Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e1e6e69-6595-40ff-9430-d53f22670630.roa
File: 6e1e6e69-6595-40ff-9430-d53f22670630.roa (raw, json)
Hash identifier: wThUhHSPYQIEUz2vXyNC+9BdS3LqTb2Jwj85uDTkh7o=
Subject key identifier: 40:7D:0F:90:D8:FA:0E:31:91:60:B9:90:93:F6:D1:0D:BE:EA:47:05
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7A4A0440BD84CCCB71266023B8EC928237E7EBE0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e1e6e69-6595-40ff-9430-d53f22670630.roa
Signing time: Mon 30 Jun 2025 17:50:22 +0000
ROA not before: Mon 30 Jun 2025 17:50:22 +0000
ROA not after: Mon 04 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:4a:04:40:bd:84:cc:cb:71:26:60:23:b8:ec:92:82:37:e7:eb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 30 17:50:22 2025 GMT
Not After : Aug 4 23:59:59 2025 GMT
Subject: serialNumber=76c16fb0c17144278fc7c7d2a4aa5ddd51c07db10373796d6f052a2322094c60, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ee:88:5d:c6:fd:49:2e:f0:0e:af:50:a8:1f:
86:36:05:63:1c:59:5b:dd:1f:d5:b0:fd:79:aa:17:
c0:43:1b:bf:4f:a3:cc:cb:53:10:52:57:9a:fc:9b:
56:37:7a:66:d3:62:16:68:82:0e:33:8e:4c:8f:3e:
77:06:74:da:3c:31:fb:51:b7:61:bc:f3:43:83:4d:
4c:5a:32:91:5d:0b:d1:f6:63:1f:91:8c:aa:31:95:
06:34:b5:1e:a3:af:c8:2c:70:ae:da:c1:fa:07:b8:
fc:c4:a1:e6:9d:60:95:99:5c:65:cb:b6:a1:be:fd:
a0:e4:c7:90:20:64:95:47:23:f0:17:11:34:d5:ad:
c3:d9:00:1c:47:07:69:bc:2e:31:a5:11:82:15:9f:
77:87:b3:db:05:66:15:97:16:87:4f:34:b9:ac:ed:
19:7a:e4:1b:7a:ba:bd:41:96:db:1a:0e:63:a1:ac:
6b:0e:9a:8a:d1:80:f0:e4:a4:c3:a4:15:2b:a3:90:
1c:96:0e:9c:ca:c5:8a:5e:d7:ef:13:90:8e:d6:97:
16:67:e4:84:c9:44:df:4c:b7:72:10:ef:93:e2:a7:
26:e0:db:00:95:53:e6:d3:25:96:07:38:31:1f:e3:
6b:91:90:f6:c7:56:9e:49:d0:8a:56:e0:50:a7:8d:
34:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7D:0F:90:D8:FA:0E:31:91:60:B9:90:93:F6:D1:0D:BE:EA:47:05
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e1e6e69-6595-40ff-9430-d53f22670630.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.72.0/21
Signature Algorithm: sha256WithRSAEncryption
c2:1a:fe:57:18:48:e8:39:d8:1b:bf:c4:65:72:ba:3b:61:82:
00:47:1a:19:cd:22:cf:7d:8b:33:fe:b4:f8:72:eb:10:c4:56:
64:15:8b:d3:14:7f:10:1d:fc:fe:a6:5d:97:77:17:7d:95:3e:
a4:11:33:d0:52:41:07:0b:15:42:16:89:a5:0b:3e:df:f6:90:
d3:4d:bb:5f:f0:aa:4e:b0:e5:b1:b1:68:1e:2f:10:be:15:18:
81:d6:aa:a1:e0:25:c4:01:38:3c:6f:a5:d5:ae:47:b3:7d:cc:
94:00:bb:b7:e2:17:a0:0a:b5:0c:84:ba:a9:c3:c7:dd:d5:d4:
b6:cc:e8:d8:27:c4:32:ec:56:15:d2:ab:8d:15:32:ff:96:91:
14:2d:90:86:31:58:4f:5a:11:49:b0:38:97:31:bb:bf:4d:71:
3e:1b:98:ad:95:44:65:c4:f1:e8:b5:a1:01:d7:8b:97:86:7d:
c3:27:91:78:54:5f:2e:e5:c4:3c:f4:8e:83:14:01:1c:1b:fd:
49:6f:df:ca:68:43:cd:c2:ea:ed:68:cf:a3:61:15:e4:83:2e:
f7:a5:42:6d:db:c8:c9:c9:9a:af:6c:99:42:05:0d:44:0a:02:
63:f9:a9:7b:61:d0:9b:ab:2b:b7:53:47:b2:50:37:ef:92:4a:
10:64:8c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:53:16 2025 by rpki-client