Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d3290b1-5123-4651-a2b9-bde2c7d0d334.roa
File: 7d3290b1-5123-4651-a2b9-bde2c7d0d334.roa (raw, json)
Hash identifier: +NXb0Nn1/BZGPVCrtOAs5EHX5zV5UDY2iHIcXaDVZMU=
Subject key identifier: 67:64:08:3F:BE:D0:48:38:08:31:0D:92:21:7A:9A:42:1E:31:80:84
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7E50F1E37E6F794A04BFB45CE0AF7B27690B84BC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d3290b1-5123-4651-a2b9-bde2c7d0d334.roa
Signing time: Fri 25 Jul 2025 17:00:30 +0000
ROA not before: Fri 25 Jul 2025 17:00:30 +0000
ROA not after: Fri 29 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:50:f1:e3:7e:6f:79:4a:04:bf:b4:5c:e0:af:7b:27:69:0b:84:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 25 17:00:30 2025 GMT
Not After : Aug 29 23:59:59 2025 GMT
Subject: serialNumber=1df41a1f468a38ed18da52c4328b81a127db425791ff8270044c3928e667ea2a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:4b:5d:3f:01:3b:1d:bf:7b:4c:85:b3:16:
5b:6b:98:79:24:73:18:ee:10:ff:30:18:30:f9:a3:
a9:5c:38:c3:ec:84:c6:2c:44:0e:d6:fb:62:72:59:
56:c3:f9:68:c2:05:7b:33:98:40:60:a0:91:fe:11:
b4:14:64:cc:b0:d9:fd:60:10:62:4a:b0:f7:f4:33:
aa:46:b4:73:4e:76:8f:46:75:3b:a9:9f:f9:2d:a9:
aa:96:78:61:31:b6:a8:6d:e3:c1:d8:41:22:b7:aa:
29:35:7d:8d:78:95:3d:1e:17:19:c1:be:5e:ce:45:
08:b1:87:f3:95:d4:94:09:38:94:05:d6:ae:1d:20:
27:52:8f:12:35:81:76:6b:6b:73:98:1c:48:40:6e:
cd:39:f4:af:b1:ee:10:ba:26:e1:16:e1:2d:6e:49:
b2:3f:f5:2d:f3:c5:70:b7:85:49:2e:84:f4:4e:f8:
59:e6:a9:c2:d6:7c:07:ed:0d:9f:9f:13:0c:d6:ec:
3a:89:f0:6c:ea:20:1f:ff:57:1a:40:21:d7:2c:46:
36:ce:00:bb:03:2b:28:eb:ac:04:01:19:49:67:32:
d3:86:7e:7e:ef:de:ab:ca:8e:ff:25:c5:50:57:13:
15:5b:84:6f:3f:88:2c:15:c5:bc:ae:b7:60:89:37:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:64:08:3F:BE:D0:48:38:08:31:0D:92:21:7A:9A:42:1E:31:80:84
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d3290b1-5123-4651-a2b9-bde2c7d0d334.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/18
Signature Algorithm: sha256WithRSAEncryption
18:eb:85:e3:1a:0c:16:ee:bc:f6:98:99:48:94:6b:b6:05:12:
2a:f1:7d:42:63:eb:3c:50:56:35:ee:af:56:05:94:37:eb:da:
19:6b:97:0e:bc:d3:8f:35:2d:ab:2b:48:46:df:da:e0:21:bf:
e5:50:1e:15:c1:aa:29:bb:8b:2b:46:1d:a4:a0:ae:2f:59:48:
39:fc:4b:8b:04:bb:3b:de:cb:24:ac:08:7f:ed:05:d2:22:28:
b7:97:cf:7d:30:6e:c6:24:ee:e6:ee:dd:a6:19:23:1e:b8:b0:
b7:26:9c:dc:e2:25:27:fd:3c:bb:4f:18:c5:75:53:1e:0d:f4:
5d:2f:7b:15:78:e4:f9:66:48:c9:cc:b4:63:5f:e2:33:4f:77:
3d:03:6c:df:34:61:d8:47:88:bb:a7:57:01:c5:cf:00:18:9c:
ea:0b:7f:0f:d1:c4:0a:2f:44:d7:96:54:ff:27:f6:1e:11:42:
33:32:94:17:81:ca:f6:f7:85:7f:89:e0:58:0a:fe:0a:76:c5:
a2:46:d7:b9:ce:6b:a1:af:e1:c9:93:cd:50:7a:ec:10:bf:e5:
d3:e7:32:52:0d:b5:98:7c:41:e7:c5:2c:4b:f4:03:67:e7:c1:
47:cb:f6:ad:73:8b:fc:65:17:df:82:24:d1:5a:95:72:d8:aa:
ad:ed:61:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:47 2025 by rpki-client