Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/279da9d6-10c2-4fd5-9d75-0a963c29c8d4.roa
File: 279da9d6-10c2-4fd5-9d75-0a963c29c8d4.roa (raw, json)
Hash identifier: y/Zq0ByP4EyQXYQ4f/HpwXQv8Mv+5yeC0I7Tidt1YIA=
Subject key identifier: C0:D3:65:AB:67:1F:C9:39:A8:03:7B:1B:C4:5D:BC:35:D8:5F:07:88
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 272D76626CB60A7C64377C615AB4A185D66E41B1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/279da9d6-10c2-4fd5-9d75-0a963c29c8d4.roa
Signing time: Mon 30 Jun 2025 17:50:19 +0000
ROA not before: Mon 30 Jun 2025 17:50:19 +0000
ROA not after: Mon 04 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:2d:76:62:6c:b6:0a:7c:64:37:7c:61:5a:b4:a1:85:d6:6e:41:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 30 17:50:19 2025 GMT
Not After : Aug 4 23:59:59 2025 GMT
Subject: serialNumber=ca5e97f22fc4555f0c53f5ef0ec3ccac8e363f844890cddba148ad414bb55988, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:8e:d7:f7:23:4d:fa:f0:eb:46:f0:b5:28:6e:
47:c1:bd:c7:bf:c9:9e:32:ea:d9:e5:fb:08:70:6d:
26:c8:0d:91:3d:72:cd:73:67:4b:a1:ea:b5:dd:2b:
9d:6f:66:18:f7:0c:68:46:ad:8e:57:90:17:cc:01:
af:96:c8:64:df:6f:d9:f9:cf:5c:3a:b2:83:c4:a0:
dc:f5:9c:0d:31:15:9c:c3:62:20:5e:90:64:7f:f1:
4b:34:54:86:78:cb:76:48:34:cb:1d:66:04:cd:f9:
1c:22:9b:dd:80:60:53:3e:da:1b:67:af:63:4b:a8:
40:33:1d:0e:43:18:6a:28:ee:ce:41:68:3a:c8:1b:
19:9a:f2:df:52:89:1e:4d:7d:2f:54:5a:eb:59:9f:
cb:8e:3b:55:68:11:19:8c:3a:8d:60:9a:7e:79:4e:
6c:c4:43:99:d3:d7:49:a7:3b:90:6a:c5:ab:9a:9b:
f0:fb:02:d0:c0:31:d2:cf:21:00:c8:e8:3c:b4:e4:
15:93:b0:13:5c:b6:73:54:b0:14:f9:29:b3:87:21:
88:d1:27:29:53:fb:c2:cc:e3:bb:c6:8c:c6:90:37:
e8:e2:8e:09:e0:36:84:db:17:69:fb:26:55:5c:65:
a2:1e:b4:b1:77:71:84:61:26:96:f5:e5:62:c2:dd:
cd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D3:65:AB:67:1F:C9:39:A8:03:7B:1B:C4:5D:BC:35:D8:5F:07:88
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/279da9d6-10c2-4fd5-9d75-0a963c29c8d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.144.0/21
Signature Algorithm: sha256WithRSAEncryption
54:de:e4:07:3e:5b:44:9d:22:ab:80:59:48:49:b5:34:ac:1f:
70:4b:19:03:70:30:d8:76:6f:41:dc:c4:37:30:90:a9:23:ef:
51:7e:e6:4a:48:23:7e:4f:3a:b2:f7:d0:4a:d2:cf:1a:38:31:
7a:4c:63:2d:57:dc:56:7d:c8:86:5b:dc:34:b1:06:e6:ed:2b:
81:91:f7:28:56:68:42:eb:2d:c5:fd:36:8e:47:26:28:ba:7a:
f4:3f:6a:85:50:24:0f:83:1d:0c:8e:5e:af:06:91:3f:ac:48:
96:de:6d:93:e6:44:28:76:45:99:fd:d3:29:d4:9e:32:bc:be:
0a:6d:c8:c8:86:c5:5b:a5:9f:09:67:be:b0:b4:62:d5:79:1f:
96:62:9f:0f:2c:71:b4:5a:95:ca:f8:db:0d:42:9f:32:3d:70:
81:1f:04:51:67:6b:ac:df:78:f9:6e:97:04:a9:0b:47:16:8e:
b0:7f:de:fb:68:cf:88:56:08:a3:c2:8e:12:04:cd:ad:ab:ea:
a0:d0:06:dd:c3:c4:3d:03:8d:5a:37:d8:95:3a:5a:b3:88:12:
b7:cb:63:03:c2:5c:76:8d:fd:bc:a2:96:28:7d:42:66:48:72:
64:48:e7:10:fd:3b:cb:61:a1:6a:fe:5f:66:18:b1:6b:df:69:
51:d0:3d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:36:38 2025 by rpki-client