Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa
File: bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa (raw, json)
Hash identifier: pojBIZD4uh/mWXFpbsgfdTaELQw5+hXzsqnEvOnMUcI=
Subject key identifier: C7:C5:63:AD:8B:89:7C:2B:48:16:13:ED:C8:17:98:90:D7:1C:EE:AE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1A2CFCB8CE9292C606EF08372D34F461786D3660
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa
Signing time: Mon 30 Jun 2025 17:50:17 +0000
ROA not before: Mon 30 Jun 2025 17:50:17 +0000
ROA not after: Mon 04 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:2c:fc:b8:ce:92:92:c6:06:ef:08:37:2d:34:f4:61:78:6d:36:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 30 17:50:17 2025 GMT
Not After : Aug 4 23:59:59 2025 GMT
Subject: serialNumber=c0f3b5493ee62b42d1740a8db077f01d7904b675baac388c03e2fbef4045ca74, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:5d:b6:73:13:ec:d9:1f:e7:59:0d:64:49:
d8:2e:4d:3e:85:74:15:c9:c0:15:52:8c:7f:69:b1:
93:84:df:2e:b4:f6:43:ea:9d:66:a3:aa:12:eb:66:
dd:70:67:f9:79:4b:8d:c1:67:7e:e5:87:97:7b:55:
6b:33:82:46:6f:57:b2:e7:c3:b8:50:02:ed:84:a6:
c4:2e:ca:51:33:10:5d:9c:a1:b7:cd:31:b0:8e:6a:
5d:6c:4a:4c:e2:25:02:da:2d:75:c2:f8:d8:d0:7c:
0f:53:7b:89:c5:bc:8c:26:15:0b:a6:a6:60:9b:c7:
87:ef:31:4a:e6:09:74:09:1a:6a:a0:a8:e2:fc:2e:
5b:f3:a8:c5:cd:b2:8b:21:12:aa:df:4e:b4:ff:dd:
93:34:98:72:1e:32:1b:5e:fd:67:6a:b1:d1:50:de:
0b:80:e8:46:1a:cb:5f:89:20:82:9f:43:21:d5:b3:
f3:2f:23:50:ee:04:64:68:cf:2d:da:3d:77:9c:b5:
16:83:97:e2:18:84:39:f6:09:df:7e:74:20:d9:3e:
dd:16:ff:4d:ef:03:96:17:a0:1e:a2:1f:fa:ca:78:
e9:ff:5a:fc:89:c4:ab:ad:aa:9c:85:ef:aa:a4:f5:
26:9b:9f:f3:cb:ae:ae:a6:46:f0:c8:ea:4f:a4:7c:
ca:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C5:63:AD:8B:89:7C:2B:48:16:13:ED:C8:17:98:90:D7:1C:EE:AE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.204.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:0b:00:e8:8e:f7:b2:56:53:fe:1e:61:68:14:ef:b7:f0:a4:
4e:26:7e:0e:05:ec:9f:17:41:76:c5:ea:92:e7:2d:74:20:bc:
f5:44:c3:3c:e6:99:0c:c1:8a:6d:f9:56:78:03:cd:78:8c:a3:
b9:db:25:6c:3a:49:d7:c2:92:5a:71:12:32:9c:e9:6f:4e:90:
25:01:db:36:e4:d4:34:06:48:d7:f5:d4:32:6a:52:94:48:23:
fe:e6:43:b8:55:10:0d:b4:0e:bd:db:91:a3:b3:42:94:0f:1d:
95:1b:af:24:65:8b:fa:16:9b:6d:15:c6:63:3d:f2:c2:37:a6:
5c:c6:4b:d5:ee:99:43:c2:6d:1c:9f:bb:45:94:b9:cb:97:9d:
b5:02:dc:b1:52:84:64:fc:7f:57:e8:e9:b6:8f:33:db:09:a1:
1e:0d:c9:61:a4:73:cb:70:77:c5:0c:55:42:6b:12:b5:2a:ef:
59:31:62:f4:1c:d6:f1:c2:d7:14:fd:72:c9:42:83:21:ec:9f:
50:39:05:79:6f:3a:d1:d6:50:7d:e5:09:02:b0:ca:f0:63:d2:
b3:73:e1:0d:ea:0a:92:31:b8:44:7d:40:bb:fe:22:9c:bd:9c:
f7:6a:31:dd:27:bb:56:76:f3:dd:86:eb:f4:de:c5:3d:a4:0e:
e0:22:20:60
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUGiz8uM6SksYG7wg3LTT0YXhtNmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MzAxNzUwMTdaFw0yNTA4MDQyMzU5NTlaMHoxSTBHBgNV
BAUTQGMwZjNiNTQ5M2VlNjJiNDJkMTc0MGE4ZGIwNzdmMDFkNzkwNGI2NzViYWFj
Mzg4YzAzZTJmYmVmNDA0NWNhNzQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALfhXbZzE+zZH+dZDWRJ2C5NPoV0FcnAFVKMf2mxk4TfLrT2Q+qdZqOqEutm
3XBn+XlLjcFnfuWHl3tVazOCRm9XsufDuFAC7YSmxC7KUTMQXZyht80xsI5qXWxK
TOIlAtotdcL42NB8D1N7icW8jCYVC6amYJvHh+8xSuYJdAkaaqCo4vwuW/Ooxc2y
iyESqt9OtP/dkzSYch4yG179Z2qx0VDeC4DoRhrLX4kggp9DIdWz8y8jUO4EZGjP
Ldo9d5y1FoOX4hiEOfYJ3350INk+3Rb/Te8DlhegHqIf+sp46f9a/InEq62qnIXv
qqT1Jpuf88uurqZG8MjqT6R8yh8CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTHxWOt
i4l8K0gWE+3IF5iQ1xzurjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YmRjODMxZWItMDdjMi00N2JiLWE3M2QtMTc3YWJjOWIxNGMwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi6JzDAN
BgkqhkiG9w0BAQsFAAOCAQEAPwsA6I73slZT/h5haBTvt/CkTiZ+DgXsnxdBdsXq
kuctdCC89UTDPOaZDMGKbflWeAPNeIyjudslbDpJ18KSWnESMpzpb06QJQHbNuTU
NAZI1/XUMmpSlEgj/uZDuFUQDbQOvduRo7NClA8dlRuvJGWL+habbRXGYz3ywjem
XMZL1e6ZQ8JtHJ+7RZS5y5edtQLcsVKEZPx/V+jpto8z2wmhHg3JYaRzy3B3xQxV
QmsStSrvWTFi9BzW8cLXFP1yyUKDIeyfUDkFeW860dZQfeUJArDK8GPSs3PhDeoK
kjG4RH1Au/4inL2c92ox3Se7Vnbz3Ybr9N7FPaQO4CIgYA==
-----END CERTIFICATE-----
Generated at Tue Jul 22 21:42:18 2025 by rpki-client