Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa
File: df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa (raw, json)
Hash identifier: fmDdGkZzWaM9LNMUqIQ14m124Zo6IS4wwQ3xlwj8jEY=
Subject key identifier: 36:41:B9:3A:F4:F7:18:33:45:DE:2E:83:23:45:02:A3:F3:2B:8C:6E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3E174F2EAA2A8687205D15167C4A852EA4E45222
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa
Signing time: Fri 09 May 2025 16:30:13 +0000
ROA not before: Fri 09 May 2025 16:30:13 +0000
ROA not after: Fri 13 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:17:4f:2e:aa:2a:86:87:20:5d:15:16:7c:4a:85:2e:a4:e4:52:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 9 16:30:13 2025 GMT
Not After : Jun 13 23:59:59 2025 GMT
Subject: serialNumber=a48643404595547cba9441629848689e4de5f6036740c09ae6f5fd70e8e17c49, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1d:85:ec:46:62:75:dc:53:ce:04:42:70:ec:
bb:b3:e5:9d:41:1b:ab:8e:03:e2:cd:24:9d:77:6e:
d1:98:94:95:95:c4:6f:3d:54:3a:7b:a0:c9:e1:b6:
aa:34:d9:02:3b:91:40:81:5a:54:e8:76:4f:83:72:
a9:a2:aa:d7:46:c9:8b:d5:f8:e3:9d:c6:15:3e:08:
32:48:72:7b:0a:d5:bf:87:6c:c3:9b:14:d5:ea:9d:
4a:f1:62:53:cb:03:31:c1:9b:13:5f:0d:fd:0b:4b:
07:80:40:16:c6:47:4a:f3:0a:5a:b7:db:e7:6f:df:
b6:9f:3e:c4:2e:1e:4c:57:0f:de:e2:f9:96:d8:53:
52:e3:4f:b4:69:55:bb:06:1b:6b:ef:bc:6c:e1:fa:
0f:33:08:61:55:fd:a2:8d:d7:1d:36:6a:0a:9b:4e:
30:b1:97:85:68:66:7a:b1:c4:f6:31:23:5d:54:d0:
49:ce:6e:92:65:2e:fe:4d:6b:06:30:4a:8f:47:18:
0b:eb:4a:e1:5d:ab:58:ad:9f:a9:05:79:71:ee:a3:
61:59:e3:07:94:8c:95:cd:25:c3:62:2a:cf:9f:ea:
ef:88:88:ea:4c:bf:3d:b0:45:4f:1c:42:c5:66:a6:
6d:22:6c:7e:b2:36:f4:fa:d1:4c:72:1f:54:24:7a:
b1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:41:B9:3A:F4:F7:18:33:45:DE:2E:83:23:45:02:A3:F3:2B:8C:6E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.200.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:c0:85:c9:c9:87:fa:59:e2:6f:06:86:31:5e:63:13:d6:ae:
30:b5:71:40:15:ff:eb:6e:4c:6e:17:86:f3:93:5f:83:94:03:
15:65:b3:4c:ab:99:a0:1a:b0:59:29:f7:61:23:eb:ff:33:7a:
b6:ec:7a:c5:26:15:65:15:b9:a3:78:0b:a1:87:64:22:47:98:
70:dd:3e:b0:cc:a3:06:3b:ba:77:f7:d3:b7:23:c5:60:1a:ae:
46:e6:ed:84:aa:31:98:e9:10:57:5b:89:c0:c6:55:73:c6:b3:
aa:6e:88:38:a8:9a:99:6c:d2:55:df:24:64:0a:cf:44:76:29:
2d:61:3c:fd:b4:d9:d8:45:21:8f:c8:47:32:40:97:39:58:f6:
29:d0:8f:71:65:3a:3a:9a:7f:63:75:d5:7d:1c:64:9c:fb:04:
70:17:d9:47:0f:4f:ab:b9:65:96:33:44:af:12:f2:e1:c8:64:
e8:c1:cc:c8:93:b6:20:44:a9:62:37:5f:32:9f:84:45:5a:b3:
5d:ae:f5:0c:92:b5:06:e7:ab:c9:6f:7b:3e:d5:de:e7:5e:cb:
46:05:03:c3:c9:d1:d5:70:11:8f:4e:bc:60:40:13:c0:80:65:
11:0d:fe:a8:c8:50:de:51:ed:59:eb:40:a1:ed:d2:59:b9:62:
d2:9a:a8:78
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUPhdPLqoqhocgXRUWfEqFLqTkUiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MDkxNjMwMTNaFw0yNTA2MTMyMzU5NTlaMHoxSTBHBgNV
BAUTQGE0ODY0MzQwNDU5NTU0N2NiYTk0NDE2Mjk4NDg2ODllNGRlNWY2MDM2NzQw
YzA5YWU2ZjVmZDcwZThlMTdjNDkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALYdhexGYnXcU84EQnDsu7PlnUEbq44D4s0knXdu0ZiUlZXEbz1UOnugyeG2
qjTZAjuRQIFaVOh2T4NyqaKq10bJi9X4453GFT4IMkhyewrVv4dsw5sU1eqdSvFi
U8sDMcGbE18N/QtLB4BAFsZHSvMKWrfb52/ftp8+xC4eTFcP3uL5lthTUuNPtGlV
uwYba++8bOH6DzMIYVX9oo3XHTZqCptOMLGXhWhmerHE9jEjXVTQSc5ukmUu/k1r
BjBKj0cYC+tK4V2rWK2fqQV5ce6jYVnjB5SMlc0lw2Iqz5/q74iI6ky/PbBFTxxC
xWambSJsfrI29PrRTHIfVCR6sdMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQ2Qbk6
9PcYM0XeLoMjRQKj8yuMbjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZGY3NDBlMmYtOGNlNS00YjFiLWE5NWUtNjA0ODdkOTM4OGE2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi6JyDAN
BgkqhkiG9w0BAQsFAAOCAQEAO8CFycmH+lnibwaGMV5jE9auMLVxQBX/625MbheG
85Nfg5QDFWWzTKuZoBqwWSn3YSPr/zN6tux6xSYVZRW5o3gLoYdkIkeYcN0+sMyj
Bju6d/fTtyPFYBquRubthKoxmOkQV1uJwMZVc8azqm6IOKiamWzSVd8kZArPRHYp
LWE8/bTZ2EUhj8hHMkCXOVj2KdCPcWU6Opp/Y3XVfRxknPsEcBfZRw9Pq7llljNE
rxLy4chk6MHMyJO2IESpYjdfMp+ERVqzXa71DJK1BueryW97PtXe517LRgUDw8nR
1XARj068YEATwIBlEQ3+qMhQ3lHtWetAoe3SWbli0pqoeA==
-----END CERTIFICATE-----
Generated at Mon Jun 2 16:25:56 2025 by rpki-client