Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
File: 2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa (raw, json)
Hash identifier: Q72CuXbqlRPrAbD7RtlaqFmq7FGTYZupg8y59XFOnS0=
Subject key identifier: D1:7F:1E:E2:9D:17:63:3C:9B:12:78:80:B1:B2:FC:3B:D2:3C:C2:D1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 17CC55DDDAC502AAE2375D9499D54A3F76AC1F74
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
Signing time: Wed 25 Jun 2025 00:50:11 +0000
ROA not before: Wed 25 Jun 2025 00:50:11 +0000
ROA not after: Wed 30 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:cc:55:dd:da:c5:02:aa:e2:37:5d:94:99:d5:4a:3f:76:ac:1f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 25 00:50:11 2025 GMT
Not After : Jul 30 23:59:59 2025 GMT
Subject: serialNumber=190189052e0838fe989253ff4980ac0ee605d5edb809271e4ee082e599bc4673, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:c9:4f:f9:f4:38:24:09:22:1a:fb:90:c3:
66:7a:c4:7d:97:7b:77:35:1c:98:34:00:41:92:79:
fc:d3:d6:30:72:35:e3:a6:5b:0a:e2:f0:b3:99:6f:
4e:71:0c:cb:e5:6f:7e:ec:d4:26:88:1d:a8:9c:b8:
35:47:fd:3a:0e:c9:7b:43:8b:32:38:51:cd:37:a4:
9d:da:4b:82:ba:ef:61:00:fd:12:07:91:98:ef:92:
0f:c5:8c:84:3f:c1:08:cd:0b:75:eb:fc:4d:28:09:
66:2b:b5:e3:fb:f9:08:86:1c:2a:1a:ba:1e:33:40:
7d:e0:d7:03:cc:9b:24:14:9b:b7:b7:59:6c:84:b6:
38:70:ad:83:6a:30:fa:45:e5:40:79:1c:b1:96:bd:
34:bb:f5:ff:b8:a6:3c:83:49:be:c0:4b:13:50:b0:
c3:16:4e:32:95:03:da:a5:49:41:cc:7c:2e:f2:21:
af:3f:1c:bc:b5:10:c5:0c:61:e9:d0:06:24:45:56:
22:22:6d:b6:f4:c4:fd:ac:6a:f0:06:77:6b:3b:fc:
72:05:05:87:83:6e:6b:0c:14:4c:50:33:64:2b:ff:
65:1d:c9:b8:b9:85:8e:c8:de:24:c2:f2:14:5c:b1:
db:c3:bf:4a:8a:3b:bd:9f:fe:34:f6:8a:10:21:78:
b7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7F:1E:E2:9D:17:63:3C:9B:12:78:80:B1:B2:FC:3B:D2:3C:C2:D1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/17
Signature Algorithm: sha256WithRSAEncryption
00:77:3f:a5:c1:02:61:61:4b:b2:ca:db:74:19:ca:f8:13:68:
aa:6c:0d:4f:c0:a1:e0:2c:a2:a5:78:f6:e4:c9:5f:5a:a0:b4:
6b:c4:36:b8:1f:71:1e:97:f0:06:89:9e:66:f7:87:aa:8f:64:
d2:58:30:d6:e6:10:21:b9:0e:5c:cd:c0:bc:f8:b6:7a:df:33:
9a:a8:ac:2c:15:35:b5:a3:1a:9d:7b:e3:0a:d4:fc:0c:25:48:
7a:e5:7d:3e:dc:c5:08:ad:cc:f5:df:f1:39:e4:c8:ac:fb:43:
80:e8:47:44:b9:c9:8f:e5:df:d3:67:c5:27:27:f0:d6:bf:82:
54:1f:6f:97:6d:f0:fc:58:d8:7b:93:58:02:b3:c9:e3:ca:e1:
10:33:ee:cf:da:15:33:98:a8:08:b3:17:a7:93:40:98:4a:2b:
8e:bc:b3:8d:be:3a:a2:77:26:58:29:91:67:7c:2b:a2:55:5c:
40:f7:74:04:ea:48:8d:be:e8:12:fb:29:8e:82:7d:dd:fa:9e:
04:bf:19:11:0e:14:f1:00:a7:ff:5f:ac:24:b2:bb:13:8e:3a:
54:09:ed:d0:03:42:c6:2a:63:7c:80:ee:b4:c3:8d:b1:c7:42:
01:14:e6:a5:8f:e9:93:14:a2:32:4e:6c:96:39:0e:3d:b0:34:
cf:1f:71:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:49:16 2025 by rpki-client