Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/18d47c03-cff3-4fc4-bd85-07c1063f7047.roa
File: 18d47c03-cff3-4fc4-bd85-07c1063f7047.roa (raw, json)
Hash identifier: Hu4Ca5Xcl+SuDGoDc19fUMZjeiVHuQ4HNLORNOzvVsM=
Subject key identifier: E8:48:9E:A6:B9:B1:16:B8:BC:40:03:7F:DF:D8:01:49:D8:12:31:A5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 41D20C932FF42EDE926D78BF86DEBED186BF3D96
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/18d47c03-cff3-4fc4-bd85-07c1063f7047.roa
Signing time: Tue 03 Jun 2025 16:31:25 +0000
ROA not before: Tue 03 Jun 2025 16:31:25 +0000
ROA not after: Tue 08 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d2:0c:93:2f:f4:2e:de:92:6d:78:bf:86:de:be:d1:86:bf:3d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 3 16:31:25 2025 GMT
Not After : Jul 8 23:59:59 2025 GMT
Subject: serialNumber=396f75aee7a84f105b910579a7034a759ff1576632c9faa41e1f624b251e9ce5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:ae:31:35:43:81:b9:a1:ff:e6:39:60:e6:
7f:7a:16:df:83:c6:4a:7d:53:58:a7:93:20:d1:1a:
1d:3c:29:76:45:f1:88:ab:06:c5:8c:e6:63:e8:aa:
02:a5:f7:d5:1f:67:3e:3a:3f:dc:eb:b6:40:a1:ec:
22:fc:50:01:ea:6b:68:c1:67:b9:a9:25:b8:c4:16:
e9:80:cc:22:a9:0a:1f:49:08:f1:d3:be:d3:f5:ed:
86:e6:dc:e0:15:25:dd:5c:c6:71:08:e1:a3:79:40:
16:09:19:0f:c0:86:ab:66:85:7f:c5:15:0e:9d:f9:
1b:3a:e4:81:55:fb:48:c3:f3:9c:e1:e7:99:6c:b1:
e8:e4:91:18:d8:08:73:ce:9a:5b:34:3a:df:da:43:
01:01:1a:6d:cc:af:56:bf:26:54:b0:65:c4:07:f7:
6a:c0:b0:0a:e3:45:97:e0:99:5a:1d:d6:15:d4:58:
2f:24:a1:35:d8:7b:03:a8:23:ff:4b:5d:f5:98:c6:
54:40:56:c1:a9:4b:60:58:d8:37:66:68:bb:6b:d9:
f2:a1:35:1d:ce:8d:00:72:55:bf:96:79:d8:fe:60:
5a:df:f4:a9:47:36:49:e8:ee:47:07:56:a1:df:f7:
95:48:00:30:74:df:7a:ef:d5:fe:9f:a2:83:79:6c:
32:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:48:9E:A6:B9:B1:16:B8:BC:40:03:7F:DF:D8:01:49:D8:12:31:A5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/18d47c03-cff3-4fc4-bd85-07c1063f7047.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/19
Signature Algorithm: sha256WithRSAEncryption
00:03:99:2e:bf:89:95:3e:1e:bc:e9:25:35:41:19:99:33:be:
1f:75:9b:07:03:e9:74:1f:a7:67:9c:b2:22:7f:63:32:25:d5:
fd:89:17:62:f3:e3:f3:ef:b5:e7:34:0b:04:dd:bd:e3:b5:76:
6f:05:97:76:27:2a:c6:3f:2f:29:d5:83:43:16:94:78:81:7c:
de:16:76:0f:9a:a5:e9:45:ec:e3:1e:fa:6c:cd:97:45:f3:87:
ca:88:ad:bb:47:2d:13:58:5d:51:96:af:44:40:3e:bf:b3:6b:
9b:a5:e5:da:20:d6:67:20:5f:a4:ae:d8:c4:56:5e:65:fa:1b:
01:8b:81:91:58:b4:36:a2:62:b8:8b:6e:21:67:21:ac:83:81:
39:c1:04:61:9d:e8:8e:ca:8a:a3:30:84:0f:ac:d5:ff:de:b3:
8a:06:26:bc:e4:c3:8e:4a:28:1b:1c:29:77:0e:38:5c:6c:3f:
c2:df:c9:ee:74:10:81:aa:e1:bb:21:6c:3f:7e:f0:51:47:c9:
b4:e4:19:64:5a:91:5e:95:5f:a2:61:8c:4a:ef:b5:74:67:1f:
f8:9e:37:17:57:6b:8b:6c:11:67:76:39:f7:b4:ea:03:8e:d4:
72:72:28:8e:a4:fb:1c:46:04:59:89:95:11:53:a3:a8:28:f9:
1e:43:bf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:36:52 2025 by rpki-client