Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c924e5-b5a4-4e39-bd9b-3aa04634212a.roa
File: 11c924e5-b5a4-4e39-bd9b-3aa04634212a.roa (raw, json)
Hash identifier: H8+68NvXN08xsoKt3HN8Zn4WU0GVj9Y6q7TIaCm+/yQ=
Subject key identifier: C8:C8:9F:C1:69:12:CF:55:A9:CE:87:BC:C1:A7:6C:55:43:BE:E9:B5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 23E59C5AED684703BF9A2B65B4F1DC566CE6CE07
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c924e5-b5a4-4e39-bd9b-3aa04634212a.roa
Signing time: Mon 30 Jun 2025 18:00:06 +0000
ROA not before: Mon 30 Jun 2025 18:00:06 +0000
ROA not after: Mon 04 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e5:9c:5a:ed:68:47:03:bf:9a:2b:65:b4:f1:dc:56:6c:e6:ce:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 30 18:00:06 2025 GMT
Not After : Aug 4 23:59:59 2025 GMT
Subject: serialNumber=16571059a68fc2cc6acba79bd6fe8888a43528b29b2661d06769739869e8dce0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c6:bd:7f:da:aa:cd:00:6f:4d:91:6f:ee:e1:
65:80:6c:3d:42:fc:15:0a:26:93:47:de:dd:91:ef:
6c:14:e2:65:6a:ac:1b:05:ee:ae:a6:2b:5a:84:39:
bc:83:d8:ca:5f:34:14:ee:a8:c9:21:86:c4:a0:21:
bb:3a:89:47:7c:99:51:6a:f8:f3:e0:0c:2d:9d:85:
28:1d:7c:b1:0b:e2:58:f8:ea:0a:20:c3:5d:ae:91:
8d:de:28:21:43:37:fb:09:e4:e1:a3:6a:d0:39:2b:
8b:d3:89:47:d6:81:08:6b:58:9e:82:3c:4d:f5:79:
cb:01:ca:b4:56:d0:b3:1a:62:9c:27:9c:33:4e:b7:
b3:c1:cc:a9:ff:ce:cb:ba:f9:c3:4d:ac:4d:d4:b0:
27:b1:fc:f4:28:8e:09:8b:89:5f:0d:e8:da:02:fd:
ab:4a:19:b7:6f:62:3f:54:07:7a:a2:8b:9c:c8:50:
69:a7:9a:b9:21:e3:70:e8:1a:58:6b:6e:b0:b2:ec:
1f:b9:40:5c:f4:c7:dd:74:a9:34:b5:9f:fd:8d:71:
87:4c:2c:d0:29:c9:be:60:23:f7:64:e5:ef:f6:a2:
18:5f:fc:4f:46:3c:5c:2a:2c:3a:40:d6:98:c2:f2:
0a:4b:aa:29:15:27:1e:6c:ba:25:6b:08:a7:3f:99:
dd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C8:9F:C1:69:12:CF:55:A9:CE:87:BC:C1:A7:6C:55:43:BE:E9:B5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c924e5-b5a4-4e39-bd9b-3aa04634212a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.64.0/21
Signature Algorithm: sha256WithRSAEncryption
76:74:2f:93:8f:77:56:42:48:aa:71:c5:65:87:71:89:96:a5:
58:89:15:78:72:bd:39:ec:61:81:0f:37:67:4f:5a:d1:de:b5:
89:a8:16:54:88:8e:38:fb:c5:c7:e1:3a:33:d2:66:df:52:84:
f9:02:9c:7b:7a:55:12:4b:ce:13:57:4d:58:f0:73:6a:97:66:
42:70:06:6d:05:0d:f1:41:c8:c1:b5:4d:6a:42:83:16:c9:57:
97:9f:ab:5c:f0:71:0c:49:93:93:10:1c:9c:8c:5a:81:32:c6:
27:2f:6c:e3:b5:c3:11:5b:e9:c3:dd:5a:ad:77:94:68:3d:e3:
36:c0:c4:55:84:5f:c2:e3:f0:fa:a3:58:c8:53:8a:34:b6:ad:
9f:3e:76:91:50:1c:fc:06:2a:c7:8a:5b:4c:23:19:96:62:ec:
e2:5b:71:48:79:64:6a:b0:70:68:28:1a:91:b6:e3:70:99:32:
4d:11:d5:b6:df:1f:2d:63:7f:b3:93:e5:c2:3c:54:c0:48:44:
19:7c:1f:00:e4:e2:07:e2:e3:14:d0:73:99:c2:e5:a3:31:99:
7d:a8:8f:b6:ad:87:ff:76:af:c9:56:ab:55:98:12:3b:9a:d6:
50:b6:a1:a5:35:72:ba:eb:51:62:43:b2:26:78:2c:c8:43:fa:
a8:0c:f0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:36:45 2025 by rpki-client