Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a077699-48cb-42a1-9f1b-1e7c9a3ae808.roa
File: 4a077699-48cb-42a1-9f1b-1e7c9a3ae808.roa (raw, json)
Hash identifier: mme0EZkSs0xyo2zL8r3Gyn4ZjSrK+6v2s8FPQCNdVyw=
Subject key identifier: FE:94:4C:FE:78:98:82:AB:8E:D1:B7:E7:44:4B:3E:FA:F4:5E:FA:0C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7277E3C8F5A045345A47D275A3071C27F619F769
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a077699-48cb-42a1-9f1b-1e7c9a3ae808.roa
Signing time: Mon 16 Jun 2025 21:40:17 +0000
ROA not before: Mon 16 Jun 2025 21:40:17 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:77:e3:c8:f5:a0:45:34:5a:47:d2:75:a3:07:1c:27:f6:19:f7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:40:17 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=b6531abaa45733c61ab44766cf71811f449231a31c9d99c9d5084ac6c06dde99, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:a2:f4:a4:35:6c:0c:36:7f:3c:a2:a4:f8:
63:09:2e:8d:7c:b1:c3:9a:51:2f:1c:43:17:2c:06:
1a:ba:45:36:7f:45:aa:4e:fb:22:f3:4c:af:20:64:
9c:3d:13:8c:c1:72:f3:b2:9e:eb:d8:96:be:64:2e:
74:41:9c:e6:97:b3:43:11:66:16:b7:4f:6e:ed:64:
6c:68:15:a1:9d:6a:49:3a:25:c5:c5:58:2c:7a:89:
b7:6d:4c:39:fa:e1:4c:d7:9b:2b:d7:52:44:6f:64:
a0:71:fd:d8:40:0a:34:20:d3:06:57:3d:33:33:65:
3d:fd:a8:7d:d7:4e:4c:46:b7:fe:ad:66:d8:8d:aa:
37:6b:f9:56:f0:74:51:d0:b5:2d:13:cb:f8:f8:dc:
e7:94:d8:4c:72:2a:79:a9:f8:9a:0a:80:f2:3b:85:
64:1b:ec:a3:57:b1:8a:fe:e8:f2:68:e4:b5:fd:8a:
fd:b1:d1:78:28:e0:4f:46:75:d2:9f:f3:e1:07:83:
f9:b9:19:63:56:d5:a1:f6:46:12:b4:d7:44:ae:9a:
e5:d5:9a:a3:b6:e9:4b:bc:c5:41:ca:c9:f4:a1:fa:
a1:7a:80:4d:d2:6e:59:ee:0b:e2:ab:0d:87:57:d4:
a5:58:b2:27:dc:db:84:a2:1d:bc:5f:b0:6a:98:ce:
42:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:94:4C:FE:78:98:82:AB:8E:D1:B7:E7:44:4B:3E:FA:F4:5E:FA:0C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a077699-48cb-42a1-9f1b-1e7c9a3ae808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014:400::/38
Signature Algorithm: sha256WithRSAEncryption
c0:c5:17:20:1f:d2:92:30:97:a6:13:24:93:a6:79:fd:6f:e0:
22:02:b0:a5:8b:57:2a:f9:8b:61:93:5e:dd:47:b8:55:a3:ed:
f4:c9:86:02:96:61:52:42:08:ac:5e:6a:cd:e3:cf:18:a8:7d:
3c:66:79:1e:16:d8:19:0e:dc:fc:ed:17:87:fa:33:75:14:84:
cb:b7:a3:c1:65:ed:57:18:21:76:3a:a4:ef:2f:89:6c:e0:a3:
fe:af:37:63:46:5f:bc:54:d8:6f:fe:59:3e:6a:dc:4c:57:0d:
06:e0:21:e9:47:b4:8c:7d:13:ee:5c:11:d3:5f:ca:7a:f8:2a:
e3:0b:a9:a6:4d:0c:23:c0:56:1e:23:c7:9c:d4:8d:2b:ea:f3:
0b:9c:03:35:cb:ff:53:22:ce:d4:52:0b:88:92:a1:84:74:5d:
9e:7c:34:e9:e1:e8:b7:d1:6c:80:25:1c:3b:ff:d1:7b:d7:19:
c4:34:2c:a3:14:43:0d:ac:44:e5:c8:02:50:40:93:95:a4:5f:
51:72:6b:19:a7:5d:09:02:82:41:da:ba:2d:26:8c:b7:f4:9b:
a5:78:ff:a8:92:04:88:38:2f:ed:d1:c0:b6:df:6c:90:0a:ab:
a1:9e:b3:89:36:dc:8a:a8:7a:3a:68:af:a9:1f:1c:d7:cd:26:
8f:01:70:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:51:13 2025 by rpki-client