Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b44363b9-ba48-4913-b8a4-9cd0dc32ba02.roa
File: b44363b9-ba48-4913-b8a4-9cd0dc32ba02.roa (raw, json)
Hash identifier: sPZV3mgjtreQN5JeeS58BgaZ2Mxr8lqG7ZOqCI+4yKE=
Subject key identifier: A8:B6:62:E7:DD:E8:63:19:50:23:B6:45:0F:E4:EB:EA:64:C5:EF:DE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 097AB90D353C3E781FFE507D7BC91E626DF2FF4C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b44363b9-ba48-4913-b8a4-9cd0dc32ba02.roa
Signing time: Mon 30 Jun 2025 18:00:37 +0000
ROA not before: Mon 30 Jun 2025 18:00:37 +0000
ROA not after: Mon 04 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:7a:b9:0d:35:3c:3e:78:1f:fe:50:7d:7b:c9:1e:62:6d:f2:ff:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 30 18:00:37 2025 GMT
Not After : Aug 4 23:59:59 2025 GMT
Subject: serialNumber=598f3e59fd621fab9782ade748795801de3228106b9a6d1f245353fefd0348b0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:0d:62:fd:a7:b8:a6:2c:57:84:02:3a:e2:
c5:87:f9:68:79:c6:9b:9f:64:1f:58:74:68:f9:42:
9e:87:73:36:7f:1c:60:1d:bb:5b:05:dc:f4:2d:68:
3d:b2:c7:3e:fd:7d:8f:70:bf:c0:b0:d6:5e:1c:8b:
ba:c0:d7:61:1f:f1:9d:c4:11:16:33:5d:01:e6:b9:
07:d5:4b:c8:a3:07:8c:f4:7d:e6:74:9f:32:2f:bb:
54:e7:78:6b:e3:b8:74:6a:71:2e:ae:b1:69:22:75:
48:dc:c4:c4:75:fc:14:cc:7d:82:e1:b2:53:77:77:
44:2c:2f:b3:47:b6:51:11:2e:dc:80:ed:57:23:5d:
20:39:1d:db:8d:75:01:d6:a6:d2:e2:04:da:d2:bd:
42:93:5e:a5:24:18:3c:7d:68:3b:19:08:bc:e3:9e:
3a:d2:2d:b5:86:64:cb:c4:6e:5b:32:80:d3:53:a2:
ea:22:c3:80:e1:ba:35:93:d2:2b:50:a2:71:74:33:
bb:6e:73:58:59:3c:d6:2e:d3:79:10:3f:0f:69:78:
29:b9:7c:7e:fc:86:66:4d:23:bd:22:2c:44:e6:0d:
9b:5b:53:ab:7b:ad:dc:22:d7:a2:c9:87:bf:1c:c9:
71:02:d3:a0:46:df:2c:89:bc:aa:e1:0d:25:b3:87:
8c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B6:62:E7:DD:E8:63:19:50:23:B6:45:0F:E4:EB:EA:64:C5:EF:DE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b44363b9-ba48-4913-b8a4-9cd0dc32ba02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.240.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:72:c6:85:2a:71:cb:54:4f:16:60:fc:32:30:de:99:3b:bf:
ad:35:41:f0:75:f3:7e:85:4f:53:dc:5e:2c:69:02:44:f3:c6:
0d:1e:28:80:02:41:9e:b4:cd:9e:db:34:d4:61:05:0e:bd:c5:
15:e7:8a:a1:1e:5e:d2:2f:87:47:04:f2:30:55:3c:66:e3:62:
97:88:72:67:61:88:8a:c2:80:49:45:0f:95:5f:a1:84:52:16:
49:2d:78:02:20:8d:92:dd:dd:26:2c:80:2b:1a:bb:90:94:50:
25:30:52:38:32:87:82:9a:9a:32:57:b1:1e:23:1e:5f:a9:91:
2e:3b:9c:8c:6b:fb:4a:12:61:05:29:6e:c2:fd:24:f8:ce:91:
01:e3:3d:76:d6:08:d8:cd:75:25:d4:2c:83:2e:09:83:9a:38:
ac:51:87:cf:6e:c0:e4:ad:a1:be:40:e6:cf:c8:d2:ff:61:ac:
d6:8b:c4:37:68:a4:2c:44:52:8c:d5:d6:1c:4c:03:da:4e:5a:
28:3c:87:8c:ab:77:8a:68:1f:53:10:b1:51:ec:ed:66:1c:c5:
83:df:5e:8e:47:69:7b:92:08:48:6b:dc:3f:3c:7e:89:d7:13:
63:98:ad:7d:60:38:43:18:ec:77:82:18:60:5d:74:a6:e1:ba:
5a:39:ae:69
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUCXq5DTU8Pngf/lB9e8keYm3y/0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MzAxODAwMzdaFw0yNTA4MDQyMzU5NTlaMHoxSTBHBgNV
BAUTQDU5OGYzZTU5ZmQ2MjFmYWI5NzgyYWRlNzQ4Nzk1ODAxZGUzMjI4MTA2Yjlh
NmQxZjI0NTM1M2ZlZmQwMzQ4YjAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM8BDWL9p7imLFeEAjrixYf5aHnGm59kH1h0aPlCnodzNn8cYB27WwXc9C1o
PbLHPv19j3C/wLDWXhyLusDXYR/xncQRFjNdAea5B9VLyKMHjPR95nSfMi+7VOd4
a+O4dGpxLq6xaSJ1SNzExHX8FMx9guGyU3d3RCwvs0e2UREu3IDtVyNdIDkd2411
Adam0uIE2tK9QpNepSQYPH1oOxkIvOOeOtIttYZky8RuWzKA01Oi6iLDgOG6NZPS
K1CicXQzu25zWFk81i7TeRA/D2l4Kbl8fvyGZk0jvSIsROYNm1tTq3ut3CLXosmH
vxzJcQLToEbfLIm8quENJbOHjGcCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSotmLn
3ehjGVAjtkUP5OvqZMXv3jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjQ0MzYzYjktYmE0OC00OTEzLWI4YTQtOWNkMGRjMzJiYTAyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBC4z8DAN
BgkqhkiG9w0BAQsFAAOCAQEAqnLGhSpxy1RPFmD8MjDemTu/rTVB8HXzfoVPU9xe
LGkCRPPGDR4ogAJBnrTNnts01GEFDr3FFeeKoR5e0i+HRwTyMFU8ZuNil4hyZ2GI
isKASUUPlV+hhFIWSS14AiCNkt3dJiyAKxq7kJRQJTBSODKHgpqaMlexHiMeX6mR
LjucjGv7ShJhBSluwv0k+M6RAeM9dtYI2M11JdQsgy4Jg5o4rFGHz27A5K2hvkDm
z8jS/2Gs1ovEN2ikLERSjNXWHEwD2k5aKDyHjKt3imgfUxCxUeztZhzFg99ejkdp
e5IISGvcPzx+idcTY5itfWA4Qxjsd4IYYF10puG6WjmuaQ==
-----END CERTIFICATE-----
Generated at Wed Jul 23 03:44:43 2025 by rpki-client