Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa
File: e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa (raw, json)
Hash identifier: PU9EZAra2nD5zqagFQd0OAFtXbOGp8NH0U/to91oi0Q=
Subject key identifier: 8B:16:80:96:14:8E:35:78:3A:60:96:8F:7D:5E:14:80:11:3F:F5:CA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 40C341D3A330E706D55220AEF3A910835E9BB903
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa
Signing time: Fri 09 May 2025 16:30:18 +0000
ROA not before: Fri 09 May 2025 16:30:18 +0000
ROA not after: Fri 13 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c3:41:d3:a3:30:e7:06:d5:52:20:ae:f3:a9:10:83:5e:9b:b9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 9 16:30:18 2025 GMT
Not After : Jun 13 23:59:59 2025 GMT
Subject: serialNumber=e90750d1b84c363765e3145f32fbd55c10a3648469b8ce8b74424406f9700a74, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fd:d4:75:ad:84:48:e3:48:ed:46:09:fe:d3:
12:30:9d:9d:c6:3d:47:e4:26:94:b4:0f:d9:45:20:
54:46:90:47:97:1f:11:d0:57:dc:64:64:9f:e8:d6:
f3:cb:a9:a2:18:87:b9:7a:f8:5b:f1:a6:43:80:bd:
6e:56:dd:ed:82:06:0d:f2:98:d0:44:7a:9b:39:93:
ca:68:94:d8:4d:77:05:42:62:53:08:b2:45:6b:e6:
13:98:7c:9a:84:ea:af:7e:03:82:fa:0a:86:2b:af:
ac:6e:e6:60:a6:f5:3a:37:06:d9:ee:23:a2:65:a7:
94:39:0f:4d:39:b3:02:3a:10:57:73:a0:e8:96:c9:
3f:89:63:63:36:8e:34:66:1a:f0:b2:db:1e:1f:27:
b3:fb:9e:cc:e9:6d:f6:be:5b:2a:45:52:be:d3:54:
59:ef:57:fb:bf:5e:e2:3f:a6:c0:c8:8e:1c:9b:54:
dd:74:be:99:15:19:96:0e:b2:92:b9:12:9f:e5:be:
b7:f4:3e:36:3e:0e:69:42:f0:86:e8:5a:3f:27:c3:
c1:57:e8:69:a6:a8:38:c8:1b:7b:7c:e9:06:e8:a3:
f7:46:b9:ff:3d:65:fa:38:c0:7c:54:26:15:45:c3:
81:a3:a2:84:67:96:aa:de:f7:3a:6f:b0:28:86:79:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:16:80:96:14:8E:35:78:3A:60:96:8F:7D:5E:14:80:11:3F:F5:CA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.160.0/21
Signature Algorithm: sha256WithRSAEncryption
40:0f:ad:06:2d:a5:d6:28:94:28:5b:90:9a:28:76:5b:be:9c:
14:af:a8:82:f2:09:eb:33:de:25:7d:00:c6:fb:f5:be:d3:e6:
7d:71:ce:e5:f9:82:87:1c:c1:4f:7c:db:ee:d8:38:c1:ed:6c:
60:a9:8f:e6:92:3b:3b:7f:c2:ac:31:c8:8c:db:05:66:22:87:
04:4e:53:aa:41:af:14:8a:b9:26:b1:1d:f4:fb:b4:b1:2e:fd:
0f:e2:9a:af:48:c9:be:67:fb:23:42:9f:91:f2:e4:9f:f4:96:
52:cf:3c:4c:91:9f:67:0b:fa:79:1a:96:0b:49:f0:dd:5b:56:
b2:17:59:45:e7:5c:23:07:35:ca:c2:53:13:bb:46:9e:6f:ac:
c5:de:c6:f8:04:7b:67:0c:e5:8f:fa:29:bf:f9:52:de:5e:2d:
84:d0:38:bf:c9:66:a6:31:ed:0f:4a:6b:8f:56:94:03:da:78:
79:f9:c8:dd:ad:a8:49:a5:c1:c5:3b:ba:57:2c:d0:4d:30:72:
df:ab:4c:fb:3d:4a:16:6d:4a:f5:f0:2d:3f:4e:f9:0d:24:4f:
81:22:50:9a:e9:12:3e:d0:27:38:c6:d0:a2:47:cc:a0:cb:95:
a2:97:9b:66:e8:37:c1:5d:32:03:d3:b3:90:2a:40:eb:13:1a:
3c:2a:68:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:26:40 2025 by rpki-client