Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/842bd74b-e507-47ea-bb4e-32057136b2bd.roa
File: 842bd74b-e507-47ea-bb4e-32057136b2bd.roa (raw, json)
Hash identifier: tvXiT6GoyXvbYZ5/WZnX7fyLF8x1vVF5bHK09B2QCdk=
Subject key identifier: BD:89:C3:85:6B:7A:6E:B6:D5:75:5B:EB:F2:EA:45:D3:36:32:EC:D3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 303A8DAB66C67A34E8534327FA508DB11BFF2823
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/842bd74b-e507-47ea-bb4e-32057136b2bd.roa
Signing time: Mon 14 Apr 2025 17:30:59 +0000
ROA not before: Mon 14 Apr 2025 17:30:59 +0000
ROA not after: Mon 19 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:3a:8d:ab:66:c6:7a:34:e8:53:43:27:fa:50:8d:b1:1b:ff:28:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 14 17:30:59 2025 GMT
Not After : May 19 23:59:59 2025 GMT
Subject: serialNumber=62e978aa9d6aca3c03a2844228bb262827e9e67c17804a804cfe5c680a7e5418, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:9e:a1:df:3f:00:06:cf:60:12:2d:05:00:
ac:86:e6:db:87:73:d0:a5:87:ca:8f:75:cd:16:21:
39:d7:66:67:69:5f:dc:24:54:e7:d1:ef:87:f0:c7:
70:ed:5e:30:e7:05:cf:61:88:99:79:73:2e:f9:ce:
e8:db:c9:8b:19:18:40:f9:a7:ff:2a:1a:b4:66:80:
5b:7f:5e:13:c2:02:25:95:c8:8c:45:0c:33:56:18:
98:2f:22:6a:ff:c3:68:be:f4:b7:97:95:fb:e1:93:
79:4e:15:23:9c:04:92:0e:66:c2:28:1e:5a:a5:b7:
4c:7d:cb:fe:e3:f0:64:bc:a8:f4:97:b9:7b:ce:44:
37:f5:55:c8:fc:78:69:c8:4a:2d:20:f1:1b:60:c5:
89:9c:d9:a4:f4:15:03:e6:8e:43:1f:28:e3:e9:55:
5b:7e:e6:6f:f9:5b:ce:45:68:f9:95:fd:6c:fd:e5:
84:e7:b7:23:d9:ce:46:86:55:5e:da:dd:16:e5:dc:
bf:a3:c8:e4:7d:08:a6:56:c1:e6:18:4a:27:24:e8:
1f:e1:46:7e:d6:b8:d4:c2:8d:5b:50:e2:5f:06:92:
db:ef:74:8c:19:b7:26:64:13:ef:cc:92:f1:f5:90:
35:29:85:55:54:1c:27:27:0b:05:91:8a:8e:38:b4:
9c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:89:C3:85:6B:7A:6E:B6:D5:75:5B:EB:F2:EA:45:D3:36:32:EC:D3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/842bd74b-e507-47ea-bb4e-32057136b2bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.0.0/18
Signature Algorithm: sha256WithRSAEncryption
9a:19:96:47:43:10:60:dd:ca:34:ea:46:a4:53:78:23:b4:a5:
f4:06:11:2d:cf:78:43:4d:34:d5:0d:01:39:28:87:3c:a3:14:
be:b7:a3:8e:84:95:56:07:3f:79:bb:30:64:92:ed:6c:c4:11:
47:d0:2a:ac:cc:df:78:c5:ec:93:60:d2:d4:7a:85:74:96:e3:
94:f3:75:6f:93:57:0c:b2:50:ba:8f:c6:7d:33:c3:3c:ef:04:
ab:b6:d9:8e:5f:df:94:6e:be:cd:e4:d9:85:b2:50:32:ca:84:
b1:0c:4d:bc:7e:00:aa:fe:bd:24:76:cf:2a:f2:b6:ab:37:0c:
40:cc:d3:ce:7d:bc:41:81:0f:67:49:c6:38:8b:98:97:13:e9:
6a:49:81:b2:6d:01:f7:29:48:82:53:7a:fb:29:5e:01:7c:de:
39:08:4c:51:72:af:09:41:d0:d2:90:73:3e:a2:94:20:d5:18:
5d:34:fd:d1:2c:6f:1c:26:9b:27:09:12:65:54:e2:26:16:6a:
ba:ea:01:f3:b2:1f:1d:8e:74:7d:ed:67:e1:97:f9:b3:44:ab:
40:69:01:2f:7f:f1:2c:c8:cc:18:e2:97:d9:28:f4:29:67:c6:
10:00:6e:82:ee:a1:b7:b9:6c:89:ff:03:56:88:59:fa:31:c0:
7d:ff:33:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:56:07 2025 by rpki-client