Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b1697edb-eb6c-486d-a5cc-c22724b14f96.roa
File: b1697edb-eb6c-486d-a5cc-c22724b14f96.roa (raw, json)
Hash identifier: UgriYVHB0BIe//CqqpEAU6Yd6sOI5auDiC3NTTwNqzI=
Subject key identifier: B8:5F:A3:6C:4C:BA:14:D0:BC:15:57:26:BE:A3:06:23:27:7D:C8:A2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3D68E74537148F93929576DFE84219B279FAC7C9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b1697edb-eb6c-486d-a5cc-c22724b14f96.roa
Signing time: Fri 09 May 2025 16:30:04 +0000
ROA not before: Fri 09 May 2025 16:30:04 +0000
ROA not after: Fri 13 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:68:e7:45:37:14:8f:93:92:95:76:df:e8:42:19:b2:79:fa:c7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 9 16:30:04 2025 GMT
Not After : Jun 13 23:59:59 2025 GMT
Subject: serialNumber=fd1f058fe541bfae1ba75111d1cf3b74a92500c2635c1221fc5038f6dd2f4e36, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:a6:c0:0c:a6:10:74:21:85:cc:51:bf:fd:
05:2b:0c:64:78:4e:2b:02:23:36:c0:4b:63:ec:82:
f6:89:23:8c:60:40:ba:9b:89:0c:3e:ef:91:8c:1d:
e8:d8:65:bd:6b:5f:2c:f6:f9:de:32:6f:38:5a:97:
56:a3:71:99:88:d8:61:c0:83:ee:65:05:3f:e3:22:
5f:dc:88:b1:5d:e7:0a:e0:ba:bc:91:1e:c3:c7:18:
00:32:5a:a1:17:d9:e3:a4:36:bd:cb:bf:6a:d9:b5:
2f:7a:13:d4:ef:91:4e:a0:45:f2:0e:b5:c7:f5:91:
c5:d3:7c:d6:f1:88:14:8b:29:cf:c0:c9:db:cb:13:
44:b1:8c:12:34:8b:a0:60:a5:3c:60:da:37:cf:00:
01:61:3d:9a:44:c0:e5:5d:d5:4b:01:de:40:2a:8b:
4e:9a:63:13:f2:93:48:df:3e:de:19:79:d4:42:30:
cb:50:5f:c3:4b:b7:39:a7:a4:06:9a:85:78:ab:e5:
f0:bf:d6:6b:2e:65:f4:2f:4d:99:30:cc:1e:15:d6:
71:c2:e9:c9:fa:52:e8:25:e9:2d:85:9d:4c:db:11:
7d:3d:f1:0b:5b:40:c3:34:4a:18:b1:58:75:b3:99:
5f:56:f2:66:b7:68:e0:23:dc:a9:dd:97:68:6f:ed:
d0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5F:A3:6C:4C:BA:14:D0:BC:15:57:26:BE:A3:06:23:27:7D:C8:A2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b1697edb-eb6c-486d-a5cc-c22724b14f96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.170.0/24
Signature Algorithm: sha256WithRSAEncryption
77:79:e9:d0:2e:41:7b:f3:2f:08:cb:3d:d7:d2:36:d0:4c:d3:
b0:6b:db:0b:28:f6:c0:0c:10:07:dd:c1:31:58:a7:79:17:1c:
bd:ba:bb:d2:04:ff:4c:73:fa:59:c0:d9:e8:ce:b3:50:bf:af:
e1:2d:07:bc:7e:6a:50:ef:0c:ef:26:35:d3:d3:f8:ae:f4:6f:
a1:be:bf:69:c2:0d:9e:05:10:23:44:b1:d7:10:92:8d:ba:c9:
a8:fa:3b:ae:98:b8:e1:a3:77:15:96:ca:41:c5:e9:b0:e3:a6:
b4:fd:d2:04:55:2c:43:f4:73:75:83:d8:0d:85:80:48:b2:92:
62:7b:93:9f:e9:a9:22:50:13:51:7c:d8:bf:48:06:0c:39:dc:
ca:33:61:49:ba:06:c1:1e:e9:3d:7a:8b:7e:4b:b7:36:cb:74:
f6:44:85:9b:12:b8:98:ce:18:14:90:55:92:e2:40:dd:f1:6c:
e4:2f:43:9d:5e:af:41:a8:07:a0:38:76:e4:11:9d:80:89:14:
05:0f:f1:3c:7a:95:1c:9a:8f:f2:06:08:fb:d1:77:d3:d3:95:
7a:aa:99:c9:04:e3:77:d7:19:7d:93:73:ab:2c:03:b7:35:1c:
74:c1:fe:21:4c:2d:5b:a2:7c:f6:d3:55:ee:7f:f5:13:18:d8:
14:4f:dc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:25:27 2025 by rpki-client