Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
File: 2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa (raw, json)
Hash identifier: Poas7dYBY5x60QdTbnLeeq3nR8UzliVmIOqh9jlC5y4=
Subject key identifier: 21:08:C0:20:50:79:8B:CC:90:8F:BE:2E:FE:BB:24:C9:99:2A:05:52
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0AD8EFA449A4445D794C3E6310D964A8871103CE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
Signing time: Mon 21 Jul 2025 17:00:09 +0000
ROA not before: Mon 21 Jul 2025 17:00:09 +0000
ROA not after: Mon 25 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:d8:ef:a4:49:a4:44:5d:79:4c:3e:63:10:d9:64:a8:87:11:03:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 17:00:09 2025 GMT
Not After : Aug 25 23:59:59 2025 GMT
Subject: serialNumber=2e74a0baac44b38c1848bf5c793bd628886d396b6a6b59d92e1a3707f0421651, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:f5:51:fc:f5:aa:74:a2:02:b0:62:c3:63:
64:97:85:b2:b3:58:7d:4c:c5:cf:09:55:81:0f:c6:
48:0a:6c:3b:4c:ab:2a:fc:ce:e2:f7:c7:2c:2b:bb:
b3:b5:0a:7e:e9:3e:90:17:40:da:d9:50:55:dc:99:
01:b5:ea:f3:df:ad:96:82:b4:b7:3e:c9:16:3c:ee:
fc:78:3e:bb:88:38:92:f4:af:b5:97:30:95:de:a3:
c9:90:37:47:f6:a7:ca:a7:93:81:ff:b4:65:8f:44:
91:98:e6:53:85:0f:23:5b:fd:42:fd:72:23:d1:2e:
74:fc:70:88:c8:03:31:4c:78:79:4a:48:40:a2:75:
f8:c4:ce:d5:32:82:a0:b1:71:1f:5b:21:76:35:49:
c3:6a:07:96:f3:0c:6f:a0:2b:f2:c1:59:95:a8:18:
49:b6:95:a5:a9:46:a3:f4:9d:9c:80:c7:6e:a7:23:
80:b0:e6:7f:4f:3f:f1:fc:13:ba:d5:00:d8:0b:fe:
6d:04:0c:f7:ca:6b:cd:aa:90:d9:f0:38:b1:9a:0c:
f3:8f:4e:12:9f:10:e6:2a:8c:31:b5:63:b9:e3:23:
33:fe:b6:af:1d:d2:6b:22:30:42:17:f3:29:62:2b:
d3:40:81:b9:7c:a6:56:16:7e:fd:87:28:ce:65:03:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:08:C0:20:50:79:8B:CC:90:8F:BE:2E:FE:BB:24:C9:99:2A:05:52
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/17
Signature Algorithm: sha256WithRSAEncryption
bb:de:93:bf:8f:6d:7e:4d:ea:93:cd:2e:db:ed:aa:14:00:a4:
65:89:0d:45:b8:f3:ad:87:f3:62:08:84:6f:10:45:f1:e5:5d:
8d:b0:d5:fb:90:ed:ec:2f:22:14:85:59:b5:98:8d:69:ef:63:
bd:ef:03:4f:88:f3:6f:0e:07:88:4a:09:81:b5:a1:79:76:27:
b3:5b:6a:9c:6f:7e:cc:7f:6d:49:e1:9c:57:bb:14:98:18:f4:
8c:5d:02:74:7d:20:e7:65:36:1a:d6:01:a0:e2:1b:77:3a:3d:
8e:66:52:19:03:f3:d2:25:9c:83:37:dd:0c:4f:13:c3:06:d0:
8f:6a:92:b8:1d:ef:f1:0f:25:b5:ae:8f:99:d8:6a:c6:62:94:
2b:40:4b:1e:75:73:86:e8:75:c3:95:6b:7e:9b:4a:14:22:cf:
fa:46:8a:a6:85:a4:ff:cf:3e:c1:9d:fe:45:d1:dd:8c:74:63:
e7:62:e4:7d:04:cb:d2:91:3b:66:ef:e4:1c:c4:64:d8:2e:92:
98:85:68:40:c8:e7:bb:36:23:5d:1c:64:99:cc:fa:14:2b:8a:
cc:62:90:73:14:92:82:3e:9b:01:5b:dc:38:15:85:87:65:fa:
f2:58:bf:96:89:07:ed:75:c4:7d:bb:6f:44:a3:05:91:9c:74:
99:b1:4b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:33:10 2025 by rpki-client