Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/24b496aa-161c-4d5d-a9ca-3ba09772390a.roa
File: 24b496aa-161c-4d5d-a9ca-3ba09772390a.roa (raw, json)
Hash identifier: pWsaF72F9PEe5GaJhBm19qzPgUhPQMVb76bcn1tZIu0=
Subject key identifier: 25:A1:AA:33:1F:67:78:A9:52:48:4E:F2:EC:3E:0D:A2:14:3E:48:F9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1DB2CAC4752788155D1724916EB0F65FE8B518F6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/24b496aa-161c-4d5d-a9ca-3ba09772390a.roa
Signing time: Mon 16 Jun 2025 21:20:44 +0000
ROA not before: Mon 16 Jun 2025 21:20:44 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:b2:ca:c4:75:27:88:15:5d:17:24:91:6e:b0:f6:5f:e8:b5:18:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:20:44 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=2670ad7be10d4bcf73f828ea051f9d06f118c6329a293cb297a74fa3003c55a8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:59:39:42:bc:bf:8f:ab:8b:90:98:fa:42:07:
f0:f4:9d:cb:8d:de:af:a3:5e:04:21:04:38:9b:35:
53:d3:37:0c:7a:1a:81:bc:23:93:ec:7c:b1:aa:ff:
b9:4e:d0:86:58:66:35:87:b2:32:f8:24:f1:68:d5:
7c:4b:21:89:b1:56:a7:70:60:d8:8f:30:42:00:b7:
3e:9b:f3:82:69:b4:a7:5e:a1:78:ad:0d:8b:9c:30:
62:3b:77:81:82:e8:58:0f:24:df:5a:61:49:ee:b1:
f5:95:da:5e:26:3f:17:09:56:91:30:59:43:0b:2a:
af:3b:71:a0:5d:1b:9d:8e:cf:c0:c7:0f:c3:3c:71:
f1:ae:68:7b:8b:f5:ea:40:5f:7e:e2:21:36:57:80:
98:dd:2b:89:8c:be:a7:2f:8b:6a:af:58:6a:30:c1:
25:06:25:3c:e1:dd:a4:ce:38:3f:62:db:13:1f:b0:
60:b1:4e:28:a9:32:56:f3:25:d5:ab:31:b1:8a:ad:
d8:33:90:6c:ae:00:45:90:23:1f:45:50:b4:97:09:
8c:8a:19:28:a2:58:6a:3d:0a:68:72:c5:2b:19:80:
81:8d:f5:58:88:07:92:f0:56:6f:24:39:44:44:89:
f1:f2:42:f1:a8:fb:be:b3:db:fd:b4:aa:4d:d9:7f:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A1:AA:33:1F:67:78:A9:52:48:4E:F2:EC:3E:0D:A2:14:3E:48:F9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/24b496aa-161c-4d5d-a9ca-3ba09772390a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:6000::/40
Signature Algorithm: sha256WithRSAEncryption
a6:c3:d4:d6:7f:04:ce:a6:84:c0:55:54:df:3c:39:6a:cb:85:
64:f4:6c:65:13:67:26:94:27:71:c1:3d:dd:03:88:df:ab:41:
7f:a4:d7:fc:3a:05:02:0e:fd:37:b4:73:04:c1:96:7f:36:01:
71:24:4f:22:b0:d9:92:d2:79:65:a5:c9:44:e0:2e:ba:21:96:
c1:79:2d:04:da:e2:f4:11:bc:dc:c7:c1:c9:6f:22:5a:6c:d7:
3b:d6:bb:54:b6:09:01:25:7e:83:b7:52:63:8f:c6:b2:03:63:
a5:fe:d5:ee:49:cf:f1:70:07:04:d3:85:cb:48:21:ad:0e:bf:
89:5b:ff:17:1b:20:9d:c6:c9:b4:f7:64:80:ea:99:e7:b6:1f:
c9:5d:dc:ff:70:6d:ed:bc:23:d5:11:a4:9e:0e:de:79:6e:0b:
69:ff:fc:7d:e6:79:72:7b:7e:bd:50:6b:84:90:7e:53:86:16:
0b:8f:65:00:02:7e:ab:8c:9b:d6:ba:39:c1:c0:a8:00:c5:89:
e1:14:4d:07:e9:50:09:f4:70:69:bf:5b:77:86:8f:fb:1a:f8:
f0:64:33:5e:97:98:92:e3:f4:a7:a6:fd:76:14:4e:bb:21:71:
0c:a7:77:72:6a:d4:4c:79:53:f2:8f:54:0a:c2:10:03:2c:2d:
d4:8e:34:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:56:33 2025 by rpki-client