Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
File: 2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa (raw, json)
Hash identifier: qluCUwNhdNhjZ2FOmv6xduQ/kY0wirgkmFY4sFMfaYU=
Subject key identifier: 47:00:9A:18:3F:7F:91:D7:D1:F2:D7:46:9B:01:A7:33:76:61:4C:16
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4E1B4F7F13CC6267EE3A6D4F7A76C275B14256BA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
Signing time: Tue 19 Aug 2025 17:00:39 +0000
ROA not before: Tue 19 Aug 2025 17:00:39 +0000
ROA not after: Tue 23 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:1b:4f:7f:13:cc:62:67:ee:3a:6d:4f:7a:76:c2:75:b1:42:56:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 17:00:39 2025 GMT
Not After : Sep 23 23:59:59 2025 GMT
Subject: serialNumber=de51a0d51d66ef33fa75767ca10bfc27d5d70f2eece1a84e764e871354cd34fd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e2:5a:51:44:65:60:00:20:fd:f4:65:fd:8d:
45:0d:40:f3:b7:bc:38:02:60:f7:4b:d6:eb:6a:08:
ce:6f:69:5b:32:c5:bc:23:50:22:24:d9:23:15:ec:
3a:42:37:59:4e:54:33:03:cd:c0:e1:d3:68:79:e5:
c9:15:98:33:2a:3c:46:ec:87:da:ae:f9:7f:87:0c:
bc:56:d5:f0:05:43:b9:e5:24:33:df:54:84:08:31:
f7:b4:a3:72:06:6a:51:db:ba:54:38:bb:79:ab:19:
d6:39:df:95:81:28:c3:72:ae:5e:d8:aa:b5:81:e2:
19:b2:64:4c:8b:88:06:55:b2:16:c1:f2:fb:8c:0b:
2a:62:68:0d:10:88:05:36:af:31:38:2f:03:17:9a:
11:5e:8b:58:e5:ed:de:ae:df:95:6c:f2:d2:36:e7:
0e:4d:09:40:48:c9:5b:22:8d:2a:c0:ce:9b:c7:8f:
22:57:09:d2:35:87:21:b4:ea:c4:d1:f7:a1:c9:82:
7e:a3:e7:84:cc:d3:0f:ef:20:f7:8f:4b:79:21:ca:
6f:14:a0:c7:d3:49:7a:b6:b4:5a:b9:67:d7:30:69:
ac:e5:27:8f:8e:3e:87:a3:1d:10:a1:39:0d:a4:fc:
74:9b:6b:92:7c:ac:18:d7:57:95:7e:82:bd:d1:97:
83:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:00:9A:18:3F:7F:91:D7:D1:F2:D7:46:9B:01:A7:33:76:61:4C:16
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/17
Signature Algorithm: sha256WithRSAEncryption
6c:2f:70:de:a7:66:5e:fa:9a:2c:b6:c1:21:5e:7b:3b:02:e0:
06:13:89:cc:cc:b1:53:b7:1f:17:3c:0f:80:9f:3c:aa:d9:22:
7e:b5:c3:e9:89:03:bc:16:9f:4e:0b:bd:db:2a:fc:21:1d:03:
ee:df:dd:89:71:b7:d3:2c:15:e7:5c:d0:91:b4:0e:cd:32:27:
ea:f5:a8:5e:91:99:d9:19:ac:f4:7e:5b:92:b6:c3:70:77:09:
e0:e0:5d:a9:18:aa:7b:84:37:13:00:32:e3:1b:06:33:d1:6b:
6d:8b:c1:c4:59:4a:99:bb:be:06:a6:af:29:6d:55:1d:5a:fa:
39:dc:07:1b:8a:ad:14:ba:f3:8e:f3:98:95:03:56:70:e6:b4:
e6:1b:77:b7:a0:bb:23:63:67:eb:ae:50:fd:ef:7e:01:70:64:
d8:1e:2f:74:cd:f5:75:5a:c1:1d:83:cd:bc:06:22:9b:51:6e:
c3:2a:e1:30:4d:70:bc:d4:1c:d2:5b:36:4a:1b:5c:9c:f2:3c:
34:78:e1:8f:f8:35:b6:22:83:a5:3a:1f:5c:7a:4a:01:f1:90:
f6:6c:76:07:5f:82:e4:23:6f:93:30:b3:b3:28:1c:87:e7:7d:
7d:8b:cb:9b:8b:ff:7e:47:8d:92:9b:d1:d7:f1:7c:40:38:6f:
c1:36:d5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:46 2025 by rpki-client