Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa
File: e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa (raw, json)
Hash identifier: 7517MQa1O3mdYAYMZ858+W0fETph/R+clWxUkfloFAs=
Subject key identifier: C0:D2:3E:4D:E1:8D:E3:BC:93:B7:B8:21:11:95:2D:03:E0:D5:81:F6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5E1E8D6BC6BB2DB10DFDCBCA71AF6461E1861007
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa
Signing time: Mon 30 Jun 2025 17:50:20 +0000
ROA not before: Mon 30 Jun 2025 17:50:20 +0000
ROA not after: Mon 04 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:1e:8d:6b:c6:bb:2d:b1:0d:fd:cb:ca:71:af:64:61:e1:86:10:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 30 17:50:20 2025 GMT
Not After : Aug 4 23:59:59 2025 GMT
Subject: serialNumber=6f74f7e4662e832bfab8364cb24854963ba1c1817884fe7a1a22b7f72375bfe6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:c7:35:ce:39:ac:09:e0:46:81:41:2f:a2:
40:4f:41:61:fa:44:db:e3:16:b6:94:c8:c6:4b:e0:
be:e2:ba:be:e5:c5:eb:ae:87:0f:93:03:db:df:e9:
ad:dd:59:29:18:2a:25:f8:56:24:3b:89:89:73:4f:
55:b4:5b:b7:5f:28:28:01:41:7a:f6:ce:75:1e:a2:
2f:e5:d9:a1:82:0a:00:6e:f3:20:34:50:dc:60:9a:
72:6a:70:8b:4c:bd:ea:a8:ca:43:9e:b5:17:08:11:
10:db:9c:23:3c:85:f5:31:8e:bd:2a:b5:2e:89:75:
3b:21:6b:01:18:d3:ab:0b:10:05:cc:77:5e:9a:4b:
c4:6b:a0:9c:dd:39:2e:89:97:f3:32:68:f6:38:95:
04:15:03:2c:31:12:cd:6b:ae:19:c1:a2:62:66:cf:
08:cc:9f:7a:94:d0:20:3f:25:75:23:6e:97:c3:de:
f9:7e:1b:24:f0:a1:3d:9e:ec:37:9f:b1:e1:c3:c8:
6f:b1:18:33:d4:55:c9:98:74:c0:d8:46:a9:83:9e:
3a:1c:a0:7b:94:97:8a:55:dc:49:bd:51:09:f9:22:
4b:33:0e:35:61:5d:dd:ac:47:29:4b:67:4d:8c:cd:
04:7a:57:18:62:eb:de:6e:10:63:ee:51:59:d5:ac:
f4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D2:3E:4D:E1:8D:E3:BC:93:B7:B8:21:11:95:2D:03:E0:D5:81:F6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.160.0/21
Signature Algorithm: sha256WithRSAEncryption
be:49:35:bd:84:b0:cf:d6:74:25:9c:44:a8:d6:b1:c5:91:d0:
02:b9:87:42:cd:e2:6a:4f:95:28:23:5c:b7:61:b5:25:20:51:
ce:80:e5:91:90:73:c0:62:c7:a4:fd:a0:35:d1:a9:17:73:63:
f3:e1:66:46:fd:80:39:7a:82:67:85:98:5d:75:74:89:d0:a0:
c6:9c:22:bc:06:a3:ad:ee:71:ff:8a:f3:b8:cc:8d:39:38:62:
64:6d:b6:00:e5:70:13:2f:32:58:79:67:c5:21:39:c3:23:6f:
b9:2a:d4:81:d5:86:23:a6:a0:69:a9:c2:4f:02:01:1b:62:1c:
73:7c:ec:18:37:9c:79:3b:da:da:5e:82:83:76:03:41:6d:79:
3f:08:59:bc:22:6d:e0:e3:4f:e0:c3:10:f6:04:4d:70:ba:78:
53:e6:f2:c4:3a:29:60:79:f5:44:85:9a:5b:61:1e:4c:41:31:
45:ca:d3:0e:53:83:e0:3e:fb:d8:22:ac:d6:87:20:06:ea:16:
99:b2:7d:3f:57:06:4f:e6:8c:93:4e:68:84:c9:fa:c1:2a:31:
02:2f:cb:20:25:31:b0:37:b8:90:d4:df:3f:32:4d:6a:ba:82:
78:ea:03:6a:c0:6d:42:21:2a:13:bb:a2:9c:dd:63:ba:ae:b9:
93:7c:bf:0f
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUXh6Na8a7LbEN/cvKca9kYeGGEAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MzAxNzUwMjBaFw0yNTA4MDQyMzU5NTlaMHoxSTBHBgNV
BAUTQDZmNzRmN2U0NjYyZTgzMmJmYWI4MzY0Y2IyNDg1NDk2M2JhMWMxODE3ODg0
ZmU3YTFhMjJiN2Y3MjM3NWJmZTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKo3xzXOOawJ4EaBQS+iQE9BYfpE2+MWtpTIxkvgvuK6vuXF666HD5MD29/p
rd1ZKRgqJfhWJDuJiXNPVbRbt18oKAFBevbOdR6iL+XZoYIKAG7zIDRQ3GCacmpw
i0y96qjKQ561FwgRENucIzyF9TGOvSq1Lol1OyFrARjTqwsQBcx3XppLxGugnN05
LomX8zJo9jiVBBUDLDESzWuuGcGiYmbPCMyfepTQID8ldSNul8Pe+X4bJPChPZ7s
N5+x4cPIb7EYM9RVyZh0wNhGqYOeOhyge5SXilXcSb1RCfkiSzMONWFd3axHKUtn
TYzNBHpXGGLr3m4QY+5RWdWs9I0CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTA0j5N
4Y3jvJO3uCERlS0D4NWB9jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZTkxYjYyYTktMjg4NS00NTA0LTg0YTQtYmEyY2MyZjJhYzgwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAy6JoDAN
BgkqhkiG9w0BAQsFAAOCAQEAvkk1vYSwz9Z0JZxEqNaxxZHQArmHQs3iak+VKCNc
t2G1JSBRzoDlkZBzwGLHpP2gNdGpF3Nj8+FmRv2AOXqCZ4WYXXV0idCgxpwivAaj
re5x/4rzuMyNOThiZG22AOVwEy8yWHlnxSE5wyNvuSrUgdWGI6agaanCTwIBG2Ic
c3zsGDeceTva2l6Cg3YDQW15PwhZvCJt4ONP4MMQ9gRNcLp4U+byxDopYHn1RIWa
W2EeTEExRcrTDlOD4D772CKs1ocgBuoWmbJ9P1cGT+aMk05ohMn6wSoxAi/LICUx
sDe4kNTfPzJNarqCeOoDasBtQiEqE7uinN1juq65k3y/Dw==
-----END CERTIFICATE-----
Generated at Tue Jul 22 21:43:25 2025 by rpki-client