Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa
File: d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa (raw, json)
Hash identifier: 787CbTKw8SLI9xmnUF7Qkaq20ZMTcL40SCP5PgSB4Ig=
Subject key identifier: 0B:2C:30:E2:3B:A8:75:3E:0C:C9:AC:78:14:6C:9B:B1:5D:25:54:14
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 55F83D24AFE24E6C88FC9DC2C4B789B0435D4EB0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa
Signing time: Tue 19 Aug 2025 17:00:04 +0000
ROA not before: Tue 19 Aug 2025 17:00:04 +0000
ROA not after: Tue 23 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:f8:3d:24:af:e2:4e:6c:88:fc:9d:c2:c4:b7:89:b0:43:5d:4e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 17:00:04 2025 GMT
Not After : Sep 23 23:59:59 2025 GMT
Subject: serialNumber=161cfcfdfd607e4f8542fbb75af332d570e5eda82640fe574d2d48e5bb9b99c2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:01:8b:c4:09:38:ea:ca:f2:22:ff:61:7b:
c7:1a:35:73:3c:db:89:21:bb:1c:38:bd:17:88:b7:
59:5a:19:67:44:94:3c:6f:20:49:f2:ae:1d:e1:ce:
0c:0f:08:33:90:0e:c2:cc:b2:dc:1f:91:20:92:34:
77:b0:93:c8:98:85:e6:05:7f:8a:54:90:cd:6e:74:
19:0c:b2:cc:5a:65:c4:1e:25:0d:38:6c:fb:4e:fb:
ee:80:2d:e0:5e:c1:2d:61:a7:43:db:e3:1d:be:17:
ba:8e:b8:46:0f:a3:de:ad:bd:08:8a:61:f6:47:3d:
a6:11:c9:22:ee:ae:cf:ee:5c:2f:bb:eb:8e:8d:8a:
d7:84:c2:8c:32:6d:71:a5:79:fb:14:20:b6:b9:63:
e1:35:f2:1d:5b:2b:17:4f:20:68:3d:5b:0a:41:fa:
d9:e1:b0:3b:1b:4f:f2:a3:24:e2:6c:55:3b:c9:11:
5b:66:37:0f:b6:a6:c7:ff:64:9c:a4:39:ad:31:08:
8d:40:43:0b:be:9d:2c:2b:72:2a:9d:08:13:b2:ff:
88:be:80:68:12:0d:35:c1:9a:69:a4:03:4b:e0:00:
b3:cc:3a:cb:46:89:58:25:50:1b:48:93:d9:7d:eb:
57:22:c8:17:6e:b6:37:df:ed:cb:5f:a9:9c:fa:59:
dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2C:30:E2:3B:A8:75:3E:0C:C9:AC:78:14:6C:9B:B1:5D:25:54:14
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.224.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:29:09:2f:3a:41:b9:cb:8e:c4:f4:7b:d0:19:49:d8:38:32:
b0:a0:b8:35:30:6f:bb:1f:9c:60:37:5b:8c:86:d7:ec:46:b2:
55:56:b9:51:06:c5:84:97:1e:ab:5d:c8:08:b0:5c:7d:72:25:
76:ab:f0:d4:63:14:6b:74:99:bf:2a:c7:12:78:4d:3b:d9:95:
a1:a3:a2:43:ab:e1:97:62:e0:17:ea:89:0b:9d:3e:c8:ab:ae:
80:db:9c:9b:5a:44:84:23:af:82:37:c3:a1:f9:49:7a:a0:5b:
81:df:c4:49:69:bf:dc:39:56:13:7e:01:b6:df:96:16:23:41:
55:d8:c4:ca:d8:51:59:d2:98:5b:6b:fd:02:4a:4e:f3:3c:11:
af:1d:f6:9a:66:41:04:ee:81:61:96:79:2a:1e:ee:f5:ff:fa:
01:45:18:5a:19:b7:e4:97:74:e7:a8:99:22:a3:24:a5:6b:db:
b8:8c:83:23:38:b5:30:76:d8:a8:2e:85:c1:37:3f:d2:a2:24:
b5:c3:f6:39:f7:d1:fb:39:a3:e0:de:b9:63:a0:be:06:b0:b4:
8d:1f:6d:00:83:60:e4:ab:bb:cb:87:d2:bc:4d:8f:be:1a:0f:
27:8c:7b:64:7f:2d:6d:df:7a:78:d4:f4:78:0c:34:86:86:f5:
0d:ab:b5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:45 2025 by rpki-client