Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9c3be55c-de0f-4901-938e-229a296fa31f.roa
File: 9c3be55c-de0f-4901-938e-229a296fa31f.roa (raw, json)
Hash identifier: sf/oHzfB0fVv0Vsc2lw0/qOqlN4CcKazpDFY6BnzvqM=
Subject key identifier: 6E:3C:E1:D2:A4:20:01:60:B3:C7:25:0F:F0:C6:69:A1:B8:E3:97:8A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5588F3C8FACD9D9111E85597B3C10E83BAED5CE1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9c3be55c-de0f-4901-938e-229a296fa31f.roa
Signing time: Tue 18 Mar 2025 17:01:03 +0000
ROA not before: Tue 18 Mar 2025 17:01:03 +0000
ROA not after: Tue 22 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:88:f3:c8:fa:cd:9d:91:11:e8:55:97:b3:c1:0e:83:ba:ed:5c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 18 17:01:03 2025 GMT
Not After : Apr 22 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3d:50:8d:c2:9a:b0:9f:82:20:07:1b:c3:e8:
2c:86:e1:e2:5d:76:f5:79:7b:ee:ad:47:6a:e6:e1:
dd:ca:77:b2:35:6f:31:fd:c2:99:3a:ba:48:1f:65:
47:e5:a5:bf:ad:9d:c1:85:01:c6:18:21:de:ba:1d:
7f:8b:c3:0d:73:88:70:5d:e4:c3:92:d8:7f:67:33:
42:3b:2a:72:63:ea:77:37:1e:42:6f:75:44:97:28:
4e:93:42:8b:63:e9:0d:8f:95:20:ff:9e:9d:85:59:
df:ee:46:74:92:38:ca:00:59:de:14:68:47:47:9a:
27:6e:f5:c0:c8:7e:dc:20:8b:03:de:26:ce:a0:56:
b2:98:9b:3d:9d:7f:38:9c:11:9d:f2:08:0f:ca:c2:
1b:15:06:f8:cb:09:27:86:77:46:b0:ea:db:5e:84:
90:8c:f1:33:7a:c5:e8:9c:e8:57:3e:46:4c:82:cc:
f4:d7:1e:bf:91:13:35:7f:13:f7:d9:0f:18:15:4d:
6f:5d:d7:6f:cf:84:ed:14:c7:fe:db:be:37:7b:ba:
1a:51:a8:37:99:f6:aa:96:6a:fc:89:6c:48:5e:fd:
a1:b6:bd:78:f0:9f:b8:c6:64:50:05:47:79:4e:dd:
0b:83:eb:ff:59:a3:15:ca:08:10:c5:cf:bd:0c:53:
5c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3C:E1:D2:A4:20:01:60:B3:C7:25:0F:F0:C6:69:A1:B8:E3:97:8A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9c3be55c-de0f-4901-938e-229a296fa31f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.168.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:a0:a6:18:ef:21:dc:0f:68:6a:71:ac:bb:25:4c:24:bd:5f:
f5:66:8f:ec:ad:89:28:e8:ce:5a:de:1c:05:0c:aa:21:f8:8e:
bc:fd:f5:d8:31:3e:99:f7:ae:50:83:7e:cd:04:8e:39:4a:30:
e1:c6:cc:c4:b0:54:6a:79:48:2f:d4:c2:00:2d:eb:84:d9:ba:
03:51:a2:b9:c3:71:9e:2a:a3:7c:5b:d7:bf:82:67:d8:78:12:
c7:2e:b2:cc:b1:a8:e9:c3:2d:f7:a8:af:e5:82:8d:29:8f:58:
7b:6c:aa:e7:83:91:79:d2:82:92:7c:30:ad:cb:fc:c0:fb:18:
26:dd:82:be:54:03:db:3d:85:1c:c9:5c:b9:e9:a3:c2:c5:10:
d2:55:60:69:95:2f:07:0d:ad:3f:95:19:dc:12:2a:df:fc:e6:
fe:a2:4c:d6:a5:7f:b5:e6:64:30:85:d7:67:c7:fb:58:9c:04:
6b:c7:1e:07:fd:c4:73:b0:08:e0:b1:87:2b:ad:aa:24:ed:73:
31:e3:40:cf:9a:c3:f5:77:16:d8:4f:d0:f4:5a:01:d9:a1:fd:
79:d3:d1:71:12:31:64:0c:12:06:b2:a6:58:82:fb:bd:45:d5:
6a:a4:9a:c0:43:c4:0c:11:40:70:7b:57:4e:d7:aa:37:e5:65:
27:88:62:dc
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUVYjzyPrNnZER6FWXs8EOg7rtXOEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMTgxNzAxMDNaFw0yNTA0MjIyMzU5NTlaMHoxSTBHBgNV
BAUTQDZiYWY1NGM3ZjNlNmQ0YTFmNWQ1NjQwZTQwZWY5MjNjZWM1MTExOTAzZmMx
MTMzNjI2YzI2OWVhNWNmNGYzN2IxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOA9UI3CmrCfgiAHG8PoLIbh4l129Xl77q1Haubh3cp3sjVvMf3CmTq6SB9l
R+Wlv62dwYUBxhgh3rodf4vDDXOIcF3kw5LYf2czQjsqcmPqdzceQm91RJcoTpNC
i2PpDY+VIP+enYVZ3+5GdJI4ygBZ3hRoR0eaJ271wMh+3CCLA94mzqBWspibPZ1/
OJwRnfIID8rCGxUG+MsJJ4Z3RrDq216EkIzxM3rF6JzoVz5GTILM9Ncev5ETNX8T
99kPGBVNb13Xb8+E7RTH/tu+N3u6GlGoN5n2qpZq/IlsSF79oba9ePCfuMZkUAVH
eU7dC4Pr/1mjFcoIEMXPvQxTXEsCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRuPOHS
pCABYLPHJQ/wxmmhuOOXijAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OWMzYmU1NWMtZGUwZi00OTAxLTkzOGUtMjI5YTI5NmZhMzFmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS6JqDAN
BgkqhkiG9w0BAQsFAAOCAQEAvKCmGO8h3A9oanGsuyVMJL1f9WaP7K2JKOjOWt4c
BQyqIfiOvP312DE+mfeuUIN+zQSOOUow4cbMxLBUanlIL9TCAC3rhNm6A1GiucNx
niqjfFvXv4Jn2HgSxy6yzLGo6cMt96iv5YKNKY9Ye2yq54ORedKCknwwrcv8wPsY
Jt2CvlQD2z2FHMlcuemjwsUQ0lVgaZUvBw2tP5UZ3BIq3/zm/qJM1qV/teZkMIXX
Z8f7WJwEa8ceB/3Ec7AI4LGHK62qJO1zMeNAz5rD9XcW2E/Q9FoB2aH9edPRcRIx
ZAwSBrKmWIL7vUXVaqSawEPEDBFAcHtXTteqN+VlJ4hi3A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:32 2025 by rpki-client