Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4581b00e-602d-4a4b-b191-1af16885c541.roa
File: 4581b00e-602d-4a4b-b191-1af16885c541.roa (raw, json)
Hash identifier: 4oBFlqFb4DBmf3tMvZmhbU5TPesdOmauc1NviziaLjA=
Subject key identifier: 4E:DF:09:2D:9C:F7:D8:AC:21:5C:F8:4B:37:6C:5D:D9:C8:87:8D:A3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5C5285D1EC110B45D9DBCDFE23FCBC43938F4CA8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4581b00e-602d-4a4b-b191-1af16885c541.roa
Signing time: Thu 26 Jun 2025 19:52:05 +0000
ROA not before: Thu 26 Jun 2025 19:52:05 +0000
ROA not after: Thu 31 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:52:85:d1:ec:11:0b:45:d9:db:cd:fe:23:fc:bc:43:93:8f:4c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 26 19:52:05 2025 GMT
Not After : Jul 31 23:59:59 2025 GMT
Subject: serialNumber=7eefb0283d01ba78c814a2ae2dcd4573a33b576e791be4f697c2c005e4d230b5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:87:9d:3c:71:dc:1d:7f:9c:8d:87:46:a7:66:
a9:85:06:5a:ec:10:a1:fd:14:f4:d3:73:5b:4c:a9:
c2:ce:e1:18:e9:33:c9:b0:af:78:78:47:55:d5:a1:
4d:9a:40:2a:7e:75:06:c7:e2:6b:10:1f:5d:82:f9:
66:d4:ba:82:52:06:c8:1a:85:9a:72:af:64:1a:5e:
ae:fb:01:a5:f4:bd:9d:99:31:8b:21:96:ae:dc:3b:
52:48:d0:98:fd:6e:5e:35:02:6e:0e:fb:98:30:6a:
61:cf:19:e4:4f:1e:e6:0e:35:00:e4:7f:4a:59:ab:
40:bd:a9:05:ba:71:c7:1a:21:1f:5d:99:c3:a8:50:
ec:36:c8:c5:55:07:c4:e6:15:fd:91:a6:80:7a:40:
ad:6b:00:6c:66:f7:4a:35:43:d0:d6:b4:0b:66:66:
6c:35:1e:a5:25:7b:48:4a:dd:f6:d0:e3:25:ac:f0:
ef:37:57:a1:fe:ef:9f:1c:f8:13:af:ba:55:7b:fe:
aa:e1:2c:df:17:8e:25:55:90:a3:03:ac:c5:e9:d0:
5a:d3:d0:b9:b3:47:2f:e4:fa:34:d8:51:97:3f:aa:
8a:bf:6b:5f:74:7e:76:e8:a0:ad:e8:95:46:87:6d:
95:8e:e3:f2:ee:f6:f7:49:39:a8:b3:e0:5e:fc:de:
3b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DF:09:2D:9C:F7:D8:AC:21:5C:F8:4B:37:6C:5D:D9:C8:87:8D:A3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4581b00e-602d-4a4b-b191-1af16885c541.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:5000::/40
Signature Algorithm: sha256WithRSAEncryption
c0:45:01:d5:6e:cb:65:01:f1:3b:e9:77:7f:d8:f4:74:f0:39:
df:59:db:ab:a5:7e:38:a2:85:6c:94:04:3a:05:b3:93:f0:21:
8f:f2:7c:8e:fb:70:d1:15:da:bd:75:b1:c4:a2:b9:cb:81:5a:
95:25:dd:28:1d:d3:56:56:fa:12:92:0d:f6:68:f5:48:ba:0b:
df:66:fd:0d:de:5d:bc:fc:d3:5e:f5:b0:3c:1d:b0:8f:36:40:
7a:48:94:e2:97:d2:0a:0e:1a:59:31:ca:e7:7f:19:98:69:52:
cd:58:be:cc:d9:73:54:30:76:2b:72:81:e7:ad:5d:6c:55:b3:
76:e0:b0:ac:90:04:0b:ff:ae:13:ba:26:2b:9c:c2:ec:ac:2c:
cb:95:c6:e7:04:81:08:cc:98:bb:e8:49:b8:aa:63:c3:7d:d4:
f0:e0:f3:fa:49:60:6a:e1:87:8c:d8:30:95:04:e4:2a:5a:54:
43:6f:78:ce:8b:34:45:ef:41:c9:76:96:2d:48:2f:4f:be:93:
93:38:05:07:a2:eb:2d:ff:36:22:a4:3a:8e:ce:e2:a8:1c:8d:
e1:57:25:f7:cc:b2:ae:d6:7b:18:fa:7f:cf:a6:d0:e1:df:1c:
8e:16:03:ec:1e:a2:f9:45:d1:71:24:26:4f:52:0c:26:a2:bb:
30:8a:e5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:19:59 2025 by rpki-client