Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35fc0413-357a-4ddb-84e4-70641635a6c3.roa
File: 35fc0413-357a-4ddb-84e4-70641635a6c3.roa (raw, json)
Hash identifier: gaaQvwnqhNQTCBhQuUJnAfRbKHij45rlxxn6mNB8YrU=
Subject key identifier: A5:2A:80:F8:B5:95:AC:BD:12:9A:EE:17:E1:B2:FB:33:03:97:08:60
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 62FAE5BC97493FD2E1A9EEF3C08BA892C8329B68
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35fc0413-357a-4ddb-84e4-70641635a6c3.roa
Signing time: Mon 16 Jun 2025 20:50:11 +0000
ROA not before: Mon 16 Jun 2025 20:50:11 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:9040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:fa:e5:bc:97:49:3f:d2:e1:a9:ee:f3:c0:8b:a8:92:c8:32:9b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:50:11 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=8fbeb4d2b76a038a0ed490446a348e2d51a7805dc42af5c88682157ba85957da, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:55:48:11:2b:a8:e2:51:7c:13:9d:c3:a1:
ac:f5:cf:37:37:1a:5d:2a:2d:b2:9a:4b:67:a0:a3:
d0:d1:3e:68:89:7b:8b:d3:5e:59:e3:29:14:91:bf:
6d:f6:33:65:4e:bd:05:fd:bc:a1:fb:4d:17:de:18:
13:09:87:89:aa:44:79:6e:97:a8:0b:0b:0e:ee:af:
72:ba:4f:86:18:72:7e:ea:15:ee:37:e7:98:ba:25:
66:0f:df:d6:97:68:35:2d:91:51:c5:a6:e4:6d:0c:
fb:e6:0c:1c:74:e9:a6:d0:08:1b:8a:34:88:54:d3:
0d:a1:d1:b3:67:ce:cd:ce:da:92:e3:67:54:ab:5b:
7f:18:e0:f2:54:06:ac:ae:5d:6f:35:47:6f:b5:6f:
c8:5b:48:71:1b:31:15:38:65:77:f1:d3:c3:14:ff:
3a:e4:ee:86:be:66:f1:c1:50:af:ba:fe:a9:66:aa:
cd:23:d1:51:cd:13:ae:d6:cb:79:44:5d:c4:04:9a:
ec:ef:e1:e9:17:d4:31:d0:f2:9c:79:51:bd:d6:c0:
9b:b7:9c:8f:3c:34:91:d7:5c:f0:f6:d0:85:e8:30:
f5:ee:a4:5f:46:6a:ac:51:9e:87:71:3d:af:75:b3:
28:7d:7b:04:75:e7:8f:6b:78:b7:62:c4:94:d4:ce:
0f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2A:80:F8:B5:95:AC:BD:12:9A:EE:17:E1:B2:FB:33:03:97:08:60
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35fc0413-357a-4ddb-84e4-70641635a6c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:9040::/46
Signature Algorithm: sha256WithRSAEncryption
12:a5:83:79:53:bb:bf:6e:92:c5:33:e8:94:9d:cd:bf:db:b0:
4c:b0:cd:78:d0:f4:59:cb:41:be:b2:bf:eb:d4:44:45:83:13:
47:62:e9:1e:ab:44:6d:0d:60:04:b2:71:e6:3d:eb:0e:b3:78:
b2:f7:72:18:59:ef:e8:0e:27:1e:94:91:e0:9c:3a:f3:13:41:
fe:55:ed:95:08:f6:96:23:c3:22:db:bc:ac:4b:f7:1b:c9:c0:
83:4b:c0:0a:f5:c5:21:db:cc:3b:f1:4e:d0:fd:94:ed:33:cf:
73:1f:5f:1b:65:a6:55:59:d1:fb:5c:92:d7:5e:1e:4f:8b:a1:
68:38:f7:70:47:88:b3:8e:ed:68:37:aa:5e:18:74:47:21:17:
72:31:8d:4c:86:1a:84:f8:5e:3e:32:c4:6e:38:98:3d:37:8d:
a1:a0:cb:41:56:3b:a9:b2:07:2b:cb:77:cd:52:1a:76:90:d9:
cd:17:71:b6:0b:2e:f3:01:89:11:7d:b1:a4:2e:78:35:c9:f6:
e5:3c:96:b0:31:95:1e:fb:08:e6:7e:bf:1c:ad:3b:6a:ce:42:
86:79:9e:2f:e5:e3:c1:05:90:a6:63:63:b5:02:f9:72:f4:e6:
92:4c:9a:49:91:0c:29:34:4a:8e:ef:f9:90:36:30:76:d5:42:
72:ee:72:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:59:10 2025 by rpki-client