Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
File: 2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa (raw, json)
Hash identifier: xRRRA/fCTyV+10bUgjU4uJuAOtQ0ISdyKujgIEAex/0=
Subject key identifier: 65:51:14:FD:EC:C3:C7:FA:D0:BA:CA:FC:1F:E1:B5:1C:4D:69:B7:22
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 772D9144B11822BC08841ECB24BC41C09A312882
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
Signing time: Tue 06 May 2025 00:40:10 +0000
ROA not before: Tue 06 May 2025 00:40:10 +0000
ROA not after: Tue 10 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:2d:91:44:b1:18:22:bc:08:84:1e:cb:24:bc:41:c0:9a:31:28:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 6 00:40:10 2025 GMT
Not After : Jun 10 23:59:59 2025 GMT
Subject: serialNumber=c39a5895ac76b83fd4889dd5223f73c943648bfbc37bdee277ac8b94c6cc893a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6b:ef:6a:e0:3d:87:ce:58:51:86:aa:9b:83:
92:5d:c7:18:54:0e:25:06:74:ed:89:12:06:38:36:
a1:c3:77:3f:f5:a6:d9:55:51:d9:62:6d:dd:34:6c:
85:54:4d:6a:f8:69:34:13:5e:5e:08:a9:b7:ba:86:
43:41:77:fc:6c:a0:24:13:61:fc:f9:7e:c3:a8:80:
f0:d6:51:33:c6:17:7e:36:4b:8b:d6:57:c9:2c:ad:
77:22:fe:71:3d:14:54:d2:3d:ff:d2:8e:00:e7:6c:
6c:d3:49:f7:12:e3:bb:38:ed:bb:d3:c1:7f:49:07:
9f:e8:9b:03:51:0e:a2:45:89:7e:7e:58:b5:16:35:
cb:33:40:75:de:54:a6:87:44:16:6f:ee:d8:c8:95:
de:bd:a4:d5:1f:c0:4a:c2:0d:af:2f:c3:9e:db:b8:
5a:4f:70:55:70:0d:47:0b:bd:03:fb:20:ee:d6:e0:
b1:7b:48:25:ce:5f:04:ce:d0:f1:1d:88:43:0b:5f:
4f:4e:49:5c:d8:70:7c:6b:28:cd:ee:43:02:a1:08:
10:0b:71:d4:c9:4f:20:e2:e7:9f:aa:93:6c:b5:0b:
47:a9:f0:98:44:20:9b:d5:aa:67:84:42:c1:08:dc:
94:e9:73:35:df:ac:0b:e3:64:60:62:54:91:0d:ae:
2c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:51:14:FD:EC:C3:C7:FA:D0:BA:CA:FC:1F:E1:B5:1C:4D:69:B7:22
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/17
Signature Algorithm: sha256WithRSAEncryption
08:d1:58:91:17:ab:20:2b:bd:d9:ac:87:e1:3d:d4:fa:c4:f1:
b8:af:43:04:a8:aa:44:c2:a5:07:e7:ba:8a:e7:b4:00:b7:9a:
95:0c:3d:8f:42:8d:6e:92:f7:c7:a8:81:b2:86:f3:ea:e1:93:
7c:d5:95:d4:75:b6:57:ba:b6:65:e0:71:f1:8d:c5:e2:92:6a:
ad:36:b7:31:31:d0:a1:af:c8:f8:b5:63:fa:a7:48:76:22:12:
0e:a3:6a:26:42:d9:a8:4d:cd:83:2c:28:db:57:bd:f6:81:7d:
af:45:6f:7b:d2:f6:48:31:e4:7c:d6:8f:81:e3:61:a2:78:68:
ec:2d:fe:7d:72:f1:c2:e9:c2:73:12:ce:80:69:d9:e8:e7:cf:
c6:6f:ff:68:fb:3c:97:47:6e:b8:86:f9:61:49:a2:99:c4:87:
7a:1b:2a:f1:5c:ee:42:9c:49:24:76:be:70:5e:04:2d:26:8c:
12:65:1f:f4:3d:74:92:c0:22:87:1e:b0:6e:53:c0:69:e2:86:
c3:93:43:f4:22:89:6a:7b:54:23:45:58:dc:c4:fc:0c:20:57:
7d:35:25:04:cf:3f:fa:9c:26:da:af:f6:7d:48:9e:71:49:7a:
4e:26:8e:1f:9e:76:9e:c2:40:c1:6b:f7:2c:62:98:e2:4f:c5:
84:9e:8e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:40:40 2025 by rpki-client