Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa
File: b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa (raw, json)
Hash identifier: GjrDKoVu7HYTEY+A0llE5WusCoDn7mWAZuley1kRUFg=
Subject key identifier: CF:F5:F9:57:94:A3:B9:45:44:85:C0:6D:FD:DD:B2:99:F3:DD:58:F7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 26E3EAFDB6E181EDF72764518036C4BB8EFFC7D4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa
Signing time: Fri 25 Jul 2025 16:51:03 +0000
ROA not before: Fri 25 Jul 2025 16:51:03 +0000
ROA not after: Fri 29 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:e3:ea:fd:b6:e1:81:ed:f7:27:64:51:80:36:c4:bb:8e:ff:c7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 25 16:51:03 2025 GMT
Not After : Aug 29 23:59:59 2025 GMT
Subject: serialNumber=94b1f2f44a3f7589b6b3d3867cbf7e2243eb01cf0245fe9251bcdbd63212ec31, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:56:9f:97:6f:3c:5a:78:b9:34:60:72:29:e6:
79:f7:7b:bf:5a:21:ab:f1:d4:df:a3:3a:08:1b:23:
df:9e:bb:df:cb:3a:4a:69:0d:3a:96:84:fc:1d:e7:
ea:c5:bd:44:8a:bc:ee:06:7a:5a:16:65:44:b4:99:
58:69:4c:52:d4:36:10:4d:00:4b:c1:a9:42:6d:74:
cf:81:89:31:83:af:35:db:18:89:db:5d:58:6a:cd:
27:98:87:3b:56:ca:2b:d5:fd:96:5f:45:a4:1b:1c:
c8:f2:93:55:42:37:dc:fa:9d:ae:64:e3:3d:2b:6c:
1b:d5:98:50:1e:81:09:1a:63:5d:b9:51:06:dc:81:
b8:b3:fc:99:67:95:9b:eb:e2:bd:70:ea:e7:9e:e2:
9d:a0:e3:86:2e:d7:b9:b4:ca:8e:63:f1:8a:39:d9:
a6:11:ef:75:72:0c:f9:7b:93:cb:07:72:a4:de:55:
17:54:b6:08:2c:86:3c:5d:66:0b:83:3c:d0:2d:9f:
28:f7:da:e6:aa:df:49:3a:bf:af:c6:87:b6:1e:56:
c4:1a:f0:24:0d:e9:88:d0:39:45:10:5f:46:b6:cf:
19:16:4d:ca:f0:75:53:ff:85:7d:35:91:d6:22:ce:
df:e2:a5:7d:9e:4a:6d:7a:76:13:45:d1:cb:6e:ca:
e6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F5:F9:57:94:A3:B9:45:44:85:C0:6D:FD:DD:B2:99:F3:DD:58:F7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.222.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a0:a3:da:5c:26:9a:13:b5:55:22:c3:af:a5:38:3c:b8:84:
ed:58:ad:61:a4:06:9a:7a:4d:56:08:f3:66:f2:0c:0d:fb:45:
b7:13:1c:65:09:e4:36:78:9d:e6:59:14:03:3a:46:dc:c4:0a:
26:76:70:86:32:46:cd:4a:3c:9f:b1:a2:cb:ca:3a:83:78:bb:
32:36:2d:cd:ac:35:26:29:3f:51:ea:51:7c:cb:9f:78:e3:cf:
c2:6a:9d:31:8a:dd:a8:27:47:6e:d4:db:79:ff:2f:db:51:dc:
76:55:4d:bf:ec:c2:25:9d:e1:dc:5c:8c:4d:43:c5:88:62:fc:
ca:23:08:2e:5e:0d:39:d1:da:64:bb:93:54:de:35:7a:43:18:
84:fa:51:de:ae:c7:23:be:b9:ec:9a:f1:39:7d:1f:0b:d7:7e:
c4:1f:cc:e8:9b:8d:ab:13:df:28:d9:61:2c:ca:f9:01:f0:20:
28:d4:ab:3f:a4:8a:f2:f0:ec:90:63:72:3b:08:16:e4:ac:15:
ad:01:fc:2e:23:33:5e:0d:d0:cb:55:36:8b:be:6d:28:15:67:
5e:32:ed:15:94:ee:3b:c7:ab:ea:a4:89:4e:b5:8e:1a:b3:1e:
fd:b5:8d:28:a6:c9:2a:ac:0d:78:fc:be:dd:75:68:35:19:e9:
85:69:e9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:56:14 2025 by rpki-client