Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19bd833c-9eac-4b19-b264-a191d9c1b939.roa
File: 19bd833c-9eac-4b19-b264-a191d9c1b939.roa (raw, json)
Hash identifier: AGSJGCzNC/T7og5RGOnUXkv3vK5Jio0hHXUv5W40u8s=
Subject key identifier: FC:75:66:3B:85:9A:CE:77:9F:25:C9:93:15:18:5D:AF:C8:94:02:ED
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7CE66B2F5EFC6AA0D12E7A23B57D1B1489EC5DA9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19bd833c-9eac-4b19-b264-a191d9c1b939.roa
Signing time: Tue 03 Jun 2025 16:31:08 +0000
ROA not before: Tue 03 Jun 2025 16:31:08 +0000
ROA not after: Tue 08 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:e6:6b:2f:5e:fc:6a:a0:d1:2e:7a:23:b5:7d:1b:14:89:ec:5d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 3 16:31:08 2025 GMT
Not After : Jul 8 23:59:59 2025 GMT
Subject: serialNumber=02a4669955836e19c34958c7a49dac3d1d14c0ed6710dfdd1ed5981805fffbf1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b4:e8:20:5a:a3:c1:e1:2b:6a:b5:06:74:0f:
24:85:09:b5:50:d2:5b:eb:92:11:e9:3b:a0:07:8e:
13:84:27:07:f2:69:b8:11:1a:2c:07:ff:44:f7:b9:
41:fc:35:fe:31:82:0a:72:6c:55:fd:f1:43:e9:07:
20:55:79:df:bf:66:79:73:0d:eb:da:dd:12:53:26:
b0:2c:fc:3a:16:8b:97:2d:96:b0:c9:4c:b9:31:76:
c6:4b:19:a8:26:5c:8e:7e:21:bc:f5:18:7c:d8:84:
42:83:9a:db:cc:62:05:ca:74:61:fa:c5:15:c1:e1:
c4:0b:9a:05:8c:fa:5a:44:b5:b3:62:1e:ad:36:f2:
48:d5:d6:24:f4:9b:22:c3:85:bb:b6:0b:34:ba:81:
87:a2:f4:c5:de:df:0b:b8:cf:74:2a:38:10:cc:b7:
03:c3:d8:00:49:5b:6b:80:89:b6:14:f2:63:c1:21:
9d:80:14:51:9e:0f:95:6d:ff:1d:73:28:5c:de:c8:
96:31:5c:bd:17:36:89:c0:65:c4:8a:cf:13:ac:f2:
09:e0:9b:32:a1:43:a8:85:f4:70:cc:cf:a4:c9:70:
57:25:75:87:48:b5:9a:b1:95:8a:6e:ce:e9:3d:25:
0a:12:94:ed:f8:9a:6b:fb:e2:fb:5c:f1:29:90:87:
3e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:75:66:3B:85:9A:CE:77:9F:25:C9:93:15:18:5D:AF:C8:94:02:ED
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19bd833c-9eac-4b19-b264-a191d9c1b939.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.216.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:74:6a:51:c2:e4:b6:bc:32:b3:a2:81:45:6e:12:4e:cc:6c:
7c:37:64:ec:ce:af:3f:f4:41:85:b4:28:8e:bd:14:fb:bf:04:
77:a5:e9:16:60:d6:05:fe:e7:78:bf:56:b3:38:b9:5b:6b:ac:
f3:f8:d1:6e:d9:db:d5:81:11:fc:dc:95:ba:d5:ef:46:c7:13:
8b:14:81:05:9c:27:f9:05:a3:b6:6e:db:3c:db:36:dd:41:b2:
f3:da:11:8a:8a:74:e1:da:52:86:d6:7f:7f:ed:80:e4:d8:0a:
71:c8:4e:92:74:58:5a:d4:f1:82:70:ff:15:b3:df:a6:fd:a1:
b7:3e:b5:4a:4b:f4:af:87:7f:45:fb:50:d2:2c:41:38:f1:5d:
3e:6c:34:3c:cf:dd:96:f6:d6:ab:bb:03:40:0c:60:36:d5:0c:
27:42:ab:8a:5f:bd:e2:70:42:7f:88:5f:ae:cc:f4:cc:d0:07:
8a:06:9e:c1:03:8f:6d:cf:03:43:13:52:18:26:12:a8:b5:48:
a1:71:21:29:9d:58:56:22:b7:b1:0e:19:94:25:98:a1:ce:ef:
b8:c6:aa:25:65:bb:20:fe:6e:37:bc:3a:22:af:8b:6b:86:ca:
4b:60:03:d8:08:03:f0:f1:1c:33:23:e0:45:17:ab:a0:94:a1:
8c:5c:2d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:41:12 2025 by rpki-client