Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa
File: 8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa (raw, json)
Hash identifier: DbmvVdNsAKZoM3quB+aRNwFZ0w+axqAml+laRNthqTg=
Subject key identifier: 46:E1:B1:F9:86:97:67:30:BD:78:2F:73:3B:0E:B6:29:0A:B1:AC:26
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6A88EEC57FB371C066B6DDB2A266A89A1C8193F6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa
Signing time: Tue 19 Aug 2025 17:00:42 +0000
ROA not before: Tue 19 Aug 2025 17:00:42 +0000
ROA not after: Tue 23 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:88:ee:c5:7f:b3:71:c0:66:b6:dd:b2:a2:66:a8:9a:1c:81:93:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 17:00:42 2025 GMT
Not After : Sep 23 23:59:59 2025 GMT
Subject: serialNumber=85a707337ab12e358e5fa21ac483ca938646e65c6439909da4f85030ec69004b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:43:30:df:55:46:c2:dd:8d:09:2e:8f:c8:
d6:ce:ae:a5:76:f5:d9:97:ba:40:2b:10:ea:eb:24:
e2:cf:cc:cd:eb:b4:e4:e5:fb:16:58:5d:53:9a:e2:
69:6c:91:80:fc:c1:56:09:c3:1c:50:53:9a:56:2a:
9c:bc:c9:57:df:07:27:fe:a5:6a:4a:0c:3f:be:cd:
b7:35:28:2b:b2:31:d6:da:55:f7:97:35:90:f8:31:
30:3e:52:29:c1:3f:13:c5:de:50:95:e4:90:c1:41:
e7:81:e9:51:85:59:1b:0c:21:ba:f8:44:58:6e:bd:
70:03:f7:3c:b0:ca:16:a9:08:82:11:8f:b0:1c:12:
6b:13:0a:0b:b2:92:b9:6b:e7:3a:4b:e6:76:9d:47:
44:18:1d:ad:f7:f1:e5:54:c8:a0:de:53:98:e0:5b:
4c:fa:0e:22:53:54:bd:16:ac:b0:54:52:cb:9b:ca:
1a:b5:a6:b6:af:fb:58:c3:3d:59:11:2f:2c:7a:ea:
f9:59:6d:e4:38:ce:ed:c0:cd:8f:c6:e5:14:49:18:
49:cd:49:48:07:85:e8:5e:57:28:7e:25:69:4c:76:
4d:86:6d:01:da:35:cb:96:82:b3:71:0d:1a:48:c4:
0f:62:c1:67:30:d4:a4:ba:23:eb:58:93:17:03:c5:
a3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E1:B1:F9:86:97:67:30:BD:78:2F:73:3B:0E:B6:29:0A:B1:AC:26
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.192.0/20
Signature Algorithm: sha256WithRSAEncryption
7b:4f:ef:8c:48:2e:49:68:f4:6e:cf:f1:29:f3:ce:a8:44:d9:
4c:4a:97:86:93:d2:da:ef:1e:e0:89:97:fb:38:93:a3:ea:b7:
a6:bc:40:71:5e:de:b6:68:a1:a9:06:d9:41:c8:6c:8f:db:27:
16:be:e9:cc:26:5c:93:c7:9a:74:fb:9c:a8:f8:84:5b:0c:f5:
86:d0:63:01:f8:28:f4:e2:ba:11:e0:88:b0:10:db:25:da:06:
8e:29:d8:1e:bc:02:7b:47:cb:15:7e:f2:3d:af:93:ee:85:29:
cd:fc:f8:d4:05:29:3b:9e:e2:82:13:2d:0e:74:0c:5c:6d:9b:
14:75:04:d6:4f:0c:f5:ae:02:57:f7:a4:27:c4:5b:5a:4e:99:
bb:98:61:c6:a8:c7:b2:a4:4e:e4:c8:32:4e:e2:1e:a0:9e:d3:
e2:88:6e:c6:fa:22:c2:5d:1a:85:3d:c1:3d:a3:a4:07:fe:3b:
9b:ee:a9:c0:ce:d3:ce:56:a8:be:cf:2c:8c:70:d8:e0:cf:81:
2f:cf:0d:21:07:c1:ee:ff:6d:46:d1:53:da:74:d0:71:a3:a6:
eb:de:42:9b:31:e4:66:a7:6a:78:2a:57:21:12:a9:ce:b6:f3:
6a:44:ef:9c:03:87:43:a1:61:8b:9a:2e:6f:dc:29:df:25:75:
30:3a:ee:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:57:15 2025 by rpki-client