Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/18d47c03-cff3-4fc4-bd85-07c1063f7047.roa
File: 18d47c03-cff3-4fc4-bd85-07c1063f7047.roa (raw, json)
Hash identifier: dTu/qtZiYRAuvdlbpDo+zlnSItAKGiq7P5FSG/4H3Kw=
Subject key identifier: 9D:F5:D7:85:A6:E8:48:D0:84:C8:FF:1C:93:AC:BC:D3:82:55:FC:9A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7FA566D03A637CDE2C13053B925F75D7D8F66E24
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/18d47c03-cff3-4fc4-bd85-07c1063f7047.roa
Signing time: Mon 14 Apr 2025 17:30:36 +0000
ROA not before: Mon 14 Apr 2025 17:30:36 +0000
ROA not after: Mon 19 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:a5:66:d0:3a:63:7c:de:2c:13:05:3b:92:5f:75:d7:d8:f6:6e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 14 17:30:36 2025 GMT
Not After : May 19 23:59:59 2025 GMT
Subject: serialNumber=af72f990536de7c59fa5d35f93d7dcd027736c5ddae53b22a593d91acbcf6c33, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:d1:93:da:7a:03:8a:c5:da:3a:f1:7e:79:
67:5d:39:e4:7b:53:2b:c8:29:56:c6:a9:5d:78:96:
df:ed:6b:ea:1b:19:d0:ea:4d:18:99:e2:78:19:af:
28:5f:b1:7c:b4:23:2e:a8:96:e5:8a:b2:f8:dd:66:
df:21:ed:d5:7b:5b:a7:c5:3f:e3:6e:9f:e3:11:04:
e2:14:74:67:5c:57:b5:f5:59:ef:c5:9c:bb:74:5a:
de:e9:47:02:62:c6:43:26:b8:ca:6f:58:f1:ea:cc:
09:71:83:d2:af:6f:a6:b7:1f:2b:47:bb:13:32:64:
aa:8a:b6:09:00:55:6d:53:f5:c4:7b:3f:70:d5:05:
95:34:61:b7:6b:71:e7:05:16:cd:92:93:18:03:e4:
3f:9d:f0:af:77:64:7a:46:e2:2b:26:39:1d:a8:95:
07:c6:20:44:97:e1:64:94:ea:65:59:68:e8:9d:e4:
f3:9b:da:a5:77:f7:d5:b3:e3:47:ce:d5:22:7d:57:
63:fd:ea:7d:11:63:72:16:2b:b5:21:4b:49:c7:37:
54:3a:1b:17:e0:10:14:43:93:23:58:25:b2:4b:19:
91:f9:9d:f2:18:c1:d8:1a:1f:b0:0a:bc:d2:67:2a:
de:c5:7c:36:d9:99:6a:fb:65:74:ec:28:02:80:ae:
a0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F5:D7:85:A6:E8:48:D0:84:C8:FF:1C:93:AC:BC:D3:82:55:FC:9A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/18d47c03-cff3-4fc4-bd85-07c1063f7047.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/19
Signature Algorithm: sha256WithRSAEncryption
0e:fc:5b:c0:1e:17:96:15:19:9b:b6:99:fd:1a:26:52:9d:25:
96:e2:82:d0:83:22:bf:d0:a3:00:b1:46:18:4f:fe:af:ab:93:
1e:49:81:94:3a:ce:22:15:63:55:69:52:af:33:4a:1e:02:95:
d8:b5:bc:89:64:be:58:0c:7a:09:36:ee:80:29:46:b0:b0:1c:
7b:1f:11:f1:51:82:b0:40:bd:1a:81:51:37:de:77:1d:70:54:
5f:e8:39:22:2b:ac:99:54:81:6c:e1:2b:84:01:ca:c3:7a:98:
a5:42:3f:2e:f4:c4:94:a7:d2:e2:c7:33:ed:e8:e5:5b:b8:57:
16:b3:f4:08:83:7e:01:e5:1f:94:7b:fa:11:cf:98:63:4e:07:
07:6d:6b:7d:c6:78:43:59:d0:f1:a9:22:bf:07:b2:0c:e7:60:
61:da:54:d5:39:83:13:5e:f7:a9:4f:08:d2:e1:11:3b:6e:d9:
3e:23:ff:7f:93:dc:53:b8:a3:39:a5:76:40:c1:4a:3b:40:ad:
de:7d:27:c4:38:98:88:22:53:74:64:49:34:74:1e:ef:6c:12:
66:cf:38:6f:1f:e7:ae:3d:b2:88:6e:3d:0a:d8:e4:d0:6a:8d:
58:bc:0d:e4:60:f6:8c:2a:fb:fe:85:d9:0a:ab:99:fe:6e:62:
c8:a4:13:4f
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUf6Vm0DpjfN4sEwU7kl9119j2biQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MTQxNzMwMzZaFw0yNTA1MTkyMzU5NTlaMHoxSTBHBgNV
BAUTQGFmNzJmOTkwNTM2ZGU3YzU5ZmE1ZDM1ZjkzZDdkY2QwMjc3MzZjNWRkYWU1
M2IyMmE1OTNkOTFhY2JjZjZjMzMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMWw0ZPaegOKxdo68X55Z1055HtTK8gpVsapXXiW3+1r6hsZ0OpNGJnieBmv
KF+xfLQjLqiW5Yqy+N1m3yHt1Xtbp8U/426f4xEE4hR0Z1xXtfVZ78Wcu3Ra3ulH
AmLGQya4ym9Y8erMCXGD0q9vprcfK0e7EzJkqoq2CQBVbVP1xHs/cNUFlTRht2tx
5wUWzZKTGAPkP53wr3dkekbiKyY5HaiVB8YgRJfhZJTqZVlo6J3k85vapXf31bPj
R87VIn1XY/3qfRFjchYrtSFLScc3VDobF+AQFEOTI1glsksZkfmd8hjB2BofsAq8
0mcq3sV8NtmZavtldOwoAoCuoD0CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSd9deF
puhI0ITI/xyTrLzTglX8mjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MThkNDdjMDMtY2ZmMy00ZmM0LWJkODUtMDdjMTA2M2Y3MDQ3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBS4zgDAN
BgkqhkiG9w0BAQsFAAOCAQEADvxbwB4XlhUZm7aZ/RomUp0lluKC0IMiv9CjALFG
GE/+r6uTHkmBlDrOIhVjVWlSrzNKHgKV2LW8iWS+WAx6CTbugClGsLAcex8R8VGC
sEC9GoFRN953HXBUX+g5IiusmVSBbOErhAHKw3qYpUI/LvTElKfS4scz7ejlW7hX
FrP0CIN+AeUflHv6Ec+YY04HB21rfcZ4Q1nQ8akivweyDOdgYdpU1TmDE173qU8I
0uERO27ZPiP/f5PcU7ijOaV2QMFKO0Ct3n0nxDiYiCJTdGRJNHQe72wSZs84bx/n
rj2yiG49Ctjk0GqNWLwN5GD2jCr7/oXZCquZ/m5iyKQTTw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:50:19 2025 by rpki-client