Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1d9a8425-e89b-4598-a680-84c5b341edfd.roa
File: 1d9a8425-e89b-4598-a680-84c5b341edfd.roa (raw, json)
Hash identifier: O1gSt3H5wPd00BYp3mYJNRhLBAZfz6PPoZ0+PUJ41CA=
Subject key identifier: 70:0E:14:66:8B:23:CC:82:A2:79:C4:B8:6C:DE:44:64:2B:A5:E9:2B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3414AB1B91B38D281F73A4FDE3F5E0FCC0048EA1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1d9a8425-e89b-4598-a680-84c5b341edfd.roa
Signing time: Mon 16 Jun 2025 21:11:15 +0000
ROA not before: Mon 16 Jun 2025 21:11:15 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:14:ab:1b:91:b3:8d:28:1f:73:a4:fd:e3:f5:e0:fc:c0:04:8e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:11:15 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=86bd988f4ee72ac33918bedb11fe2fee007f14f0ee6d98c0e9e9709ea0f030db, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:e4:f6:5c:d8:1e:da:d4:ce:e8:80:4c:6e:
c1:ed:16:75:c1:83:5f:65:a8:a2:68:60:60:e4:45:
fb:82:07:49:f2:98:bf:7d:5d:7f:2d:9b:d3:5b:b7:
23:76:51:ff:52:a3:77:9a:a1:47:c7:5c:56:f1:89:
7b:f7:64:cd:34:ed:80:b7:e6:6c:0e:4b:75:88:ad:
ed:ee:77:a4:19:cc:96:7a:fb:7d:15:4e:20:30:26:
b1:d4:a2:27:19:19:07:e3:43:41:be:d6:10:52:6f:
71:a6:0d:64:b6:4d:34:e2:2b:11:18:f1:02:b1:34:
ac:c6:78:5b:7b:99:18:fd:0f:4c:d7:ed:68:e0:16:
bf:f7:2e:e7:ef:e7:f8:45:76:fd:20:1f:55:3c:04:
5c:9f:6a:54:09:06:2b:c9:c1:5e:02:99:23:98:13:
33:2b:14:37:5b:a7:cb:2d:96:4b:4c:30:66:e5:1c:
d0:42:6f:20:da:0e:b0:f4:11:7e:e9:4e:2e:8e:b9:
c1:65:db:ea:2a:10:21:d4:5b:f2:3b:40:55:ad:00:
af:e9:83:69:99:bc:ce:16:f4:00:07:8a:d9:6c:95:
e8:8a:89:66:22:dd:4b:11:85:8e:13:a0:74:b8:2d:
be:42:0e:0a:7b:b5:17:1b:7b:ad:ce:9d:e0:26:93:
97:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0E:14:66:8B:23:CC:82:A2:79:C4:B8:6C:DE:44:64:2B:A5:E9:2B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1d9a8425-e89b-4598-a680-84c5b341edfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:2000::/40
Signature Algorithm: sha256WithRSAEncryption
ae:8d:2f:7a:93:a8:73:b9:9d:52:e2:b2:5d:51:c9:97:fa:b5:
c2:c3:3e:ce:6b:23:9e:02:58:ba:8f:30:b2:3b:9e:c8:04:23:
40:72:5a:30:e7:31:12:e5:3a:62:b9:0e:a3:ff:af:0f:39:72:
e2:6e:e0:86:21:6f:1f:8e:00:52:bb:e4:82:99:de:16:59:74:
d3:7e:e7:7c:51:e0:c8:0c:ba:f5:bf:ea:56:78:13:9a:ec:89:
ff:db:73:0a:c7:09:d8:c0:0c:d4:9c:c5:c8:a7:36:34:b5:b9:
2c:f3:d3:ce:a5:72:f3:ab:65:63:54:82:8f:93:bd:60:02:71:
a5:f4:14:75:46:47:00:98:c6:15:3a:7d:33:35:5d:6b:4b:be:
22:60:97:27:44:79:6b:d6:ad:72:59:fc:ac:b2:f2:ea:3a:04:
53:7e:21:cd:b3:42:b4:8f:23:ac:8f:a6:5c:29:d7:3e:45:5f:
d0:e2:8a:83:18:6f:b7:c0:c1:5d:c0:98:19:a4:97:8a:54:a8:
55:d3:a1:a3:7f:3f:22:9f:8b:04:9b:cf:9f:63:d6:9f:d4:f2:
fe:60:b7:b0:e0:10:85:af:9f:66:43:c5:79:6b:15:e3:4c:00:
09:99:22:b2:79:7e:e2:83:05:ca:fd:a6:b1:9d:cd:3d:df:8a:
96:f8:f5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:42:34 2025 by rpki-client