Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa
File: b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa (raw, json)
Hash identifier: rwboR2e5cPKE140MsO/j6YpIb3UQT78Bb/WHurX0/No=
Subject key identifier: 0E:12:58:45:32:B5:7F:18:2E:90:8A:DF:64:81:C1:39:F8:AA:48:27
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3F3D8E2A4E2232EE684E3F7AB2314441A147E81B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa
Signing time: Tue 03 Jun 2025 16:30:09 +0000
ROA not before: Tue 03 Jun 2025 16:30:09 +0000
ROA not after: Tue 08 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:3d:8e:2a:4e:22:32:ee:68:4e:3f:7a:b2:31:44:41:a1:47:e8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 3 16:30:09 2025 GMT
Not After : Jul 8 23:59:59 2025 GMT
Subject: serialNumber=6732611eac19022b06d28a9bc54cf5c44671e9727fa11a9df0d2d3db59d3f0b1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6a:84:f9:a5:30:e9:7f:9d:fa:81:36:90:e6:
33:f8:d7:43:e5:91:23:54:2a:52:dd:96:bd:b3:6f:
09:24:5f:29:c9:a2:32:c7:e6:3d:71:bb:32:3e:14:
88:0d:e0:72:44:bb:f9:0e:e7:c7:f6:29:08:cd:4a:
20:83:7b:98:c2:b5:18:81:01:82:b4:03:b7:73:59:
6d:76:c0:72:c9:7a:be:04:d6:21:05:80:bc:e4:73:
5e:55:92:51:8e:c9:1a:46:87:eb:64:ad:b4:0e:41:
26:b9:2b:99:80:6a:10:20:0d:07:f6:cb:e1:13:46:
db:e3:7f:5c:17:d8:c3:71:8e:f9:41:b5:ae:2b:3d:
e5:f3:cc:9c:f9:50:59:3a:d4:3d:de:89:56:f7:eb:
42:c3:22:05:5d:dc:e1:dc:06:d2:0b:95:37:29:ec:
32:31:06:e0:39:3b:28:e2:d3:d6:99:72:bc:92:20:
da:f7:f0:7a:c6:4c:5d:b3:5c:2b:90:79:6d:88:a4:
8e:f2:2d:22:20:c9:41:34:0c:d4:13:15:4b:77:fe:
78:55:7f:8e:cd:07:e9:06:a2:2e:68:58:c0:f5:db:
ef:4d:c1:f2:48:27:a5:05:16:c5:d3:3f:f2:81:cd:
a3:9a:73:6b:34:a2:84:94:34:ac:1b:39:1e:15:2b:
5a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:12:58:45:32:B5:7F:18:2E:90:8A:DF:64:81:C1:39:F8:AA:48:27
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.222.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:65:38:8a:49:42:41:11:14:b3:6b:4f:42:29:42:f2:3e:a5:
01:e6:95:cd:b1:8f:54:6f:a2:98:3c:3b:ec:f5:3b:88:c9:45:
34:e7:b9:cd:dd:13:8b:b4:5f:93:f4:e4:31:a5:9d:9c:ce:70:
df:50:45:2c:a6:b6:97:47:26:ba:bc:fd:6e:ba:99:a8:60:5b:
a3:17:52:a1:97:e5:74:50:4d:8c:1b:c6:7e:f4:8b:d0:4b:2d:
bc:c4:fc:b7:dc:1e:1c:34:f3:8d:55:61:11:c5:bc:78:fe:32:
3c:f7:db:0c:23:dc:f7:d4:e2:43:01:5d:a4:6d:18:d9:f4:30:
4b:0e:fb:bf:3c:04:79:88:0e:16:dc:22:80:ac:0e:8d:19:d4:
c7:d1:7c:cb:2b:d8:ad:ac:21:ee:f0:eb:07:05:22:cd:6d:d1:
50:d2:28:17:4f:80:60:d7:1c:57:00:97:d7:1e:74:ac:1c:fc:
02:ca:f0:6e:0f:82:f7:c4:4e:96:e8:29:a6:75:40:5c:55:ab:
2b:f9:d9:d0:76:0b:33:0c:5b:a2:02:61:21:ee:a0:71:8d:88:
1d:94:30:7c:1a:e8:c3:24:67:7e:28:bb:7b:2e:c0:6e:40:6c:
b3:f2:bc:3e:2e:3b:c8:13:fe:df:73:07:48:90:9a:59:39:34:
cc:5d:55:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:35:36 2025 by rpki-client