Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa
File: 46265eea-a395-4578-afc8-0bf551de327d.roa (raw, json)
Hash identifier: ZwUp4uyselfnflLWGcK8zbYB7/3tjuF0omerDK0DreQ=
Subject key identifier: E4:6D:81:95:25:C4:B3:58:BE:D4:6D:82:39:B5:34:15:B3:EB:32:3E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3525E691F088B18029228F36B57FAC46DB99E837
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa
Signing time: Thu 26 Jun 2025 19:38:58 +0000
ROA not before: Thu 26 Jun 2025 19:38:58 +0000
ROA not after: Thu 31 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:c0c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:25:e6:91:f0:88:b1:80:29:22:8f:36:b5:7f:ac:46:db:99:e8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 26 19:38:58 2025 GMT
Not After : Jul 31 23:59:59 2025 GMT
Subject: serialNumber=b1176da0b6ddc347a7307650af4fa9101300b2323615faef6dbce64c65d2db0a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7d:6b:62:cb:11:08:2e:62:95:bd:ff:c6:3f:
d0:1c:32:c5:ee:58:65:11:f5:b0:c4:0e:a0:79:a6:
70:e1:b9:2d:06:43:10:4c:22:81:2e:53:3d:26:a3:
17:bd:dc:f1:6e:d6:4d:2b:ea:24:6c:4c:29:24:0f:
3a:f3:16:38:69:1e:18:64:ed:a3:b4:3a:8b:4e:08:
1e:46:05:e7:61:01:57:a2:ab:17:fa:25:98:6f:eb:
45:80:8a:83:9b:70:f4:7f:3d:37:42:75:29:9f:ec:
a7:73:47:25:c7:4b:4a:f5:30:7b:a0:6f:dc:61:c0:
9c:dd:6d:d3:86:78:45:81:b7:61:1d:90:71:51:32:
48:c1:f7:1d:22:93:45:ed:ec:db:c4:59:c0:48:bb:
11:bb:55:99:a2:c7:b7:ea:31:2b:59:ca:30:95:9e:
a9:da:3d:1d:f6:9b:d8:00:62:ae:57:2a:1f:41:0e:
0c:ac:54:42:95:8c:ee:59:91:4f:06:01:b4:61:8f:
57:97:d7:5f:c7:4f:2f:9e:89:c9:76:e0:3d:eb:db:
66:85:42:47:73:91:de:ba:54:40:99:c8:e9:ca:ab:
97:39:9a:70:f1:e8:49:3c:4c:d4:8a:63:dc:bb:e2:
f7:56:ee:93:d1:26:d9:b7:26:c9:8b:05:eb:29:fb:
38:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6D:81:95:25:C4:B3:58:BE:D4:6D:82:39:B5:34:15:B3:EB:32:3E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:c0c0::/46
Signature Algorithm: sha256WithRSAEncryption
8a:39:23:b2:4b:c8:d7:15:7d:38:9f:fd:5c:5a:ab:0e:3a:eb:
77:62:07:3c:5a:f6:0d:d9:18:aa:94:81:fc:d7:68:27:f1:a8:
74:29:e0:52:eb:0f:8f:c6:39:98:42:d7:dc:fb:56:0f:cf:a7:
3b:5a:bc:98:c5:ab:c3:4c:20:ac:33:8c:f2:84:d5:a9:1b:92:
73:66:1b:b1:d9:0c:ee:ac:08:02:67:4a:d4:33:10:c4:c3:9a:
ab:a1:56:ca:78:42:9c:31:66:fa:1b:e8:36:a3:49:20:1b:ba:
40:5d:24:ab:d6:f5:a9:60:cc:5b:16:07:6a:c2:70:51:41:fb:
32:8b:c3:cc:c5:74:85:a6:d4:34:07:f8:58:84:b7:6f:19:a2:
14:cf:ae:5a:24:d5:91:8e:4e:f1:8e:2a:3c:a2:68:29:4e:eb:
21:02:c2:97:e3:29:53:67:b0:9a:cc:d3:f4:bd:41:5f:14:b6:
73:ca:9b:55:3e:c3:66:ae:4b:f3:ae:d9:4c:22:ff:d3:36:89:
7b:cc:3a:c4:77:40:93:a5:31:67:c8:18:f8:11:4b:12:6b:85:
53:ba:d5:5e:96:32:c0:d2:3d:87:d6:3b:f6:08:70:21:1e:03:
f9:19:8d:3a:b7:5b:e7:0c:5c:c5:d4:c1:44:f2:44:91:88:b2:
63:df:ff:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:41:32 2025 by rpki-client