Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa
File: 8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa (raw, json)
Hash identifier: DQPqYOlk3V3cC+poQe/UBccrklNKCrdgJtNyjV9ZAmI=
Subject key identifier: 5A:91:15:64:02:17:E7:16:5D:2F:F4:04:37:21:8B:C6:F1:C3:F9:6E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7C802AEDDBA02A86B41EE17F4C69322AC3B6887B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa
Signing time: Mon 30 Jun 2025 18:00:41 +0000
ROA not before: Mon 30 Jun 2025 18:00:41 +0000
ROA not after: Mon 04 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:80:2a:ed:db:a0:2a:86:b4:1e:e1:7f:4c:69:32:2a:c3:b6:88:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 30 18:00:41 2025 GMT
Not After : Aug 4 23:59:59 2025 GMT
Subject: serialNumber=c4eebee0b21cda5e1c5feab7db34b9d53ecce3d9d58db8d60b83ce8f8da131e8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dc:d4:09:43:21:73:48:86:44:ce:c1:9a:2c:
32:11:36:64:74:ce:23:d1:38:29:0d:07:dc:22:0d:
48:2d:4f:c0:d9:5b:3b:50:df:5b:f1:8b:b2:3e:1d:
ae:68:65:a8:9e:60:cd:33:0e:b7:5c:63:d4:2b:05:
08:da:15:36:c1:29:ff:fd:e1:3d:8a:9c:00:39:bf:
33:97:c0:5c:32:a2:ef:ea:6e:80:33:23:f0:5e:54:
13:f5:21:8f:0e:50:c8:23:7e:c4:ff:1b:b3:45:b5:
7f:08:a4:3f:01:45:e7:03:6a:d5:c2:34:0d:62:e1:
58:b5:7e:ee:27:f0:1e:9c:45:9b:e4:61:62:1b:7a:
ab:5b:09:9f:ca:ff:85:55:3e:98:cf:c7:e3:f0:81:
ae:c3:1b:d4:e7:cb:ee:7d:a8:0e:4e:69:a2:a6:43:
a5:aa:cc:11:c7:0e:d8:0a:44:39:9a:0f:7c:06:b9:
cb:0d:56:0e:91:7b:84:65:7c:2e:c0:f1:a0:cb:41:
b9:f7:42:af:d2:8f:3c:5b:32:a1:ab:73:84:a1:69:
d5:77:09:d5:f9:85:54:65:30:15:b1:1b:9f:ed:69:
aa:35:ad:50:3e:89:e8:e3:98:e5:0c:47:32:83:3b:
5e:c5:8c:63:9f:3a:ac:94:8b:08:cd:42:e6:2c:70:
26:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:91:15:64:02:17:E7:16:5D:2F:F4:04:37:21:8B:C6:F1:C3:F9:6E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.192.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:e8:0c:1e:74:c9:05:ad:f7:87:27:10:e7:1e:d2:e3:5f:d7:
21:34:73:66:19:2c:d8:58:08:9b:93:06:5b:8b:da:7a:ab:86:
e7:ce:45:0d:c7:b8:7d:ed:8d:30:e8:a5:b4:db:97:6a:72:da:
7b:c3:59:fb:9c:8c:a4:14:85:04:7c:4d:6e:e4:e8:00:19:56:
06:2c:72:c5:bb:cb:ea:46:a8:68:64:e9:bb:6a:37:38:67:8d:
d5:7b:ee:02:41:91:7f:83:71:cb:fd:20:90:61:31:e0:d1:a0:
6f:6e:35:47:b3:18:2c:dc:99:bf:7d:41:7a:f9:24:42:2b:0c:
fd:08:c5:5d:68:65:06:a6:ba:f3:40:14:46:f7:03:52:d8:87:
fa:43:ae:61:a0:ac:dc:aa:5e:f5:ef:1d:22:fb:2d:44:09:a0:
d1:64:be:57:e1:a2:68:98:b8:cd:42:9b:0f:3d:ee:0d:f3:af:
d7:8c:21:bc:7e:57:8b:8a:41:7e:42:a9:76:3f:9f:ea:f2:84:
b8:56:61:0a:30:d0:fc:7b:ce:65:48:76:b0:b9:d8:93:82:9a:
f6:b2:8b:9b:f1:d2:ad:08:cd:c2:c2:c8:bf:06:09:4a:ed:b0:
f0:56:f8:68:ba:07:03:a3:75:fb:c1:04:8d:47:6b:a9:3a:75:
18:45:4a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:42:35 2025 by rpki-client