G
CSqGSIb3DQEBCwUAA4IBAQCND9RLlVRWJRiDqniP3Tjky47xW9muOyDMBBMIqjWo
BwK9cj4UtkqZ4Y6gDn42T2CQ9Cgnkq4yM1hH+arfsTFrcvm5us5ltcpJxMVrFU5e
K3Gf+559dYjuzbTDKpkfIkoH6ZhIWuroPVM6w3jC1I7izMdD8B/3uXIYOMxa1+Q8
0ALF/6L880KxXnbnBL3uusERr7GTI7VDAolFUP5wFO1iRQezRLI9zDqpmqQQUNLT
POgE6VsQFID1/hvzvHvUGDlH/u+YDOWNNk0wkbDcxtFr145qFyzqHsOYIxKBZxuX
w4vfOABiBiS8uZtnufn62AqWqN1lLaExrImGsg+sFgrW
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:59:04 2025 by rpki-client