Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/279da9d6-10c2-4fd5-9d75-0a963c29c8d4.roa
File: 279da9d6-10c2-4fd5-9d75-0a963c29c8d4.roa (raw, json)
Hash identifier: IZ3QW5VmxQEOndgOEi3l72Gx4tnZrQoO0zEvJB56Hfw=
Subject key identifier: 83:60:18:A1:E3:78:0C:A9:0E:D2:D2:51:B5:43:F0:2F:E7:A4:BC:69
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 63994882FC5E3A7254D71816E856B093F13AD045
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/279da9d6-10c2-4fd5-9d75-0a963c29c8d4.roa
Signing time: Fri 09 May 2025 16:30:17 +0000
ROA not before: Fri 09 May 2025 16:30:17 +0000
ROA not after: Fri 13 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:99:48:82:fc:5e:3a:72:54:d7:18:16:e8:56:b0:93:f1:3a:d0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 9 16:30:17 2025 GMT
Not After : Jun 13 23:59:59 2025 GMT
Subject: serialNumber=4525852cc24381ce021d71b9359ccf6fee4015772251840a60077b82d19026cf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:c7:1d:6a:ab:1f:80:86:dd:8c:65:b8:ac:
53:1c:38:19:03:a8:de:ea:f8:3c:34:52:6c:c9:52:
4c:bf:0b:69:47:05:5e:ea:3c:a9:bb:11:4f:83:54:
9c:47:1f:29:78:42:9d:73:6a:31:b9:e7:66:1d:e5:
62:a5:1c:c6:8d:09:b3:f9:53:74:fe:86:79:b0:a9:
46:5b:2c:17:f9:74:86:a5:f9:81:5b:0b:a3:12:b0:
b9:d5:db:af:0f:e1:87:39:c1:bb:2c:26:77:0b:66:
bc:4a:16:c4:61:0f:95:b0:6e:87:17:c1:8f:92:53:
ad:51:b3:e7:27:4f:4a:38:fd:1a:b1:fd:ee:7b:5d:
a1:d3:68:0b:c8:f2:3b:4d:23:1d:e6:bf:97:08:b5:
13:f0:b1:66:07:4f:c6:45:d9:a1:58:29:82:c7:4c:
60:38:f4:5b:d8:3f:7f:d4:47:24:cf:2d:c2:5f:17:
df:4d:41:3c:a9:34:8b:5c:9a:57:b3:ff:d3:c0:07:
72:c1:ff:6a:4e:65:76:47:f5:d7:7e:43:82:f2:cd:
7b:a4:bb:b7:c6:de:f3:b3:b7:71:f8:e8:7e:13:37:
d2:36:55:8f:c8:c7:1e:87:a4:f3:de:05:b1:0b:c3:
4d:75:ea:53:f2:71:22:55:a6:4c:29:bf:96:85:d0:
9b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:60:18:A1:E3:78:0C:A9:0E:D2:D2:51:B5:43:F0:2F:E7:A4:BC:69
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/279da9d6-10c2-4fd5-9d75-0a963c29c8d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.144.0/21
Signature Algorithm: sha256WithRSAEncryption
69:28:73:d2:9b:71:21:f9:ad:25:2c:de:9e:b3:d6:f8:15:1a:
6e:0c:f5:ff:d3:60:c7:56:3c:51:36:eb:8b:a4:17:3d:3d:0a:
ab:bd:d8:f5:e6:dc:89:7f:13:61:37:47:65:a9:78:3d:26:08:
bf:b1:91:64:8f:12:86:62:97:c7:34:d8:3e:40:6b:ee:33:c1:
e9:ae:1d:1d:90:20:1c:18:0c:c0:de:83:95:8f:df:05:df:50:
9d:73:67:b7:13:0d:92:30:f1:b9:40:9d:90:0b:a6:2b:66:3d:
84:24:b2:c2:a3:45:ce:e1:50:99:b0:48:df:bc:21:fa:35:b7:
6d:4a:77:e9:15:7d:6d:0d:0d:62:ef:17:57:2a:f7:28:52:44:
7a:e7:94:da:0c:ec:ba:90:32:ad:c9:58:55:fa:9c:dd:be:6c:
86:d6:b7:f1:8b:de:9e:88:ca:79:86:ea:22:a4:6a:d1:93:ac:
fc:69:86:9e:6c:a6:53:0a:b4:77:ae:68:4e:40:e9:9b:d6:03:
a3:b6:b8:0d:2f:bd:e2:2a:f6:dd:3d:d3:f5:da:51:00:14:63:
69:f6:6f:97:0a:a3:b6:89:ee:11:59:89:16:b2:13:19:19:e6:
f3:92:e6:c7:68:d6:8b:6e:4a:d5:5c:d8:d0:61:60:be:0e:fc:
41:35:51:7e
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUY5lIgvxeOnJU1xgW6Fawk/E60EUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MDkxNjMwMTdaFw0yNTA2MTMyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ1MjU4NTJjYzI0MzgxY2UwMjFkNzFiOTM1OWNjZjZmZWU0MDE1NzcyMjUx
ODQwYTYwMDc3YjgyZDE5MDI2Y2YxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMxExx1qqx+Aht2MZbisUxw4GQOo3ur4PDRSbMlSTL8LaUcFXuo8qbsRT4NU
nEcfKXhCnXNqMbnnZh3lYqUcxo0Js/lTdP6GebCpRlssF/l0hqX5gVsLoxKwudXb
rw/hhznBuywmdwtmvEoWxGEPlbBuhxfBj5JTrVGz5ydPSjj9GrH97ntdodNoC8jy
O00jHea/lwi1E/CxZgdPxkXZoVgpgsdMYDj0W9g/f9RHJM8twl8X301BPKk0i1ya
V7P/08AHcsH/ak5ldkf1135DgvLNe6S7t8be87O3cfjofhM30jZVj8jHHoek894F
sQvDTXXqU/JxIlWmTCm/loXQm5UCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSDYBih
43gMqQ7S0lG1Q/Av56S8aTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Mjc5ZGE5ZDYtMTBjMi00ZmQ1LTlkNzUtMGE5NjNjMjljOGQ0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAy6JkDAN
BgkqhkiG9w0BAQsFAAOCAQEAaShz0ptxIfmtJSzenrPW+BUabgz1/9Ngx1Y8UTbr
i6QXPT0Kq73Y9ebciX8TYTdHZal4PSYIv7GRZI8ShmKXxzTYPkBr7jPB6a4dHZAg
HBgMwN6DlY/fBd9QnXNntxMNkjDxuUCdkAumK2Y9hCSywqNFzuFQmbBI37wh+jW3
bUp36RV9bQ0NYu8XVyr3KFJEeueU2gzsupAyrclYVfqc3b5shta38YvenojKeYbq
IqRq0ZOs/GmGnmymUwq0d65oTkDpm9YDo7a4DS+94ir23T3T9dpRABRjafZvlwqj
tonuEVmJFrITGRnm85Lmx2jWi25K1VzY0GFgvg78QTVRfg==
-----END CERTIFICATE-----
Generated at Mon Jun 2 16:25:09 2025 by rpki-client