Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4dd31163-2ad7-49f5-a24d-2ea4170bb05f.roa
File: 4dd31163-2ad7-49f5-a24d-2ea4170bb05f.roa (raw, json)
Hash identifier: 2/zgY/aNER5ev96JPSfIpHuxQqTgvuIwb66kIznIeVQ=
Subject key identifier: 06:CE:90:90:CF:41:7E:2A:F6:94:3F:7E:B6:20:12:54:96:16:9C:77
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1C67F7B5ACFCB93091891EB409ABA3079987A8C5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4dd31163-2ad7-49f5-a24d-2ea4170bb05f.roa
Signing time: Fri 09 May 2025 16:30:55 +0000
ROA not before: Fri 09 May 2025 16:30:55 +0000
ROA not after: Fri 13 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:67:f7:b5:ac:fc:b9:30:91:89:1e:b4:09:ab:a3:07:99:87:a8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 9 16:30:55 2025 GMT
Not After : Jun 13 23:59:59 2025 GMT
Subject: serialNumber=1632ebfcc205cdcda87838e172efc0f566c297f02d6d83826f9779ff23b5127f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:d7:e6:2a:26:47:32:c7:d5:70:1b:90:32:
ce:12:0d:cd:d1:40:f3:f1:d9:b6:36:01:03:37:6b:
07:d1:0e:58:39:9e:4f:2b:3d:17:01:58:34:bd:98:
16:5a:c8:57:f8:79:e8:73:d0:fd:a7:0c:2c:77:9f:
47:af:ee:77:7d:27:75:a9:a6:2a:18:20:f3:60:77:
dc:65:fb:1f:0c:3e:b9:15:e6:da:01:45:bb:3a:52:
a1:47:fc:28:84:25:70:45:54:71:9f:f5:7a:01:a1:
49:1f:d0:d6:78:ed:d9:a1:15:6a:f3:df:43:b4:82:
09:51:21:ba:d0:12:c2:46:3b:38:6a:71:eb:a2:3b:
9f:20:6e:46:82:9e:f6:6f:3d:a2:33:6a:94:75:82:
c6:2d:7e:1d:7a:ff:37:b7:dc:39:3e:9e:98:67:60:
04:17:a4:f0:72:c5:16:0a:12:7b:b0:65:2b:de:d7:
26:8d:ea:ff:cc:78:71:e1:fc:5e:81:b8:67:84:d2:
58:36:82:ab:ce:38:c6:a8:81:5d:a4:90:18:c8:e0:
6f:ee:97:27:6a:33:37:c3:00:23:ee:24:06:37:a1:
36:31:00:6d:48:00:c6:d7:9f:38:7b:6f:4d:6a:02:
d4:49:a0:4b:c0:3c:f7:72:fb:e1:44:60:47:e8:e4:
29:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CE:90:90:CF:41:7E:2A:F6:94:3F:7E:B6:20:12:54:96:16:9C:77
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4dd31163-2ad7-49f5-a24d-2ea4170bb05f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.240.0/20
Signature Algorithm: sha256WithRSAEncryption
92:d3:41:45:44:1e:9b:df:99:c5:97:cd:83:e3:a0:ba:c4:b6:
08:fc:9c:92:92:94:51:10:a0:e0:2e:4e:87:d5:42:5a:e0:7d:
3f:d4:2d:76:37:3c:51:1f:cf:93:3c:32:df:db:42:a1:56:3d:
7f:c8:c6:5f:a0:8d:78:99:02:ac:3c:27:b4:80:92:1c:41:6f:
3c:18:fc:76:ea:22:19:f3:55:97:3b:b9:1b:c6:cf:af:f8:97:
fe:c0:9a:61:a4:bc:19:ce:6e:87:9f:dd:30:b9:e5:45:b0:19:
84:db:2b:7a:e3:47:c7:00:2d:71:9c:50:3a:3b:37:d5:71:25:
dc:dd:a5:63:75:90:bf:2f:53:68:eb:46:a9:10:7d:ed:4c:94:
b0:ba:43:55:24:50:bb:70:08:8d:78:e3:34:b7:d4:e0:c9:09:
c8:3e:f0:6c:eb:07:c2:ee:f4:65:2a:2b:3f:fe:37:93:b1:2f:
0b:33:03:a2:2c:a0:4d:b0:a0:c3:5c:37:af:69:9c:d8:8c:fc:
fe:cb:7c:c1:69:23:73:b9:e5:77:56:b3:e9:a6:19:e4:a9:94:
ef:85:50:f2:f0:d8:05:4f:57:4a:5e:f2:96:49:bf:f5:c8:63:
ea:8c:06:7e:9d:a1:24:b0:52:0d:5d:84:bf:17:5f:33:74:ff:
d4:e8:1f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:26:20 2025 by rpki-client