Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa
File: 2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa (raw, json)
Hash identifier: yTlGdUffxgMPzTH6ua15glLN0xeIpBLSD6YDKXbg7nk=
Subject key identifier: CF:E6:11:97:9B:DE:45:36:AD:3E:71:B1:4D:92:B3:E4:99:0E:B3:76
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6C5D6505DCFD1EB220BAA30F8B54399BD52A5DF2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa
Signing time: Tue 04 Nov 2025 02:51:08 +0000
ROA not before: Tue 04 Nov 2025 02:51:08 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:5d:65:05:dc:fd:1e:b2:20:ba:a3:0f:8b:54:39:9b:d5:2a:5d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 4 02:51:08 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=3c73e25359f08fe571e5fa6f0bf604ee7f6ec4340d5d40efb41d9242ca4b9237, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:c9:f6:f4:6b:f7:db:c9:78:d7:76:17:f9:
22:b1:3e:93:e9:f1:78:e9:ba:f2:93:4c:7b:84:f5:
a5:f3:ff:83:be:59:df:99:ec:45:b7:85:84:32:63:
99:74:ee:e1:d0:26:59:25:dc:f5:1c:34:2d:b5:05:
82:99:be:6a:73:41:20:8e:61:17:3a:7b:97:c2:57:
e2:95:d9:86:19:03:74:43:a9:3f:6c:73:4f:37:1a:
ee:95:44:ad:f3:58:b9:4b:17:b6:52:18:61:fd:d6:
12:ae:a7:20:09:79:29:84:72:30:0a:59:92:ae:2a:
53:9e:90:7d:e1:4f:16:db:83:86:b3:31:04:14:6a:
33:1d:70:a1:db:e3:1c:82:86:5c:d4:64:e9:a3:b2:
08:2c:f5:e1:96:42:96:bb:6a:b9:6a:ae:b3:a5:5e:
2a:13:c4:98:f9:5a:c1:23:55:95:7b:bb:44:81:06:
24:69:ad:db:87:e9:00:aa:36:98:38:c3:18:a4:16:
12:e5:1c:8e:9a:f9:3e:7d:de:58:a6:38:8a:ed:58:
74:6f:5a:53:94:e2:00:3e:3d:3d:0e:99:7f:4f:e9:
16:7a:34:c2:90:5a:f6:e1:48:89:76:df:ba:84:fc:
b6:00:80:57:24:b1:cf:ef:dc:c4:a1:85:2c:08:b3:
c0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E6:11:97:9B:DE:45:36:AD:3E:71:B1:4D:92:B3:E4:99:0E:B3:76
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.224.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:3f:c8:7e:12:6f:7a:58:f0:d3:e3:c8:a3:e5:3f:30:16:13:
ee:5d:7c:43:a0:67:a6:de:d9:0b:8f:5c:fa:15:31:d3:18:df:
87:66:13:b0:9a:70:3f:ec:48:72:f9:d9:11:d1:3f:90:dd:3b:
65:c2:97:e4:6e:18:19:ae:ea:40:db:ba:cd:db:fa:d7:47:a8:
1c:fc:99:ed:e3:71:a1:1b:c2:44:6e:77:07:06:bf:73:f4:97:
4a:88:50:c0:79:a7:f0:74:f1:51:44:d3:7c:03:c5:d5:25:8e:
4f:b8:76:20:6b:7a:ad:71:4f:60:d3:fd:5e:06:d8:7f:a9:84:
86:0e:00:49:40:5f:1e:52:78:91:1a:26:34:99:2a:b8:41:06:
46:75:4c:8a:89:af:bc:03:44:0e:15:23:fc:f0:05:d8:3e:93:
ee:d2:ff:18:33:2b:82:f3:33:e8:2f:84:5c:0d:f7:49:23:e1:
f4:0d:8b:1b:d2:69:39:bf:57:29:65:38:7a:3c:ce:43:32:c1:
33:aa:42:46:c0:8c:4c:ca:1a:4b:64:dd:fd:96:11:b4:37:03:
9e:c0:d5:84:32:39:eb:61:3b:9a:c3:1e:4c:64:a7:a5:74:1a:
6e:4d:5b:c9:e9:4c:e3:09:f0:7e:ba:63:ce:44:56:9e:8f:ff:
22:12:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:29:42 2025 by rpki-client