Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c924e5-b5a4-4e39-bd9b-3aa04634212a.roa
File: 11c924e5-b5a4-4e39-bd9b-3aa04634212a.roa (raw, json)
Hash identifier: uSH+RgqLFze1YlqiZsV3w/4FBNIpPWfaGlptET4Q1NA=
Subject key identifier: 44:90:12:DB:0D:B3:F4:E4:89:1E:6F:68:20:7E:B5:FF:43:A6:17:F8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4B6D77BF32913FAC37F0C2BF17B827DA4A9B114D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c924e5-b5a4-4e39-bd9b-3aa04634212a.roa
Signing time: Fri 09 May 2025 16:30:23 +0000
ROA not before: Fri 09 May 2025 16:30:23 +0000
ROA not after: Fri 13 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:6d:77:bf:32:91:3f:ac:37:f0:c2:bf:17:b8:27:da:4a:9b:11:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 9 16:30:23 2025 GMT
Not After : Jun 13 23:59:59 2025 GMT
Subject: serialNumber=abdb0972c6a92b384206f16460c27f0199d24867744a332922887406778afdeb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7b:bc:6d:ba:cc:94:b9:1f:ba:6e:e7:58:70:
1d:41:9a:6d:5f:cc:97:cf:26:6e:78:fd:b0:c4:ca:
9e:b8:3a:f5:b2:50:84:6b:aa:22:1c:ef:d8:17:3d:
c8:56:20:ac:c3:fc:a4:48:80:46:c1:29:e7:07:4e:
84:7f:f3:f4:50:34:b0:8d:ca:c8:f3:27:bb:36:03:
d3:28:51:f6:c5:81:f0:fc:d2:3f:fa:22:d7:37:7f:
d7:be:2c:63:b3:02:d9:45:60:5f:0b:81:cf:97:9d:
4c:86:d0:35:08:a2:11:f2:61:50:d2:ec:6d:a9:d5:
60:17:f4:40:7c:4f:d9:da:d3:9b:ff:53:72:18:c7:
d0:dd:dc:86:be:e4:aa:0d:45:67:84:5e:ce:24:13:
96:c2:e4:55:1a:af:42:1e:d8:7f:b7:89:a1:6c:9b:
f4:9b:0b:9f:d4:2a:1c:44:51:a5:b0:da:cd:c2:42:
d1:4d:5b:0d:45:41:f2:a5:9b:12:d4:db:39:a6:c3:
6b:bd:e7:eb:db:79:24:72:74:13:da:d5:5d:0e:24:
54:08:bd:52:b4:c5:bf:1f:96:5e:2f:94:ca:cb:d5:
e1:fb:a0:f4:a4:25:fd:ed:55:85:58:0e:b2:b1:e0:
ca:24:1f:71:ca:41:48:b7:83:97:ce:24:ab:b7:86:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:90:12:DB:0D:B3:F4:E4:89:1E:6F:68:20:7E:B5:FF:43:A6:17:F8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c924e5-b5a4-4e39-bd9b-3aa04634212a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.64.0/21
Signature Algorithm: sha256WithRSAEncryption
95:bb:d6:ce:18:87:7b:3d:6c:79:ac:5b:ef:42:d1:da:23:fd:
72:c7:d8:44:14:6b:75:4b:10:6b:11:2d:e0:71:eb:43:ab:75:
47:fa:1b:06:d0:d4:9e:ca:0a:cf:7f:85:74:59:1a:7f:a0:64:
4b:93:37:f5:05:f1:ff:8e:bc:25:82:7c:e6:ee:5d:97:3d:2d:
4c:2f:7f:d5:65:8c:3c:c2:00:7b:5f:b3:1f:e9:db:52:b3:8a:
e5:7e:5a:3f:9b:16:ec:60:29:74:5b:e8:03:a6:4a:f8:69:6a:
7d:e2:bf:06:81:75:cf:36:67:24:a9:03:a5:fa:f6:29:da:be:
41:e7:c7:61:c0:99:9e:e7:2c:86:38:cf:80:06:95:c8:5f:b8:
24:bb:52:59:d4:7e:2d:7b:e5:e2:de:7f:4b:4d:29:a2:67:c9:
17:e4:4f:ca:c2:b1:b7:bf:21:2e:6b:a4:ed:05:01:1c:32:57:
f6:d4:6b:dc:3b:93:61:d9:42:c1:8a:8c:c2:97:44:81:9f:55:
41:fd:10:0f:96:c9:1b:52:a0:62:96:91:f8:38:38:68:3b:91:
64:da:14:74:23:c6:4d:4e:34:e0:60:d3:13:47:e2:76:6d:59:
91:88:9f:e7:e4:18:78:bf:f9:36:a9:c6:c3:0f:91:0c:aa:e8:
03:14:3c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:25:10 2025 by rpki-client