Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa
File: 44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa (raw, json)
Hash identifier: BBnWg9V+H3+pstASevI7c9tK4YuJzyOodo/WuPMILzM=
Subject key identifier: DF:B6:ED:80:80:9B:E2:03:58:20:6C:A8:74:06:9D:D1:50:54:35:0A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4280836041B7FCDAC12D1B349D867313FAE4FCBA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa
Signing time: Mon 16 Jun 2025 19:40:33 +0000
ROA not before: Mon 16 Jun 2025 19:40:33 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:5040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:80:83:60:41:b7:fc:da:c1:2d:1b:34:9d:86:73:13:fa:e4:fc:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 19:40:33 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=d56b72e6ff625a367866f13d5bf3b7952255a7b1c55f07d3caa90455954e5f14, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:e5:70:36:ac:25:8c:fb:0c:34:15:39:03:
f1:02:eb:6a:b2:63:3e:1c:80:31:17:94:17:ab:b8:
d8:91:e9:74:3e:2e:16:04:1c:ef:5c:4e:15:26:cf:
42:d7:23:80:b3:5f:0b:42:74:3a:06:cd:c7:c4:2a:
1a:5b:c8:77:a5:a7:c6:88:05:51:b9:3f:84:b0:a3:
9a:7b:38:b4:82:e9:64:42:5b:78:ef:16:c3:41:eb:
93:ee:31:5c:8f:0a:3f:6a:7e:90:6d:28:3b:37:74:
d0:e8:f5:2f:c0:67:40:a1:23:1a:43:57:fe:d4:10:
76:61:49:c5:e6:83:60:9b:9c:8a:b2:8e:0c:a9:f5:
d2:21:ec:3f:1a:e4:3c:67:80:71:d1:2c:f4:40:32:
29:aa:07:d2:fe:f8:f0:03:ad:fd:02:e7:90:b2:7e:
f8:05:28:25:9e:f6:93:ba:b3:5e:76:03:8f:3f:94:
56:62:98:20:56:c4:8c:40:dd:e6:e0:ef:65:7b:64:
8a:61:68:35:e6:0c:81:65:16:7a:cc:ef:9d:76:cf:
aa:63:65:0c:71:12:6f:7c:65:fd:ee:c4:4a:dd:67:
e2:e3:8d:0a:93:b0:06:2d:16:d0:3a:31:c2:63:2c:
9f:a1:08:ec:1b:73:66:3b:e6:5e:3e:81:22:1d:cf:
e0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B6:ED:80:80:9B:E2:03:58:20:6C:A8:74:06:9D:D1:50:54:35:0A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:5040::/48
Signature Algorithm: sha256WithRSAEncryption
63:ac:b5:a9:ef:97:45:ac:e6:8f:7f:ea:20:37:69:47:4e:69:
be:cc:47:e4:3e:e6:9f:0f:3f:fc:1e:7b:aa:59:76:b9:c0:a0:
06:f2:73:40:cb:be:6a:61:c3:f4:e1:2e:e6:1a:ac:0d:52:71:
b3:b6:90:9d:5f:bd:6c:e2:f2:ae:75:cd:b6:2c:81:f8:84:20:
08:b1:09:58:d0:d2:d3:05:a2:fa:1b:ca:67:79:0c:9c:b7:37:
e1:14:e4:48:68:87:d0:fe:16:58:f1:0d:de:7e:70:c6:99:f3:
15:17:50:13:66:40:f0:3d:c8:d4:09:74:06:5f:4a:d3:32:1d:
4a:97:07:84:f9:2c:2a:d3:9f:eb:68:b5:26:0a:c7:c9:3f:e2:
bb:4a:ec:7c:8e:f2:14:b2:62:cf:33:4a:fe:04:b4:eb:2d:51:
27:88:8c:de:c8:53:4a:45:4a:cc:6e:08:b5:20:65:98:5e:65:
e1:19:88:db:68:54:a8:ff:ca:db:c2:4e:80:03:88:76:9c:32:
7c:01:c6:2e:98:1c:c3:ff:ca:03:62:a7:10:41:34:e9:00:96:
51:ef:e8:51:e4:98:71:a7:fe:e2:33:61:75:e3:76:ac:cd:98:
75:45:48:25:88:53:bc:63:ba:03:c4:1d:4d:0d:7f:4e:af:a1:
f1:ec:6c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:51:11 2025 by rpki-client