Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27d27432-b542-4aad-b3a4-daf2a0a9bb5c.roa
File: 27d27432-b542-4aad-b3a4-daf2a0a9bb5c.roa (raw, json)
Hash identifier: 0s/SJCOEg3SV45uNHQGKOOwOmOeFmBtudnGQcEg1QYA=
Subject key identifier: B6:62:1F:B9:E3:C4:C8:DF:6B:A2:09:BD:73:6A:5B:ED:8C:E9:03:18
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 54E502FAC345B21D829549D00CCC7BD14878B4C7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27d27432-b542-4aad-b3a4-daf2a0a9bb5c.roa
Signing time: Fri 10 Oct 2025 17:10:45 +0000
ROA not before: Fri 10 Oct 2025 17:10:45 +0000
ROA not after: Fri 14 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e5:02:fa:c3:45:b2:1d:82:95:49:d0:0c:cc:7b:d1:48:78:b4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 10 17:10:45 2025 GMT
Not After : Nov 14 23:59:59 2025 GMT
Subject: serialNumber=cd9805357ae14dd04bdf30859e68f00e99150179d937d6652021b41a40f58d1f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:bb:fd:a9:c6:61:83:49:37:25:9e:b2:97:
68:7f:c7:6a:05:8c:b5:4f:ba:ef:39:f1:01:38:25:
d9:a3:b2:21:a8:b4:90:b0:ef:bc:e6:c7:d2:96:d6:
70:ee:c0:7a:f9:02:d8:d9:cd:38:ee:e7:4f:26:7f:
c0:bf:32:1e:77:db:d6:ea:9f:3b:93:c6:6d:b3:bf:
8e:30:7b:7e:10:ea:b5:f5:6a:df:5d:40:51:76:3e:
ff:d2:5d:5e:55:71:2a:e9:de:c7:be:e1:18:6f:bf:
5e:ab:25:91:cd:35:7d:7b:3b:7d:d9:5d:eb:e3:08:
d0:67:e1:0f:fa:05:3a:5d:43:59:00:d6:c4:c8:1a:
3a:b1:15:e9:82:36:99:47:43:dc:bc:af:3c:d3:b9:
47:cd:ac:bf:20:0a:8f:f3:5d:57:02:b5:73:76:af:
74:e7:39:f6:b8:fd:c9:66:90:fe:fb:a9:04:36:74:
88:8f:30:b4:09:98:c7:30:9d:56:4b:0f:9e:e9:22:
e9:f0:74:ac:1f:3e:46:01:78:e0:8c:3b:e7:e7:73:
d5:a5:1e:44:54:95:e4:98:96:68:17:e0:81:60:0b:
64:cf:d4:fd:52:f1:f8:9c:98:10:a8:4c:fb:3d:5d:
36:d8:5f:f0:91:7d:3f:51:08:22:db:46:14:04:a6:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:62:1F:B9:E3:C4:C8:DF:6B:A2:09:BD:73:6A:5B:ED:8C:E9:03:18
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27d27432-b542-4aad-b3a4-daf2a0a9bb5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.176.0/20
Signature Algorithm: sha256WithRSAEncryption
55:3c:f6:90:ae:7b:09:69:de:48:17:60:e5:ae:e8:d4:93:4f:
c0:10:54:70:9b:4c:c8:fe:8c:73:e9:ec:4b:c2:4c:a8:30:11:
ea:03:31:f5:5f:c3:09:1f:b3:a7:9e:f4:a5:02:5f:59:26:e8:
c1:60:0f:ba:12:b5:1f:dd:75:cb:1c:c8:1b:31:73:c9:9b:fb:
da:87:45:85:eb:f0:ad:cf:8c:9c:89:04:90:79:af:6f:e8:4c:
04:6e:6a:77:35:a0:f6:86:82:68:7a:bc:90:19:1c:2a:33:46:
24:f0:2c:fe:b3:73:4a:6b:bc:5d:2b:5e:47:2a:78:6b:90:74:
82:cc:3b:dd:3f:dc:65:c1:72:4d:37:2f:18:25:c3:a1:fc:32:
38:c0:de:00:88:9c:92:c4:bf:a3:3d:76:1e:7b:a6:34:88:b5:
30:65:cd:2d:f8:af:31:50:f6:e6:0f:e4:d3:f5:00:11:04:b4:
6c:ff:ce:63:3b:bc:71:c2:49:26:84:f6:c3:d2:bc:83:32:62:
d6:65:f0:f7:5d:44:36:2f:1b:e2:2a:f4:85:d3:cf:89:dd:ad:
75:07:14:0f:45:bf:36:72:ac:fe:ff:19:47:3d:f8:89:78:84:
66:8e:14:be:ea:99:1b:1b:19:16:8f:6c:87:9d:6b:e0:61:3d:
ee:c8:22:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:52:55 2025 by rpki-client