Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1bb27900-3531-4083-aef8-cc7656dba027.roa
File: 1bb27900-3531-4083-aef8-cc7656dba027.roa (raw, json)
Hash identifier: t/C9dPe2qgAQf/F5EVJOokyyr/q5pxxIZk+YceHwSaA=
Subject key identifier: 74:CF:BB:11:95:02:6D:C6:E2:C8:9C:BD:FD:8F:60:B4:74:37:7F:4E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7ACECD6A2DCFAA189A4940B81FB664DA93DDFE53
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1bb27900-3531-4083-aef8-cc7656dba027.roa
Signing time: Thu 26 Jun 2025 19:52:12 +0000
ROA not before: Thu 26 Jun 2025 19:52:12 +0000
ROA not after: Thu 31 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ce:cd:6a:2d:cf:aa:18:9a:49:40:b8:1f:b6:64:da:93:dd:fe:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 26 19:52:12 2025 GMT
Not After : Jul 31 23:59:59 2025 GMT
Subject: serialNumber=b4a655f921827558d81c20e0da526a6bf58a84c84e892be04000aa7d5979b7fa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:64:74:a9:29:45:06:85:83:42:d7:e3:b7:
82:8f:0c:04:ef:43:b4:7d:59:66:4a:6e:e8:bb:7d:
c0:88:40:ef:62:4f:61:8f:92:0a:c0:df:3e:4f:72:
54:a8:79:4f:73:c7:0f:02:4d:28:1f:0b:1f:00:d8:
41:89:f3:5c:8e:4b:e1:03:f7:b6:9e:e0:60:8d:1e:
f4:e7:20:83:8d:71:ec:c1:4f:0b:d5:a7:73:4b:89:
38:11:90:e2:3a:23:82:19:65:66:27:27:6e:e3:d8:
66:16:11:23:bb:1b:b5:d9:4f:7c:e7:e1:72:e0:f1:
38:ba:a2:aa:84:49:e1:f0:1a:32:39:2e:12:60:6c:
88:f0:4c:5c:c4:d6:b6:b0:b4:89:00:4b:83:56:7f:
64:8f:e4:88:7f:a3:43:cf:9a:0e:6e:3a:63:dd:82:
77:d3:30:12:0c:b8:80:b2:0a:c4:40:f2:72:d8:9b:
58:c7:11:2f:42:c7:c6:e0:97:dd:c7:bf:14:91:bb:
6b:41:8d:83:91:15:3b:68:62:f7:4c:db:40:44:5c:
60:18:6b:57:cb:34:3f:99:bb:73:53:21:7e:b3:9c:
e5:84:c2:0c:02:70:ff:a5:e5:f3:79:d1:26:db:32:
cb:59:61:67:d1:58:02:12:01:4d:b6:14:60:2d:4c:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CF:BB:11:95:02:6D:C6:E2:C8:9C:BD:FD:8F:60:B4:74:37:7F:4E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1bb27900-3531-4083-aef8-cc7656dba027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:b000::/40
Signature Algorithm: sha256WithRSAEncryption
13:65:a0:20:1a:90:0d:93:e5:67:7a:06:dd:5b:cd:92:3b:be:
3b:da:bb:a7:21:3e:70:9d:89:45:a4:85:ca:0a:bf:c3:72:69:
83:65:bb:bd:0c:8f:ec:43:f4:ad:a2:eb:6c:e4:dc:8b:5c:fe:
63:1f:4b:f1:80:2e:40:56:29:5b:1d:fd:ec:39:c2:91:56:a6:
0f:cc:5d:b6:4f:08:67:df:1e:5e:75:76:92:db:a5:6e:d2:34:
16:11:72:31:cb:ae:2e:49:4e:1e:36:6f:06:3d:cb:68:3d:e5:
6f:1c:b2:34:59:ee:22:c5:18:7c:62:c6:a7:b4:5f:08:2c:b3:
9f:ff:d1:1b:c5:05:14:63:89:95:d7:cf:3a:6e:c7:8b:96:5d:
db:d4:b1:bf:2d:8c:f8:9e:af:2b:0c:85:ae:8c:30:7b:c7:b6:
34:38:85:bb:b0:5f:d2:c3:70:71:9e:e4:ee:47:0b:eb:92:b7:
01:95:f8:9e:36:b9:85:cb:60:9f:b1:63:29:34:c3:57:71:b7:
88:39:73:bc:32:10:b1:53:cf:87:db:40:08:79:53:7a:de:fa:
0f:d0:c2:dc:d1:9b:6c:80:84:89:05:a2:55:e6:8d:8b:9f:d7:
a1:7f:55:ee:06:85:4c:37:70:62:dd:74:0e:6e:d8:9a:97:9d:
e0:ab:96:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:56:31 2025 by rpki-client