Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa
File: b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa (raw, json)
Hash identifier: eCf+N1lo/aGfxramkh2xIQhgHLiMPEBJSC+odiHj3Bc=
Subject key identifier: AC:7E:D7:C9:AB:CA:17:D6:2B:8C:E9:BC:5C:4F:18:DD:E5:9B:CF:50
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5FAFE0CEE25827A915F6CF04D3409F124B594A24
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa
Signing time: Tue 19 Aug 2025 17:01:01 +0000
ROA not before: Tue 19 Aug 2025 17:01:01 +0000
ROA not after: Tue 23 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:af:e0:ce:e2:58:27:a9:15:f6:cf:04:d3:40:9f:12:4b:59:4a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 17:01:01 2025 GMT
Not After : Sep 23 23:59:59 2025 GMT
Subject: serialNumber=f5ca703deb411bcf6ce92daaa0492e073f72897db8a9d7eeca42f9838dc73321, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bc:24:8a:2c:88:15:80:13:83:0f:02:c6:43:
87:4c:3c:85:2b:b0:d3:60:36:e0:f0:90:5e:32:8d:
b7:c6:1e:7a:82:2a:a0:77:13:5d:da:a1:02:b7:19:
5d:5e:ae:e7:c4:43:07:cb:fe:7a:45:cd:f5:72:37:
e6:f7:21:f6:9d:1f:57:c7:ff:77:6a:31:a8:9c:bf:
a3:8c:df:2a:4a:6b:0c:79:f2:13:36:6e:5c:1a:92:
f2:df:ed:e4:b9:46:02:87:c1:62:04:16:1d:cf:7d:
3e:7d:d4:ae:9e:b1:9d:e7:aa:db:8f:4c:b1:93:74:
95:86:8e:2c:d9:3f:b0:db:17:81:aa:23:76:b7:17:
c5:7c:fa:aa:fa:23:54:e9:f2:14:c4:6a:15:ff:ee:
59:c1:0f:30:2e:93:73:e9:58:81:44:a7:13:f2:1d:
79:4d:99:8b:54:71:a0:72:59:c2:22:27:b3:98:02:
d6:c1:69:05:0a:64:0b:1b:27:ff:68:91:94:59:34:
68:6c:d2:0f:e9:4e:84:0e:b6:15:15:cb:69:12:b5:
e7:c3:4d:b3:9e:35:91:ce:c1:82:31:2e:3f:7c:5c:
c6:31:a3:d7:e5:eb:5c:c4:e9:c3:6b:68:c1:56:a0:
d4:13:a3:d6:10:3e:38:f5:bb:57:2d:5e:9e:62:40:
d7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7E:D7:C9:AB:CA:17:D6:2B:8C:E9:BC:5C:4F:18:DD:E5:9B:CF:50
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.222.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:b7:90:34:3e:46:0c:d3:47:3b:c0:15:d8:ad:ae:c4:75:b9:
a9:89:43:b7:3e:ef:e0:7e:5d:7f:31:35:2d:89:84:39:f9:14:
90:52:91:a2:06:ad:d9:c9:b0:b1:7d:aa:c5:50:2e:6a:cf:7d:
1d:60:04:66:ce:8c:0c:c8:ff:d0:3e:32:6e:a9:d8:bc:ad:c5:
0b:df:ec:e6:fa:fd:02:2f:ae:bf:b7:7b:de:e1:f6:b3:3e:ad:
85:d7:92:32:38:26:37:18:ee:2a:9f:85:dc:c6:2e:59:b7:a1:
dc:05:77:b2:c8:13:d9:3c:7c:60:a5:de:d1:8e:76:c5:f1:6f:
58:d1:a0:7e:55:40:12:55:3e:1b:51:7b:ff:21:de:b4:8b:2c:
a8:67:3d:a9:3e:db:c6:73:a0:a9:84:6c:27:60:42:2f:76:b8:
9d:aa:cf:70:3f:98:f3:31:34:34:c0:41:3b:ca:b4:66:37:cd:
3d:be:47:ab:1b:89:05:e1:7c:32:fa:40:14:ff:2f:e0:e6:0f:
58:51:c3:eb:ab:18:27:26:af:6e:c9:eb:cb:41:8e:7f:ec:66:
c8:56:74:3a:5b:e4:db:18:d4:99:c7:ab:a2:00:f9:ec:d8:33:
8f:2c:eb:f0:f1:e8:52:dd:19:8b:73:c1:5d:b6:0b:9d:52:12:
f4:2c:29:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:48 2025 by rpki-client