Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad1fa1a4-44d6-4a4e-82c4-f32d315830db.roa
File: ad1fa1a4-44d6-4a4e-82c4-f32d315830db.roa (raw, json)
Hash identifier: +NHtwHLky5qTRe9mKXm6h1Fdl9cbZZ3+eZVIR3UmCaU=
Subject key identifier: E1:88:E5:78:E2:A3:40:30:33:23:FD:22:0F:FD:36:8B:81:7A:5E:34
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7AE27E1DCAD91E5A45765554D95BE6F4628FEAFC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad1fa1a4-44d6-4a4e-82c4-f32d315830db.roa
Signing time: Fri 09 May 2025 16:31:11 +0000
ROA not before: Fri 09 May 2025 16:31:11 +0000
ROA not after: Fri 13 Jun 2025 23:59:59 +0000
asID: 14618
IP address blocks: 46.51.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:e2:7e:1d:ca:d9:1e:5a:45:76:55:54:d9:5b:e6:f4:62:8f:ea:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 9 16:31:11 2025 GMT
Not After : Jun 13 23:59:59 2025 GMT
Subject: serialNumber=07155b640eb9f40ac04a2c47afd92e733cb8920f43741247d77e655ddbae70f0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:17:06:b6:58:be:41:83:25:25:91:82:28:55:
ed:ae:ff:65:30:47:b5:e6:35:01:4c:54:35:6b:fa:
40:e1:11:e7:42:f2:7c:c7:a5:bd:f6:96:5a:27:72:
14:59:6e:60:24:cc:62:81:4d:8c:ee:36:8b:08:e9:
a5:b7:a4:f8:84:ee:0a:c9:af:30:68:6d:29:c6:4c:
dd:36:d4:ba:7f:7b:dc:bc:b4:df:46:f8:29:b3:4d:
c6:2b:71:e0:b9:2c:59:6a:30:0e:2f:fc:9c:34:7d:
ef:9c:e7:20:39:af:5d:1f:b1:6e:da:cf:69:0e:8c:
56:3a:b6:a6:f1:b5:ae:5c:e8:43:db:04:02:05:9d:
60:18:27:8c:aa:db:e2:40:82:47:e3:f1:31:11:47:
55:c5:ae:4f:7e:09:bb:ce:fa:42:91:bc:07:e0:00:
22:77:4e:32:e7:6c:6c:91:da:e5:e4:69:f2:f7:36:
80:c9:9b:e0:95:f7:09:77:37:55:cd:12:36:af:14:
f7:64:6c:fb:24:3b:27:f3:57:26:e3:d8:50:d4:10:
59:09:94:20:da:d6:a3:cf:9a:28:1a:77:8d:4a:e3:
3c:38:d5:cc:d3:7c:8d:39:93:1a:0a:11:80:0d:8d:
e7:7d:2e:f1:31:8f:11:da:7a:0a:61:db:53:7c:4a:
72:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:88:E5:78:E2:A3:40:30:33:23:FD:22:0F:FD:36:8B:81:7A:5E:34
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad1fa1a4-44d6-4a4e-82c4-f32d315830db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.208.0/22
Signature Algorithm: sha256WithRSAEncryption
05:ef:68:87:94:4f:54:be:af:6b:66:9a:d7:39:25:d2:f7:51:
a1:64:ea:b2:4b:eb:8c:91:78:d7:fc:0a:e9:29:5e:34:24:9c:
24:56:69:81:1c:6e:75:b0:44:91:8c:6f:60:1c:d2:8f:92:c8:
ce:bc:a5:ef:42:72:48:6b:35:50:af:db:be:21:2f:69:a2:94:
8b:5c:5a:24:84:6c:c6:5d:23:d9:75:6d:3c:9c:44:95:89:89:
01:63:1b:c8:d6:cc:95:fc:04:00:a4:00:9b:10:f2:09:ea:2f:
6d:c6:51:60:38:31:ae:82:62:94:02:4c:7d:73:86:48:78:33:
1d:43:26:f3:b0:52:c4:61:2d:dc:91:63:0d:49:04:f4:e5:5f:
19:2b:ae:95:2b:ca:38:c5:34:5d:52:d0:e9:b7:f7:9b:13:7a:
8f:6c:68:4e:14:1a:da:07:f3:81:4b:9d:8d:66:9d:01:8c:2a:
6e:0a:98:91:55:c5:80:1d:83:a5:a2:b9:46:d8:a6:44:2c:6a:
2f:fe:b7:44:1b:66:b2:b1:66:ae:59:b6:bc:c7:e6:13:a3:f3:
e4:48:27:ba:b1:10:9a:99:0f:ea:62:a6:94:b4:81:41:ce:d3:
9e:aa:81:6d:68:f6:71:39:0d:43:68:9f:3a:3a:69:ae:1c:16:
23:3c:e0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:27:00 2025 by rpki-client