Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c6881bd-10fc-4994-83fe-43244d2b078a.roa
File: 2c6881bd-10fc-4994-83fe-43244d2b078a.roa (raw, json)
Hash identifier: RoyCoqPcsxg7cl2R+0wWWYUnM1sC95BZlkSV9wDkqvw=
Subject key identifier: FD:CC:F5:A3:3A:00:A8:F9:4F:CF:2C:D1:20:12:70:9C:2E:7E:88:68
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6B8BCD75002B0AA75EA8615E095D0724BE93EDB4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c6881bd-10fc-4994-83fe-43244d2b078a.roa
Signing time: Fri 09 May 2025 16:31:01 +0000
ROA not before: Fri 09 May 2025 16:31:01 +0000
ROA not after: Fri 13 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:8b:cd:75:00:2b:0a:a7:5e:a8:61:5e:09:5d:07:24:be:93:ed:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 9 16:31:01 2025 GMT
Not After : Jun 13 23:59:59 2025 GMT
Subject: serialNumber=858c84afff404ff216392aea3d31955878434eeb7c65da01338ac306aeeb3a3e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:f4:ac:6f:a9:9e:e7:67:ca:ac:37:7b:16:
de:77:fa:f8:35:52:fb:49:45:d5:ee:c8:e9:64:61:
44:d8:37:59:48:2e:42:f8:9e:39:12:a2:56:d4:80:
77:4e:4a:6b:64:00:bb:49:75:b3:60:18:9d:af:de:
17:24:a4:48:9a:9d:59:e8:4e:8a:b8:52:80:4c:1d:
fb:97:e4:78:b4:28:54:b6:3d:d8:b5:f1:4b:2a:49:
67:b8:29:cb:93:8a:42:d5:cd:4c:74:ee:37:0e:4f:
68:93:88:4b:a0:5c:14:14:56:7a:fe:75:c9:0d:a1:
44:84:49:02:e3:5b:e7:6b:cf:6d:af:91:48:a7:4e:
19:7d:13:0c:9b:c8:bb:c7:32:af:b7:b5:14:d0:b1:
41:44:ef:c0:ad:ae:45:fa:05:77:66:4a:3b:f1:40:
bc:70:18:54:53:f7:a8:0c:9f:eb:0c:17:d6:db:0e:
a3:4c:26:2e:f3:bb:a2:51:e2:bf:34:31:84:c5:39:
96:de:41:50:9e:fc:e3:a3:a7:ea:c6:69:63:15:42:
db:d7:b1:01:2c:4a:ac:66:30:68:cf:9a:42:b8:2f:
ab:88:ab:91:3c:5f:85:d9:23:17:eb:39:2b:2f:7a:
ad:7a:00:2f:4e:b3:e3:79:1e:bf:37:f8:4a:65:52:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CC:F5:A3:3A:00:A8:F9:4F:CF:2C:D1:20:12:70:9C:2E:7E:88:68
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c6881bd-10fc-4994-83fe-43244d2b078a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.80.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:c7:d3:61:97:8d:22:00:85:69:35:f5:a3:91:6b:62:f1:ac:
07:5e:62:cd:df:b0:96:97:56:94:1b:83:dd:26:9b:19:0c:24:
28:b6:84:23:80:19:d8:84:20:74:02:b3:fa:91:e0:61:d3:1e:
c3:cc:88:00:bc:ce:c7:ae:5e:23:6f:34:43:5e:67:84:9d:bd:
63:29:96:dd:1f:d8:8e:d3:02:62:03:73:71:41:a0:4b:79:38:
6a:d1:3f:6c:90:9e:76:30:f5:40:53:e9:93:af:34:df:57:40:
f1:b8:1c:96:5f:87:c3:4e:b4:95:ec:ea:d3:5d:a9:64:4f:84:
8f:b6:9e:3d:48:84:8e:b2:63:dd:b5:54:fa:7a:e2:e6:f4:aa:
43:87:45:a5:ea:42:09:bf:5f:67:01:e8:b4:f2:df:34:05:62:
ac:99:92:d7:9c:89:6c:2d:d1:ba:4f:a7:d3:66:bd:eb:e6:6a:
e7:bb:1b:fe:94:50:a1:88:9e:23:b4:ea:ca:15:47:3c:11:d9:
1f:4b:9a:1c:a9:7e:7c:ae:18:f0:9e:01:fa:3e:0e:08:32:b8:
63:93:c2:75:0f:43:df:04:29:ba:a4:87:d9:01:55:20:ef:ab:
2b:b7:7c:a7:1e:a4:93:53:7d:a2:9a:e3:c6:bc:01:b4:d1:e6:
b0:64:d0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:27:02 2025 by rpki-client