Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa
File: 2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa (raw, json)
Hash identifier: bAduUYCt52gi9GMSS4e0xCKQfcPuNzgUMSA+c2OOtKY=
Subject key identifier: 24:C3:B8:5A:B2:3E:C5:EE:73:EF:D3:9D:BB:1B:DB:1F:EA:8D:89:FD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0CE450689DE89B3D744722E129F18D7DD5950E2D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa
Signing time: Mon 14 Apr 2025 17:30:34 +0000
ROA not before: Mon 14 Apr 2025 17:30:34 +0000
ROA not after: Mon 19 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:e4:50:68:9d:e8:9b:3d:74:47:22:e1:29:f1:8d:7d:d5:95:0e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 14 17:30:34 2025 GMT
Not After : May 19 23:59:59 2025 GMT
Subject: serialNumber=8059cedd970b2c98399da9d39dfca01871225a447576e98d51ee1b8cefdc4a28, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2d:70:e9:d5:a4:89:b4:67:b4:4e:80:5b:bc:
f4:cf:56:50:53:f7:47:58:fd:32:cc:de:c4:ab:fd:
47:4a:0a:d8:05:11:00:a1:eb:e5:03:02:cf:fd:87:
30:85:a4:6b:eb:03:5e:19:40:2a:d1:df:51:ce:f9:
51:08:a1:f5:e6:e4:3b:b1:c6:92:08:5a:9d:2f:10:
f6:dd:16:e8:46:7d:2f:9a:d6:6a:b5:b7:5e:40:77:
c0:3c:3a:ce:fd:5f:62:b4:f6:50:27:d4:b5:37:e0:
31:2b:2f:e7:71:23:70:28:74:4d:50:c7:35:02:f6:
ac:8e:a9:0a:16:94:d6:03:22:2c:ea:b6:6f:e0:2a:
c4:b3:31:8b:f1:93:32:86:7a:15:27:5a:9c:0c:6e:
1d:f7:e5:93:03:f5:e5:88:53:40:02:78:25:79:d8:
0a:f6:22:5f:51:3f:17:90:2d:8c:41:75:5f:40:a5:
eb:34:09:a2:3f:b1:fb:bc:84:70:81:11:eb:0e:e6:
df:1c:44:03:61:f4:e7:23:44:07:d9:09:08:fc:fe:
eb:b6:a2:71:eb:3b:63:59:81:38:50:06:98:a4:66:
03:e9:c2:67:a0:8f:2a:df:c4:1d:bd:72:ce:ac:95:
d6:8f:17:d8:3d:de:8a:2d:ab:98:57:c6:bc:19:d1:
77:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C3:B8:5A:B2:3E:C5:EE:73:EF:D3:9D:BB:1B:DB:1F:EA:8D:89:FD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.224.0/20
Signature Algorithm: sha256WithRSAEncryption
56:b0:91:9f:5f:f3:f5:5e:fb:35:82:d9:82:40:ca:b3:8e:50:
8f:44:54:ef:6b:65:f6:65:e0:8f:77:7f:3b:cd:65:45:e5:2d:
04:c4:e3:44:6f:36:3f:01:b8:95:b5:74:dc:cc:0d:bf:2b:c4:
7e:16:46:5f:15:95:5d:d4:3e:a0:f5:a7:8d:fd:2b:0d:4c:a4:
ac:33:28:bf:58:ba:56:2b:1e:b8:83:b2:b9:ed:46:83:75:cd:
07:dc:6d:b5:44:5f:70:ac:0d:4e:8d:d7:51:10:55:29:25:38:
e3:3e:af:76:3d:72:75:34:4b:6a:be:cb:34:f9:9b:1e:73:b2:
ee:34:36:47:98:69:bd:2e:79:9c:b6:98:f2:a7:1a:fb:14:b8:
6d:b6:96:c1:dd:41:0a:a5:7d:1b:00:ec:46:30:f6:81:4e:c7:
b9:2b:71:92:8c:6d:f3:5a:bf:c8:5a:f2:b5:12:3c:55:8e:9e:
1a:cb:58:43:94:c2:67:1e:10:b3:7a:f8:54:ab:28:73:40:fc:
49:37:0a:32:d0:ef:46:fe:e6:81:de:13:2f:67:39:85:fb:02:
dd:10:ea:a6:d8:96:5a:04:4d:f5:a9:73:b5:50:f0:53:15:4d:
69:45:af:1d:39:a0:a4:f2:60:54:5a:e1:7a:2d:11:bc:20:c1:
37:ab:2a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:50:36 2025 by rpki-client