Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/279da9d6-10c2-4fd5-9d75-0a963c29c8d4.roa
File: 279da9d6-10c2-4fd5-9d75-0a963c29c8d4.roa (raw, json)
Hash identifier: poU3NvUMC7x5Ek0IJeZoKZBLbp0kahhSxU0JbnrWHZw=
Subject key identifier: 8C:BF:26:E5:18:22:91:B0:F4:DD:8C:F8:F6:05:56:D0:20:83:8A:3C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 785CD0CDA93A1E3FC8646C1D908359F4633E17A5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/279da9d6-10c2-4fd5-9d75-0a963c29c8d4.roa
Signing time: Tue 18 Mar 2025 17:01:11 +0000
ROA not before: Tue 18 Mar 2025 17:01:11 +0000
ROA not after: Tue 22 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:5c:d0:cd:a9:3a:1e:3f:c8:64:6c:1d:90:83:59:f4:63:3e:17:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 18 17:01:11 2025 GMT
Not After : Apr 22 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:b6:f5:2a:9d:08:f0:94:b9:3e:fc:c3:dd:
10:b0:ae:0a:17:da:40:b9:4a:10:31:c9:6c:7b:61:
38:02:a9:ae:01:a8:29:d5:9f:b0:ee:aa:cb:4f:9c:
2f:b3:9f:01:8f:18:74:10:9c:db:ee:46:ce:3a:9c:
68:83:fd:c0:8e:57:91:1d:c4:6b:6f:aa:3f:6a:59:
78:81:2b:85:e2:7f:f5:4b:dd:36:54:bf:d9:8b:f5:
f0:6d:d5:69:a0:07:4d:cf:27:7a:be:03:8f:96:25:
ab:3f:f6:cb:6f:53:39:16:66:84:f2:65:15:49:2b:
d4:a7:33:dd:12:5a:5d:2f:99:c7:67:14:8a:15:fb:
35:11:f3:90:95:d7:7f:f5:06:da:4f:b9:0f:5a:6e:
34:ef:a9:53:cf:8a:ad:73:e3:f1:b7:2d:e4:f2:96:
f2:a5:94:62:94:cc:7d:78:72:db:18:af:68:f4:43:
ce:10:85:da:77:44:b8:95:b2:a7:ad:b1:79:54:69:
1b:b9:6e:e5:7c:a0:15:77:a4:f7:bd:b0:49:42:fa:
96:7e:30:26:1b:ff:cb:3a:5c:d1:d5:6c:0e:8e:d1:
9e:36:1e:7e:0d:ee:ad:42:a0:0f:6c:e5:fd:08:57:
27:82:8f:45:6a:c8:a8:5f:92:bf:b9:df:c0:24:2e:
95:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BF:26:E5:18:22:91:B0:F4:DD:8C:F8:F6:05:56:D0:20:83:8A:3C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/279da9d6-10c2-4fd5-9d75-0a963c29c8d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.144.0/21
Signature Algorithm: sha256WithRSAEncryption
a9:79:66:b7:8f:1b:61:01:f5:b1:51:ba:11:49:f3:6b:9e:64:
d5:90:71:d4:37:3f:d7:fa:08:bb:7e:12:73:11:2e:cc:d7:6f:
89:eb:0d:62:ce:ee:e1:86:06:c8:e6:db:a0:84:b9:bd:51:a5:
5a:16:10:87:f6:35:9e:66:88:c7:9c:79:4d:2f:74:06:ce:d4:
24:9d:ef:06:f6:bd:28:08:fe:c2:16:5f:9d:d1:4b:26:dc:a6:
c0:f9:a6:f9:e3:37:ee:e4:5e:d4:00:ce:af:d2:59:4b:1c:96:
fa:31:0d:4e:dc:78:2f:74:4e:72:66:f9:6e:ad:83:09:67:ae:
5d:86:e9:14:3c:a2:a5:06:36:2e:48:55:aa:74:cf:f8:7c:77:
99:20:f8:93:34:f3:db:df:94:9b:64:c1:16:b0:27:8d:72:b2:
51:51:6b:83:54:a9:70:6d:6d:90:a2:2b:a9:5d:98:24:c8:fa:
07:f2:c6:4b:79:77:7e:9f:ee:67:02:3b:6a:ab:2b:10:8b:04:
f7:70:b2:9f:ed:91:63:a6:63:10:fb:0f:98:fd:79:31:d7:e8:
49:a6:8f:d7:32:ba:b0:36:ea:45:53:32:9a:92:17:18:a8:64:
2f:b6:94:9f:71:b6:c9:28:d7:a4:d0:6d:99:de:aa:48:7e:ac:
3f:13:78:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:46 2025 by rpki-client