Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa
File: bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa (raw, json)
Hash identifier: sE8TmcUNS0EHzzF3cR7DwAukC8WEKzk7trLYHLY5tA4=
Subject key identifier: FC:3C:91:08:85:1E:57:B1:F4:FD:2B:81:38:05:4E:60:CE:C5:4B:70
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5FBE66E9BE2FF90070FBCC76AE0747D942977185
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa
Signing time: Fri 09 May 2025 16:30:16 +0000
ROA not before: Fri 09 May 2025 16:30:16 +0000
ROA not after: Fri 13 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:be:66:e9:be:2f:f9:00:70:fb:cc:76:ae:07:47:d9:42:97:71:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 9 16:30:16 2025 GMT
Not After : Jun 13 23:59:59 2025 GMT
Subject: serialNumber=5895660fe9aab316bf640ce95d03bedb49eda39273eb13db44d4ea1485499307, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:77:ba:32:a9:5c:d1:63:b1:9c:c5:23:7e:3c:
2e:3c:6c:ca:b4:f7:00:e7:d8:37:94:cc:2a:91:73:
3c:0d:12:51:aa:e2:fb:df:94:4c:5b:06:f7:51:b5:
79:81:94:f1:1b:3b:61:23:f1:d4:42:36:c1:3c:49:
03:50:ad:67:b3:ac:c9:71:ab:ee:59:16:e7:e0:40:
e8:fb:1a:26:fa:5f:c5:32:7c:5e:83:a5:7a:0a:5f:
09:fe:81:75:7c:6f:8f:1f:19:5b:18:59:4a:e6:43:
02:87:55:7d:46:33:6d:2f:65:56:bb:0c:42:56:92:
74:18:bb:e7:52:df:52:75:74:0c:9c:e9:30:d1:85:
51:74:36:d1:eb:a7:dc:f5:e8:3c:70:0b:b9:68:a0:
36:a2:17:37:b2:72:05:ad:41:19:e0:68:c5:6b:d4:
9d:d0:29:5a:f6:bd:53:a7:32:0e:90:66:2f:1b:04:
92:e4:15:a9:8f:27:f5:ef:77:1e:c3:c6:05:3c:b1:
f4:92:6b:af:3a:9f:f9:13:4a:63:5a:04:c9:0b:70:
11:8c:c9:09:6e:bb:34:b3:47:00:4e:27:b4:a1:e1:
c0:98:ee:b8:26:75:20:67:d3:f3:be:77:88:e5:3d:
93:52:17:2c:05:78:90:a4:11:88:f5:75:d6:c4:59:
1a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3C:91:08:85:1E:57:B1:F4:FD:2B:81:38:05:4E:60:CE:C5:4B:70
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.204.0/22
Signature Algorithm: sha256WithRSAEncryption
41:79:a4:db:2f:ff:20:e7:93:d4:ad:a5:00:5c:74:99:89:2e:
93:0b:eb:a0:36:fb:b5:f5:2d:bb:2c:4c:e6:5f:5e:e3:2b:92:
70:51:97:c9:d1:70:9b:15:ae:7c:ac:8e:27:a0:bb:89:e4:83:
10:3a:68:d9:de:a0:c5:71:30:c5:e8:80:66:01:fa:3a:ea:da:
a0:be:ac:73:26:c9:5b:fe:8c:08:96:45:9b:32:12:4c:51:7d:
74:42:48:68:d3:06:4d:4e:3e:83:d5:d5:01:f5:4b:30:6f:e9:
ed:cc:7a:af:d0:d3:e1:b8:0e:0e:d7:d8:0d:0c:b4:40:1f:a1:
64:ee:cc:be:55:2f:52:45:7e:eb:c2:9c:aa:e8:9f:05:5e:57:
da:b0:a9:a5:f8:d7:c5:8c:44:fe:3b:28:c6:13:09:ec:08:e0:
17:62:e1:9b:65:f6:d6:08:5c:62:76:26:cd:32:9c:9d:7e:ba:
eb:66:f9:f4:ec:70:4b:d3:9f:3f:98:f1:9c:ee:20:3c:69:a6:
47:95:e7:80:ec:e5:17:be:5b:d6:d5:37:33:e4:19:0d:41:1d:
ee:94:0c:b8:3c:3c:32:b7:11:df:a0:63:6b:e0:69:bf:7b:a9:
91:42:d3:ae:ce:90:87:02:ef:fd:b7:2d:5f:bd:e3:9d:f5:11:
1b:1b:38:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:26:46 2025 by rpki-client