Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb73d62f-513c-4673-8547-902e7fa2148b.roa
File: bb73d62f-513c-4673-8547-902e7fa2148b.roa (raw, json)
Hash identifier: tN5cVaaNFFkUl07RvtcEoVtsByAO2S8TF/5wDqpmBAw=
Subject key identifier: E5:7B:48:65:BF:CC:62:4E:CF:61:38:0B:F8:15:CC:8B:94:C6:35:14
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 30E11FDF3C22A0E0CA41A4DB32CE660B22968B74
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb73d62f-513c-4673-8547-902e7fa2148b.roa
Signing time: Fri 09 May 2025 16:31:02 +0000
ROA not before: Fri 09 May 2025 16:31:02 +0000
ROA not after: Fri 13 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e1:1f:df:3c:22:a0:e0:ca:41:a4:db:32:ce:66:0b:22:96:8b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 9 16:31:02 2025 GMT
Not After : Jun 13 23:59:59 2025 GMT
Subject: serialNumber=fdb6eeb4ce441417777a8a62be63fdcb79d403941b1ae0b5e08bc1ac01cbe100, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:2d:8f:24:94:3d:45:04:84:53:57:c7:01:
33:a4:e3:8e:9a:5f:53:c3:c3:d0:93:d0:aa:da:ae:
08:38:ab:dc:b9:27:f6:51:1c:48:c6:d7:f9:65:b8:
f1:40:f5:9b:1b:4c:fd:a5:a9:d8:ed:96:c6:2f:2c:
72:0b:35:a1:7c:e9:b2:ab:aa:92:1b:ed:bc:59:b6:
be:5b:7f:8e:18:ed:3b:d1:8a:6e:d4:cc:cc:78:87:
34:47:40:6f:b1:3e:d5:a1:a3:d0:71:f2:67:09:8b:
c5:a0:12:2c:fe:41:86:9d:96:b3:80:16:ec:36:e9:
34:97:1e:d7:31:12:18:c7:74:9a:52:20:42:c4:fa:
80:a5:6e:6d:34:f5:1d:28:1f:8a:e5:7b:c0:5e:e2:
64:5e:7f:d6:a3:7c:57:7f:5a:6c:18:6b:51:53:6a:
4c:5e:30:d8:ed:85:1f:22:dd:a8:bc:94:cf:93:56:
d6:0b:6b:cd:8d:8f:94:6a:20:66:bf:af:46:d6:74:
4a:75:b5:a2:46:f0:5e:9c:a4:b3:13:1d:29:0e:f4:
3c:69:23:a2:e3:31:4d:11:48:a8:c6:18:78:33:32:
9c:01:95:1b:72:4f:6d:cd:96:ed:f6:4a:98:f8:a6:
dd:77:53:2a:41:11:7f:89:14:9c:a6:38:ca:3f:10:
13:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7B:48:65:BF:CC:62:4E:CF:61:38:0B:F8:15:CC:8B:94:C6:35:14
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb73d62f-513c-4673-8547-902e7fa2148b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.0.0/17
Signature Algorithm: sha256WithRSAEncryption
9f:2e:0c:d3:ac:fe:bb:82:88:41:8a:c3:c3:ad:ca:db:8a:88:
58:89:da:5f:1b:14:e7:5a:2c:e1:ca:ef:28:56:96:03:35:e3:
7a:58:f3:88:71:b8:d9:ba:4d:94:87:a0:09:48:8e:9d:41:83:
b9:77:41:77:25:f9:27:dd:44:a5:cd:48:81:0e:76:5e:71:11:
17:84:7b:d7:94:9d:cd:28:9b:a5:7a:99:95:a2:d9:7c:31:c5:
6a:03:4d:5a:f7:51:cc:cf:27:31:ce:e1:d5:e8:57:14:1e:02:
bc:15:63:89:92:cd:81:c0:7f:12:d8:be:ed:b4:5b:c6:49:12:
66:e8:44:47:da:56:c3:31:46:ea:90:63:7f:28:13:a3:fd:cf:
61:b0:c1:6d:14:2d:25:2b:6d:44:93:75:08:b1:96:7e:56:a7:
52:d0:1b:7d:28:2d:87:1c:90:a3:5c:c3:cb:89:05:55:ba:6e:
f2:3f:f1:15:90:c8:1f:82:58:7a:5f:b0:97:d7:d4:ae:53:89:
3c:67:18:56:c7:75:15:0e:f1:e0:9a:5e:59:4c:63:3f:66:12:
19:fd:93:b2:3a:7f:42:93:8b:eb:4b:3a:f2:8a:a6:50:d0:c2:
34:1a:ed:38:2b:88:5d:f7:4f:fd:7e:31:e7:ef:32:a4:c9:c6:
58:60:df:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:26:57 2025 by rpki-client