Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d3290b1-5123-4651-a2b9-bde2c7d0d334.roa
File: 7d3290b1-5123-4651-a2b9-bde2c7d0d334.roa (raw, json)
Hash identifier: 2lxaHr1uhT5d+YXfydjVUFKquPand5A5gFDRHbPd7YI=
Subject key identifier: 2B:DF:4E:98:E3:AB:FB:31:6E:3E:20:32:7A:93:05:58:C7:22:5D:67
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 46867D8A9D8E18A89970667369BF462DFB778CC4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d3290b1-5123-4651-a2b9-bde2c7d0d334.roa
Signing time: Mon 14 Apr 2025 17:31:04 +0000
ROA not before: Mon 14 Apr 2025 17:31:04 +0000
ROA not after: Mon 19 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:86:7d:8a:9d:8e:18:a8:99:70:66:73:69:bf:46:2d:fb:77:8c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 14 17:31:04 2025 GMT
Not After : May 19 23:59:59 2025 GMT
Subject: serialNumber=368b18411a42b144afa6e2b1fad7ddfe8d8cb4a9f53aebd3fb5f4a964df6ae00, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fc:00:d6:8d:43:9d:e2:97:de:07:a9:19:de:
ae:58:c5:e9:cd:17:fe:5d:f0:d9:37:9b:1f:28:e0:
e3:2a:1d:d2:f5:d4:d1:b2:e0:20:77:69:56:2e:19:
6b:a4:1d:4f:e6:4a:5f:9a:1b:d9:5e:be:36:af:1a:
c4:09:d3:d3:12:15:f5:14:a7:62:dd:bc:c7:50:9a:
16:b6:50:97:f4:7f:65:73:32:6d:16:46:38:8d:a6:
4c:bc:38:42:87:d2:8c:73:41:c4:53:6a:ba:48:ff:
4e:1e:ba:b9:2c:3e:21:15:55:20:4e:cf:a5:a0:f8:
c9:c6:a5:ae:17:f9:af:1c:ce:fa:04:8b:9c:87:d3:
6a:da:0c:e6:ec:a9:7e:d8:d2:91:cd:44:cd:34:95:
2f:b1:b5:31:9e:5f:4c:fb:c6:13:5b:15:97:c9:2b:
c1:18:12:dc:1e:be:40:9d:5a:33:bd:2c:04:ce:15:
23:e3:d0:11:ac:80:6d:4c:14:a9:0b:ef:c1:be:51:
79:f2:49:15:b3:fd:47:96:6e:c2:4c:60:09:f6:91:
38:7a:e2:99:f6:da:e1:10:da:b1:29:f6:d8:d1:e8:
19:1c:45:bb:0d:36:68:48:0e:7a:f8:96:3c:1b:6d:
cf:28:6c:c0:0d:4d:86:3c:8a:68:87:59:9c:4b:c0:
98:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DF:4E:98:E3:AB:FB:31:6E:3E:20:32:7A:93:05:58:C7:22:5D:67
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d3290b1-5123-4651-a2b9-bde2c7d0d334.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/18
Signature Algorithm: sha256WithRSAEncryption
c1:9c:30:68:7c:ec:5d:78:65:31:1a:1f:50:d2:d8:33:be:5a:
5b:b2:c0:91:be:8c:10:78:22:13:66:3b:74:85:b3:ac:9e:47:
4a:42:b2:27:3a:f7:a3:61:6b:0c:66:86:98:42:08:6c:86:34:
da:f4:c4:a1:e1:a9:9c:2b:bc:02:2c:9c:c3:29:4d:d7:73:62:
6f:4b:af:16:99:87:76:d2:69:bb:a6:2b:0d:8e:01:09:71:b1:
12:63:8d:07:ee:a3:ba:3e:0f:f8:a8:ef:46:e8:f0:f7:ea:45:
f9:93:2c:4b:0a:ca:fa:0e:aa:a5:ad:32:9a:59:e6:ea:85:59:
fa:f1:cc:dd:2d:56:cf:80:97:03:f6:e8:41:13:15:f8:1e:fc:
83:54:4b:b7:7b:9b:9e:5c:1c:21:be:19:58:70:6d:63:ad:00:
58:87:64:eb:da:22:d2:28:98:5c:be:e8:5c:6b:22:2c:21:89:
17:a3:ab:97:f5:9d:41:01:d2:c7:cd:bd:40:2f:0e:3f:d7:70:
22:50:99:dc:57:d2:2c:ca:e9:7f:c4:19:fb:3e:48:6f:71:47:
73:dc:b7:ff:25:6c:26:0e:05:57:74:16:fb:ab:5c:4d:17:a6:
08:dc:e5:4b:78:74:96:18:b9:3a:45:4d:1f:71:56:ba:a8:1f:
e7:5a:01:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:05 2025 by rpki-client