Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9834a12a-a5d9-4caa-ae09-b1e3323596bd.roa
File: 9834a12a-a5d9-4caa-ae09-b1e3323596bd.roa (raw, json)
Hash identifier: kgfM0bx0X4QRlBnciBJgucKUfO3OBvKohzWMw4cubM4=
Subject key identifier: 5E:D6:6E:E9:87:14:B1:0D:17:12:DA:6F:5F:39:4C:6A:33:01:13:C3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 07145228A9C5F95B5A5148FCC4B0094A744F4BDA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9834a12a-a5d9-4caa-ae09-b1e3323596bd.roa
Signing time: Mon 30 Jun 2025 17:50:22 +0000
ROA not before: Mon 30 Jun 2025 17:50:22 +0000
ROA not after: Mon 04 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:14:52:28:a9:c5:f9:5b:5a:51:48:fc:c4:b0:09:4a:74:4f:4b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 30 17:50:22 2025 GMT
Not After : Aug 4 23:59:59 2025 GMT
Subject: serialNumber=dadf37ae97a7ab343a808dd3eaca4d399d123e4d09df72cd5a0e281ef64382b5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:aa:3e:ad:78:91:d2:9c:e4:aa:ad:3e:91:
e4:3f:e2:3e:a7:6b:ee:bb:24:07:22:2b:11:3b:22:
d6:2f:05:dd:85:fd:b9:64:bf:d2:71:f3:dd:b4:5c:
65:c6:cf:e0:6e:b5:88:fa:e1:c5:26:90:e2:80:ff:
28:16:99:9b:4e:4f:3c:95:17:2e:a8:32:dd:cd:50:
ca:ca:30:44:88:15:a7:38:0d:8b:87:65:16:d5:4b:
f5:dd:4e:e8:da:fe:d7:a4:df:b5:34:bc:e7:e2:5d:
53:c5:b6:20:d5:66:69:0f:2d:30:a4:d5:83:93:b4:
89:fb:e4:63:20:5e:7d:dd:77:14:03:35:0e:83:d1:
42:6c:10:4b:de:0f:37:16:29:99:c2:66:1e:7e:51:
c1:46:18:0a:6d:86:74:8a:58:73:50:70:9d:e8:b9:
2c:b6:3d:2c:99:13:a9:bc:60:d4:bd:60:73:0f:fa:
6f:45:cf:76:be:6f:fc:7a:06:f0:58:24:c1:ab:30:
0a:de:f4:c5:ee:79:c3:ac:bc:17:4b:1e:7a:79:f5:
c8:b4:f7:99:de:e1:5e:78:8a:8f:49:5a:4b:b8:f0:
e4:78:48:2c:38:b5:87:08:c8:57:5f:b0:50:61:5a:
8f:0d:f5:29:ec:07:18:f3:f3:a8:67:5a:72:a7:8d:
c2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D6:6E:E9:87:14:B1:0D:17:12:DA:6F:5F:39:4C:6A:33:01:13:C3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9834a12a-a5d9-4caa-ae09-b1e3323596bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.192.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:3f:42:ad:96:9d:95:fe:e0:ac:60:12:dc:93:ba:dc:5d:73:
76:0f:d5:90:08:89:0c:02:99:43:49:33:a8:85:0c:33:b4:cf:
43:f3:1b:cf:aa:12:fc:e0:65:1c:b2:69:57:28:48:8b:2d:07:
e9:03:fe:d9:80:83:17:92:a1:64:41:0f:75:4b:b0:83:9e:66:
02:ba:35:c7:eb:f6:5b:12:11:cb:39:80:74:eb:b1:14:e4:15:
37:e4:a2:8e:a0:8d:e0:4c:43:6d:68:5e:a6:ca:05:7e:47:35:
6a:ec:67:e5:a1:eb:c0:ae:eb:f3:c1:9e:f7:92:c2:d9:3f:dd:
02:a7:d7:0c:be:0c:11:b6:df:a4:65:b5:9b:e6:e7:e9:1f:5a:
62:4e:1d:63:c3:6a:d5:4f:85:a2:0f:a4:9f:46:f4:18:7d:e1:
62:75:64:26:5b:0a:ca:b4:5f:1a:65:26:1c:3e:d6:75:89:54:
3b:4e:04:e0:b5:4d:9c:c0:10:86:cc:f1:d5:78:d8:be:3c:d0:
63:44:74:52:c0:dd:60:53:7e:d3:76:37:39:26:44:2a:a7:a3:
f5:83:27:ed:ca:e8:1f:f5:44:60:18:dd:c2:ea:49:09:10:8b:
60:56:9a:26:08:01:b4:a7:32:2e:d9:38:8d:64:4c:e7:f1:ed:
00:ed:2f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:51:48 2025 by rpki-client