Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9c3be55c-de0f-4901-938e-229a296fa31f.roa
File: 9c3be55c-de0f-4901-938e-229a296fa31f.roa (raw, json)
Hash identifier: QtrluG1Y03cfYUraOHoJGBWaR00u43a4OajoZyjJp8Y=
Subject key identifier: DD:93:5A:74:35:2F:60:23:99:1C:C2:23:B1:01:96:2E:88:31:4F:ED
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 01B3A566271B650AA9FE47B3B428E4639D343764
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9c3be55c-de0f-4901-938e-229a296fa31f.roa
Signing time: Fri 09 May 2025 16:30:10 +0000
ROA not before: Fri 09 May 2025 16:30:10 +0000
ROA not after: Fri 13 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:b3:a5:66:27:1b:65:0a:a9:fe:47:b3:b4:28:e4:63:9d:34:37:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 9 16:30:10 2025 GMT
Not After : Jun 13 23:59:59 2025 GMT
Subject: serialNumber=17b029d0b20809e4edfb1c00cc0cc7d722abd4bc806b2db15fc94fc7121d47dd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:06:88:9b:6f:c6:c4:b2:17:7d:3d:38:9c:66:
51:99:32:6d:0d:88:3e:a2:62:b8:98:95:67:7a:b1:
16:30:49:3b:e3:a8:63:66:28:9f:f7:88:3d:53:8a:
1c:b9:07:fb:57:76:f8:d9:16:15:8b:fa:11:0a:10:
2d:f6:be:1b:40:19:9e:b0:2e:91:75:02:23:85:33:
fc:15:ea:14:c1:7a:cf:11:e3:74:cc:82:f1:26:62:
20:99:d5:9c:85:f1:49:fc:07:63:92:5f:22:3b:bb:
44:48:12:a9:d0:d9:17:ef:c5:ec:3b:52:e3:73:03:
59:1e:c1:ce:51:1f:1a:fc:9d:af:4d:d8:59:9f:9c:
4d:6b:06:67:af:00:4e:66:c6:dc:5e:94:47:f4:d9:
19:f6:fd:05:bc:de:73:e8:f8:58:91:9d:92:eb:34:
c4:64:1f:ad:46:39:08:0b:7d:4d:b2:f9:c1:60:54:
98:fa:2e:fb:5e:59:1a:f3:b9:07:ab:e8:50:e4:be:
5e:e4:e0:3e:17:d3:93:c5:67:34:0d:29:1c:cd:c9:
d3:07:c3:a6:62:13:c3:59:22:70:76:8c:f0:af:ab:
ea:62:18:9b:e7:1b:4e:ed:09:99:ef:b0:79:fe:28:
92:c8:e2:54:37:f6:6a:f0:66:3d:5c:ef:37:47:79:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:93:5A:74:35:2F:60:23:99:1C:C2:23:B1:01:96:2E:88:31:4F:ED
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9c3be55c-de0f-4901-938e-229a296fa31f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.168.0/23
Signature Algorithm: sha256WithRSAEncryption
81:f9:0d:a6:4c:22:93:57:c0:95:2e:7e:52:6c:3b:eb:9f:dd:
54:fc:82:4e:f7:f1:07:bb:7a:7b:23:46:f8:b3:e6:b7:a8:f4:
08:8e:a9:72:61:a5:dd:f6:20:29:f5:e9:56:4d:3d:69:26:86:
19:8d:d2:8f:ac:8a:63:cb:67:d4:3f:be:8f:ff:ed:07:3f:60:
42:ec:97:2b:a8:7d:0f:71:f8:86:e5:40:94:90:72:f5:db:39:
95:3d:41:db:1e:86:e4:59:14:f6:ef:8c:43:7c:52:e3:07:81:
51:e8:07:9d:83:80:78:dd:f2:aa:36:49:91:58:30:69:5d:fd:
3e:0d:cc:85:39:8e:aa:c4:b8:62:fa:a2:e5:80:87:8e:24:75:
10:0d:3a:b8:a2:ed:17:f5:63:cf:3f:8e:48:06:8b:13:41:0d:
88:f1:e3:c5:fb:4d:85:9c:42:3b:7f:54:c2:95:b5:e8:f5:64:
a4:2f:a4:bf:56:9e:46:d7:7e:90:bf:a8:d0:42:6a:e5:02:14:
cb:10:08:61:97:46:1c:29:90:a3:e5:08:01:58:fd:1e:44:5e:
cd:89:97:70:8c:5b:2c:4c:26:86:88:2d:0e:a2:54:12:cf:a8:
76:7f:33:15:10:85:89:94:99:68:a7:25:01:56:be:39:59:39:
14:9c:c3:38
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUAbOlZicbZQqp/keztCjkY500N2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MDkxNjMwMTBaFw0yNTA2MTMyMzU5NTlaMHoxSTBHBgNV
BAUTQDE3YjAyOWQwYjIwODA5ZTRlZGZiMWMwMGNjMGNjN2Q3MjJhYmQ0YmM4MDZi
MmRiMTVmYzk0ZmM3MTIxZDQ3ZGQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMsGiJtvxsSyF309OJxmUZkybQ2IPqJiuJiVZ3qxFjBJO+OoY2Yon/eIPVOK
HLkH+1d2+NkWFYv6EQoQLfa+G0AZnrAukXUCI4Uz/BXqFMF6zxHjdMyC8SZiIJnV
nIXxSfwHY5JfIju7REgSqdDZF+/F7DtS43MDWR7BzlEfGvydr03YWZ+cTWsGZ68A
TmbG3F6UR/TZGfb9Bbzec+j4WJGdkus0xGQfrUY5CAt9TbL5wWBUmPou+15ZGvO5
B6voUOS+XuTgPhfTk8VnNA0pHM3J0wfDpmITw1kicHaM8K+r6mIYm+cbTu0Jme+w
ef4oksjiVDf2avBmPVzvN0d5QJECAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTdk1p0
NS9gI5kcwiOxAZYuiDFP7TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OWMzYmU1NWMtZGUwZi00OTAxLTkzOGUtMjI5YTI5NmZhMzFmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS6JqDAN
BgkqhkiG9w0BAQsFAAOCAQEAgfkNpkwik1fAlS5+Umw765/dVPyCTvfxB7t6eyNG
+LPmt6j0CI6pcmGl3fYgKfXpVk09aSaGGY3Sj6yKY8tn1D++j//tBz9gQuyXK6h9
D3H4huVAlJBy9ds5lT1B2x6G5FkU9u+MQ3xS4weBUegHnYOAeN3yqjZJkVgwaV39
Pg3MhTmOqsS4Yvqi5YCHjiR1EA06uKLtF/Vjzz+OSAaLE0ENiPHjxftNhZxCO39U
wpW16PVkpC+kv1aeRtd+kL+o0EJq5QIUyxAIYZdGHCmQo+UIAVj9HkRezYmXcIxb
LEwmhogtDqJUEs+odn8zFRCFiZSZaKclAVa+OVk5FJzDOA==
-----END CERTIFICATE-----
Generated at Mon Jun 2 16:25:59 2025 by rpki-client