Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9b6ea2c3-c25b-492c-9547-7c5ddb75d15f.roa
File: 9b6ea2c3-c25b-492c-9547-7c5ddb75d15f.roa (raw, json)
Hash identifier: bKuozcRp688ZJAP1Qi0lUWaYftydCUwCHtXTf7ezPt0=
Subject key identifier: 75:6B:9E:FD:3B:88:47:F9:9E:AB:62:55:74:DF:12:63:00:BA:EC:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 17D9DAB72FA5B4A736BF8386F663E658C77CC3E9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9b6ea2c3-c25b-492c-9547-7c5ddb75d15f.roa
Signing time: Fri 09 May 2025 16:30:12 +0000
ROA not before: Fri 09 May 2025 16:30:12 +0000
ROA not after: Fri 13 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:d9:da:b7:2f:a5:b4:a7:36:bf:83:86:f6:63:e6:58:c7:7c:c3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 9 16:30:12 2025 GMT
Not After : Jun 13 23:59:59 2025 GMT
Subject: serialNumber=330f672ddd2eabea59f18afe317eb9aafef40a193fd316fe7ec78bed922354d7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0b:d4:21:fe:6a:80:8e:7e:4d:fd:4b:f7:5c:
6b:b3:44:df:65:7a:e4:12:0e:fe:c6:c8:51:b2:f3:
78:2c:ac:8a:f7:ab:82:45:b6:53:fd:a0:a2:fa:e5:
4d:7c:08:b8:c4:24:00:73:a1:be:21:85:60:03:3c:
e4:24:62:22:e0:38:43:88:9f:84:31:e0:a0:f0:6c:
f9:ee:48:5d:e6:f0:32:ab:15:cb:59:10:bd:fd:f7:
4b:4d:a0:18:b2:55:7a:50:87:64:88:b7:c4:a0:df:
52:68:e5:75:45:a7:a0:85:79:3e:d4:95:66:d8:38:
34:90:d4:ed:d1:66:b0:57:70:35:00:aa:df:1e:9c:
e5:2b:1b:c6:e7:f0:d8:b8:df:f8:76:3f:04:ab:d7:
9e:86:0d:18:3a:3f:7d:4f:00:59:12:be:ef:a9:4c:
bf:48:99:28:cc:b7:5c:dd:35:24:d4:d7:39:19:b9:
98:3b:aa:cf:62:cb:d3:c4:7e:45:aa:d9:66:26:ae:
e8:f8:37:e6:72:de:d6:52:ca:e5:fa:0f:30:95:f0:
49:92:45:18:02:8b:06:9d:1b:9b:cd:31:8a:bc:22:
99:6f:d5:16:da:7a:5a:79:ce:4e:f5:89:3b:58:ff:
53:f1:43:26:2f:d7:f7:d8:41:90:0d:02:c7:9d:00:
6e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6B:9E:FD:3B:88:47:F9:9E:AB:62:55:74:DF:12:63:00:BA:EC:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9b6ea2c3-c25b-492c-9547-7c5ddb75d15f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.216.0/22
Signature Algorithm: sha256WithRSAEncryption
32:a6:67:1d:0f:6e:fc:97:04:26:0d:a1:65:01:db:fd:90:cb:
f9:d3:5c:50:a3:54:8a:e6:4e:d9:86:37:bc:c8:df:de:cb:10:
08:93:bf:5a:80:f3:71:97:52:1c:69:f4:ff:e0:01:36:3e:77:
d3:d8:1c:2d:e5:37:cf:2a:bc:85:c8:fb:d5:31:4f:b6:31:29:
b8:c1:5d:ae:09:05:3d:03:ec:3c:8f:4b:f2:38:98:bf:8c:b8:
4a:ed:4b:8b:ed:77:50:1b:be:9c:f5:6a:02:3f:3c:10:be:3f:
93:16:85:a4:c5:09:38:e0:93:ab:b8:bd:5b:7a:31:5f:19:6d:
59:9c:be:74:5f:b0:9e:0d:4a:11:f5:71:64:e1:8f:85:5a:86:
ff:1b:dd:09:02:08:f5:f6:ff:78:30:9a:86:e5:d1:dd:96:b6:
d9:fa:99:23:70:86:6b:2f:c2:c9:3e:60:cf:fd:4c:9e:3b:ae:
4a:04:84:ba:3a:87:ee:a1:21:8c:83:3c:a9:de:8d:b6:05:c2:
b0:6c:45:13:71:21:07:27:4c:3c:13:47:86:a9:c5:f5:06:61:
01:51:29:fb:fc:88:fb:be:9b:d3:d2:de:bd:fa:3f:80:b3:03:
8d:41:4f:3d:0d:d1:eb:09:df:94:a7:a5:6e:f5:5a:a5:aa:b7:
ed:af:96:ad
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUF9naty+ltKc2v4OG9mPmWMd8w+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MDkxNjMwMTJaFw0yNTA2MTMyMzU5NTlaMHoxSTBHBgNV
BAUTQDMzMGY2NzJkZGQyZWFiZWE1OWYxOGFmZTMxN2ViOWFhZmVmNDBhMTkzZmQz
MTZmZTdlYzc4YmVkOTIyMzU0ZDcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO8L1CH+aoCOfk39S/dca7NE32V65BIO/sbIUbLzeCysivergkW2U/2govrl
TXwIuMQkAHOhviGFYAM85CRiIuA4Q4ifhDHgoPBs+e5IXebwMqsVy1kQvf33S02g
GLJVelCHZIi3xKDfUmjldUWnoIV5PtSVZtg4NJDU7dFmsFdwNQCq3x6c5Ssbxufw
2Ljf+HY/BKvXnoYNGDo/fU8AWRK+76lMv0iZKMy3XN01JNTXORm5mDuqz2LL08R+
RarZZiau6Pg35nLe1lLK5foPMJXwSZJFGAKLBp0bm80xirwimW/VFtp6WnnOTvWJ
O1j/U/FDJi/X99hBkA0Cx50AbjUCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBR1a579
O4hH+Z6rYlV03xJjALrs9TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OWI2ZWEyYzMtYzI1Yi00OTJjLTk1NDctN2M1ZGRiNzVkMTVmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi6J2DAN
BgkqhkiG9w0BAQsFAAOCAQEAMqZnHQ9u/JcEJg2hZQHb/ZDL+dNcUKNUiuZO2YY3
vMjf3ssQCJO/WoDzcZdSHGn0/+ABNj5309gcLeU3zyq8hcj71TFPtjEpuMFdrgkF
PQPsPI9L8jiYv4y4Su1Li+13UBu+nPVqAj88EL4/kxaFpMUJOOCTq7i9W3oxXxlt
WZy+dF+wng1KEfVxZOGPhVqG/xvdCQII9fb/eDCahuXR3Za22fqZI3CGay/CyT5g
z/1MnjuuSgSEujqH7qEhjIM8qd6NtgXCsGxFE3EhBydMPBNHhqnF9QZhAVEp+/yI
+76b09Levfo/gLMDjUFPPQ3R6wnflKelbvVapaq37a+WrQ==
-----END CERTIFICATE-----
Generated at Mon Jun 2 16:25:13 2025 by rpki-client