Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa
File: 470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa (raw, json)
Hash identifier: 6iIn+F6H5l/A/FXgyJs8FjHCxXKBJIm6vp0lgO3yOQs=
Subject key identifier: 23:EC:1A:84:F9:11:F6:87:BE:DF:A9:C4:A9:20:73:1F:04:2E:DF:10
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 24D1554B724994B64D02815C7A949753F921ED59
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa
Signing time: Mon 16 Jun 2025 20:30:09 +0000
ROA not before: Mon 16 Jun 2025 20:30:09 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d1:55:4b:72:49:94:b6:4d:02:81:5c:7a:94:97:53:f9:21:ed:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:30:09 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=7767d2bf89e4decfa4ee475d234ab1349e2c4c4319016c3033f072d8c4194554, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:69:39:a3:7c:fd:47:0c:25:2b:cc:c7:9c:
c5:81:b0:c4:0c:22:20:fb:94:6d:4e:a2:9f:21:05:
73:24:bb:d5:b6:2c:82:d1:bc:1d:e7:0d:2d:cc:25:
63:fc:13:2c:16:b7:81:32:11:03:ed:84:a4:56:d5:
66:d6:d7:66:ae:95:a7:e5:a6:bd:a7:26:f4:7e:59:
f7:8b:86:b5:a9:22:e3:db:49:5e:d9:7f:1f:c7:da:
ca:76:94:55:b4:3d:ee:e7:e7:e6:c6:7d:d0:c1:41:
9a:b0:90:68:40:be:5b:d2:7b:a8:78:94:15:e0:e2:
df:69:98:bd:3c:05:f1:78:9f:85:e4:6f:09:43:f7:
ee:2c:4c:85:43:74:42:c7:86:19:43:58:05:1b:56:
ce:9c:e0:90:ca:a7:ce:6f:e6:a6:e6:63:48:4f:85:
e0:7d:e6:53:9b:e1:72:ed:51:dd:ff:16:e6:12:e0:
e0:ed:80:c6:c5:44:7d:7a:16:db:c2:dc:38:82:ed:
e8:e6:02:f5:b8:43:93:78:23:97:cf:07:75:7c:72:
97:23:65:cd:81:7f:68:33:c2:2e:e2:d4:3a:11:60:
86:67:22:45:8d:aa:c6:32:0c:74:a8:81:53:0f:07:
c2:6f:d3:ef:c3:24:f3:53:79:0f:b6:a7:86:7c:93:
9c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EC:1A:84:F9:11:F6:87:BE:DF:A9:C4:A9:20:73:1F:04:2E:DF:10
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:1000::/40
Signature Algorithm: sha256WithRSAEncryption
74:42:f8:51:86:7b:35:b2:a4:26:0a:4b:a7:f9:c5:5f:6e:73:
ce:0c:49:4d:fa:92:06:f8:12:18:23:03:a9:3f:26:37:c4:6f:
10:2b:36:90:bf:93:95:ba:44:3f:52:78:6b:d2:10:e5:20:27:
52:c1:15:80:0a:eb:ab:b7:d9:98:31:f7:28:79:9f:27:be:51:
23:d3:27:32:4a:d9:b0:a5:c9:b7:a9:a3:f9:f4:db:94:4e:88:
1f:11:1e:a4:79:10:58:09:e3:a3:66:c4:df:ee:97:b2:ff:d3:
8f:cb:2d:ff:d6:d3:ea:b3:d5:53:d2:80:7b:d3:ff:2f:71:ed:
eb:2c:c0:93:cb:f6:28:80:26:18:eb:66:00:69:a0:cf:4a:ca:
db:95:02:d7:fc:d8:48:53:b4:0b:75:c4:fa:07:d4:27:b5:ef:
ae:12:90:7d:61:da:62:59:fb:47:30:18:7b:04:ad:0b:6d:91:
c8:b4:fe:81:84:3a:a9:52:de:80:93:b8:b0:83:88:de:dd:55:
4c:b3:b2:c5:0b:63:43:bf:54:f1:5d:0e:dd:23:46:90:ab:a1:
05:a0:ab:da:19:98:1d:90:8e:9e:05:ae:84:5c:90:de:b9:75:
01:42:81:d8:a2:13:5a:dd:87:26:6a:f7:b8:95:77:d4:e5:09:
57:16:8a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:30:39 2025 by rpki-client