Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9e85174-2ffd-4b93-8357-1e2ba85449d2.roa
File: b9e85174-2ffd-4b93-8357-1e2ba85449d2.roa (raw, json)
Hash identifier: ATAMqoLMcCjZUARc0ag+xXrlSIsWvkq9rlYOL18OWVU=
Subject key identifier: 54:EA:0B:A3:37:36:17:41:BB:BB:C5:9E:7B:DC:F7:15:EF:7B:5B:0C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7DE3E3CDD01B521A6650E6FF81C047DB682268E3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9e85174-2ffd-4b93-8357-1e2ba85449d2.roa
Signing time: Mon 30 Jun 2025 17:50:16 +0000
ROA not before: Mon 30 Jun 2025 17:50:16 +0000
ROA not after: Mon 04 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e3:e3:cd:d0:1b:52:1a:66:50:e6:ff:81:c0:47:db:68:22:68:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 30 17:50:16 2025 GMT
Not After : Aug 4 23:59:59 2025 GMT
Subject: serialNumber=fe95877530891447e5a6553540d72c5484f9c2f88f18cbbf300b6fe0f03e3b87, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:59:f0:4f:e0:82:cf:08:47:e8:7e:69:01:0f:
6e:11:82:cc:16:c5:69:54:4f:69:07:40:f0:25:a6:
99:0f:22:b5:c6:1f:30:33:31:45:7e:65:a6:62:04:
d0:f2:d3:06:4a:8d:06:c1:73:67:23:6d:06:d5:ff:
a3:94:bd:c6:1e:f2:b6:50:19:9d:9d:3f:18:64:bd:
40:f9:a0:98:46:6a:56:24:a9:c8:86:6f:56:a7:fd:
de:db:00:a4:08:b6:16:78:ca:dd:42:fe:4b:6f:c4:
80:47:41:30:da:45:27:75:da:6b:33:3b:c8:46:9a:
ab:ea:10:e5:23:47:f1:4d:50:29:c1:1b:58:91:ea:
65:31:73:d0:cb:82:79:3f:bf:31:43:7e:d5:3d:5e:
9e:c7:02:40:e5:4b:cb:58:c2:61:61:17:e9:ea:68:
ec:eb:52:a3:34:f9:b5:7f:b5:1e:76:d5:dc:7e:04:
f9:3f:73:ab:cd:d4:3d:2e:d7:74:f3:2b:df:e4:f6:
04:b8:bf:f0:e7:5a:e6:5c:db:19:11:5d:ba:0d:2d:
38:ac:b9:94:b2:f4:63:9b:8a:4f:ea:21:5a:a8:e5:
7e:8a:f4:4d:f7:cf:8e:35:fe:07:52:f4:7f:ea:6c:
e6:f1:6d:f1:9f:39:5a:9f:37:48:05:e7:66:5b:99:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EA:0B:A3:37:36:17:41:BB:BB:C5:9E:7B:DC:F7:15:EF:7B:5B:0C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9e85174-2ffd-4b93-8357-1e2ba85449d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.156.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:e9:c6:78:50:5c:ae:4b:7a:d6:a6:cc:f1:f3:4c:ae:7a:c5:
23:ec:5d:0a:0b:26:b2:8e:ad:78:50:8b:84:4e:2e:3b:b5:97:
7e:7e:cc:46:a1:87:d1:38:91:4f:ee:7e:47:f6:03:72:21:e0:
33:09:37:ce:5a:86:3a:d1:94:34:07:ed:08:cb:c9:88:92:0b:
71:07:22:e8:87:96:e1:85:44:2e:78:f3:f4:1d:c2:81:42:b6:
a5:cd:79:f0:59:0d:6e:df:f8:1d:bd:54:27:d8:47:b1:59:0c:
5e:c7:f1:83:24:8c:7f:a4:c9:3d:7f:8f:ec:38:dc:39:32:c3:
f3:c6:cc:9b:c6:1f:ef:01:c0:b2:1d:cf:02:e4:ac:1d:db:87:
3c:55:c6:4a:aa:02:94:fb:db:68:d3:a4:5d:f5:64:15:97:c0:
e6:83:c7:c9:3b:c1:73:c9:20:bb:15:f7:35:fd:f8:b3:92:ce:
d6:ec:c1:82:bb:ab:f0:ba:5f:cd:9a:b8:83:7e:ec:ad:62:9f:
44:07:16:d7:45:28:67:6d:23:d4:25:07:fd:58:8c:26:76:1a:
d6:7b:d8:c8:ce:0c:7d:f7:ba:cd:51:ab:83:ce:a3:4a:ae:5f:
5d:16:81:08:ad:28:14:13:52:40:c8:21:5e:91:d6:ab:43:7f:
3f:75:8d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:54:43 2025 by rpki-client