Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b50b516-b90a-4f69-ace2-8e904f240f1d.roa
File: 0b50b516-b90a-4f69-ace2-8e904f240f1d.roa (raw, json)
Hash identifier: 91vuRQUdzOLJszTFASNc8wUrICyCxm8yT5FUHtykLgQ=
Subject key identifier: DE:A5:5C:CB:ED:68:BF:81:98:49:79:AC:88:A1:AA:52:3A:C4:D2:5A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7175999AD9DCEBF8FFF82B8B08389C283D26880F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b50b516-b90a-4f69-ace2-8e904f240f1d.roa
Signing time: Mon 16 Jun 2025 21:30:23 +0000
ROA not before: Mon 16 Jun 2025 21:30:23 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01a:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:75:99:9a:d9:dc:eb:f8:ff:f8:2b:8b:08:38:9c:28:3d:26:88:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:30:23 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=d2c0c06583b1f2ff4cbb3296b729eef08d5cc4416b77ac34c19555217ce9e691, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:25:96:66:a6:2a:00:49:64:87:46:3d:fb:
fe:7f:e6:e9:6a:24:19:b4:1e:4f:ab:0a:34:54:6a:
60:22:89:bd:9c:f3:66:7b:8a:b9:78:02:a0:0f:34:
3d:95:04:db:5a:72:5f:75:af:27:83:b6:35:b5:6b:
79:e8:a4:2b:82:00:72:d3:4a:f8:55:5c:87:6a:e2:
f0:1a:65:02:55:da:c1:b4:ff:83:77:c2:75:b0:af:
d1:00:62:47:fa:b5:b9:33:7c:92:60:28:da:a8:93:
fa:af:b5:1b:a9:c1:8a:3e:5b:48:79:4b:8b:14:05:
07:a3:be:94:85:7b:cb:d7:44:f3:16:b6:1b:2c:74:
e1:bb:75:1e:b2:3c:fc:20:f5:11:7d:9f:40:88:04:
0f:0b:48:35:7f:05:93:64:00:ae:ed:bd:a6:ba:cc:
76:27:3b:5f:b1:dd:bc:1c:bd:44:a5:2a:e3:4a:ca:
fa:b3:a3:41:91:12:e7:f2:e7:67:97:8f:d3:cb:25:
d4:86:1b:0d:ca:c0:38:d0:11:ef:63:f1:90:25:0b:
b2:99:07:ae:51:22:30:79:18:e6:92:f0:bc:8f:96:
c6:a3:73:8d:b0:18:9d:27:d7:e9:9c:2d:d9:bf:d8:
83:4a:22:be:ee:da:33:f6:c4:23:21:25:cd:c2:2d:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A5:5C:CB:ED:68:BF:81:98:49:79:AC:88:A1:AA:52:3A:C4:D2:5A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b50b516-b90a-4f69-ace2-8e904f240f1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01a:c00::/38
Signature Algorithm: sha256WithRSAEncryption
72:6a:b2:31:cf:51:ab:74:55:f4:e8:10:44:6a:86:3c:dc:76:
fc:8f:bd:29:cd:62:68:f4:9c:ac:d1:10:00:e6:e6:22:51:a5:
0e:63:ef:8a:99:b8:ed:81:29:b3:5f:84:5c:60:e7:d4:00:fe:
29:c0:a6:a3:6f:fa:6e:e1:32:f3:ae:44:01:f1:50:60:23:b8:
4b:c2:c5:54:78:18:80:fd:1d:a3:8d:10:0d:e1:03:a6:93:92:
6c:04:c9:56:00:9c:b1:27:cc:d6:05:de:90:33:35:a7:7c:33:
d4:df:9e:33:3a:53:42:8a:58:5b:f7:d5:7e:6f:be:51:cd:7d:
ac:b3:18:45:42:cb:9b:3f:ce:34:55:bf:dd:ae:40:12:11:b5:
1b:76:39:e9:0d:af:c7:56:94:f6:9c:94:64:be:53:f5:aa:0e:
ea:14:25:9a:3f:e3:f8:eb:50:ea:69:74:61:58:9c:1d:f6:c1:
f7:25:84:12:15:40:3d:22:d8:57:10:ff:cc:86:95:1d:df:e9:
4f:29:a4:24:fc:bd:71:14:90:47:ec:1a:d9:b2:df:a9:09:a5:
cb:6a:d1:45:ad:16:a9:63:3b:e1:20:79:26:85:fd:f6:3f:38:
e7:df:22:5d:1a:45:47:79:5e:83:a8:51:52:f1:fb:77:f4:00:
47:0c:1a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:25:23 2025 by rpki-client