Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcee65ca-9c67-4925-b46f-60ec2eecb7a3.roa
File: fcee65ca-9c67-4925-b46f-60ec2eecb7a3.roa (raw, json)
Hash identifier: GDAnzTnwcLkMdHjrqTUGNzbjcIEjSN4sjrtInvqwSls=
Subject key identifier: 14:8D:68:18:60:21:67:69:66:D6:69:55:4B:7F:D3:50:5F:E9:71:15
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 64721C3C605380DEDA57EBA370527DEABA59CE5B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcee65ca-9c67-4925-b46f-60ec2eecb7a3.roa
Signing time: Fri 09 May 2025 16:31:04 +0000
ROA not before: Fri 09 May 2025 16:31:04 +0000
ROA not after: Fri 13 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:72:1c:3c:60:53:80:de:da:57:eb:a3:70:52:7d:ea:ba:59:ce:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 9 16:31:04 2025 GMT
Not After : Jun 13 23:59:59 2025 GMT
Subject: serialNumber=35d9f2bba8c3f393e4e35ce3b8c793edf36836143186856a78c3667862354342, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a4:cc:ba:03:88:ac:e1:45:a0:a8:8f:43:c0:
d6:ec:4f:2b:03:e1:cd:bc:16:95:61:7f:a8:1e:77:
73:d6:0b:97:9c:e2:78:c1:c6:99:33:f1:d2:b8:ca:
c8:a5:7c:a0:43:9f:aa:74:e9:b0:ee:27:0d:ca:82:
82:3e:a0:1b:5b:9b:24:5e:32:81:df:83:bc:6a:cc:
56:2b:21:98:53:df:08:30:fd:38:2b:42:ef:ea:45:
ad:99:41:55:5b:20:1d:7f:d5:0b:e4:31:a7:0d:4b:
5f:ae:db:5f:3c:f0:9f:b6:b8:15:a0:b1:50:59:f6:
5f:ad:8d:98:30:dd:0e:95:bb:5e:56:06:b2:d8:87:
45:16:77:b8:0f:b5:33:8b:45:55:78:5c:19:95:bd:
3a:0c:a0:ec:fb:94:55:15:38:b8:0f:85:b9:08:9e:
1a:f2:8f:0e:b5:50:29:d1:02:95:34:be:fa:24:7d:
58:1b:60:b2:9b:cb:ee:46:96:ce:2e:f4:f1:37:ea:
eb:b1:78:9a:9d:75:ae:d6:be:6c:b5:0e:e5:3b:bb:
34:65:f4:59:70:87:6d:54:2e:50:7a:63:0f:a8:27:
d7:ad:bd:28:82:e1:8c:40:94:86:73:84:8e:c5:88:
4d:60:90:9b:61:72:9e:7f:1d:f0:95:d3:57:46:96:
0e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8D:68:18:60:21:67:69:66:D6:69:55:4B:7F:D3:50:5F:E9:71:15
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcee65ca-9c67-4925-b46f-60ec2eecb7a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.128.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:a2:cd:70:c5:b6:db:bb:9d:4b:1b:20:10:db:9d:87:c0:70:
15:13:ea:13:42:7f:e2:3f:0a:4b:31:74:64:07:bd:c1:26:09:
f8:4a:a8:62:76:ee:8e:ea:b6:d2:d6:96:f4:97:df:2a:40:78:
66:73:a2:0f:d6:d6:a5:f5:84:cd:4c:41:16:dc:b2:a5:4c:4b:
0d:15:2a:f2:d6:cd:4e:ea:81:7a:63:9e:d7:c2:8b:18:23:dd:
70:ea:9d:32:f4:96:8e:1c:06:c0:9c:4b:90:29:26:09:52:0c:
4d:b9:72:23:5b:48:e1:00:ce:75:ad:c0:57:f0:a2:1b:c7:67:
bc:3d:55:7e:5d:c5:80:2f:37:32:a0:31:d0:c6:e5:76:74:9c:
ef:fa:aa:29:e8:64:97:d6:1f:95:d2:0c:66:2d:dd:54:e8:b7:
fc:8a:80:a9:db:8b:a9:1d:60:71:cb:75:ed:25:f2:cd:7f:ee:
98:26:66:3f:a7:dc:c0:c3:3c:de:ac:6c:3b:0f:c7:05:96:59:
8c:96:69:28:24:f5:81:5d:f9:df:15:75:1f:e4:72:8b:6d:4c:
76:b6:34:6b:c8:e8:d4:16:cf:5b:e6:ad:17:ef:95:47:72:18:
26:aa:64:c3:24:7b:cc:24:7c:e0:e3:fa:41:27:0f:41:fe:bb:
b3:da:d2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:25:12 2025 by rpki-client