Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ec3ef54-a209-4902-b036-4d329fe00df1.roa
File: 4ec3ef54-a209-4902-b036-4d329fe00df1.roa (raw, json)
Hash identifier: XJoAkCBgo+E9S6AEFWlHvgF6UkSdNVPUThix5hYKtKw=
Subject key identifier: 88:8B:FE:21:4C:C4:33:CB:17:A3:72:4B:C4:06:78:3E:CE:C2:A4:FA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 69AD68DF0D541704EA4C5748700D50229A432FE1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ec3ef54-a209-4902-b036-4d329fe00df1.roa
Signing time: Mon 16 Jun 2025 20:31:00 +0000
ROA not before: Mon 16 Jun 2025 20:31:00 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:8020::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ad:68:df:0d:54:17:04:ea:4c:57:48:70:0d:50:22:9a:43:2f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:31:00 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=5b6d090825157bde2a1431258fbb102848c0414570f3ada07f92259e9569c6bd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:84:9a:18:04:e4:34:ed:58:5d:24:9d:76:
e8:f3:6a:82:45:06:dd:c7:1c:6a:bc:dc:09:98:94:
6e:71:63:4c:ce:4e:11:1b:bf:d1:61:be:04:73:56:
2c:37:b0:ef:40:e8:ed:5b:82:d9:db:87:4f:54:2e:
d9:f9:c3:b6:6d:bc:46:15:d2:57:53:d7:47:11:3a:
14:1c:a4:e9:ca:4b:84:fb:f7:48:4b:ab:77:fd:a2:
20:54:68:e1:51:f8:93:67:cc:dd:38:dd:81:24:8f:
2b:9b:a1:84:7b:0f:f6:24:69:3d:e4:9d:fa:b9:2b:
ce:03:48:97:2e:67:12:99:c8:b0:83:2b:51:ec:61:
38:1d:26:0e:c1:34:3d:35:27:84:f0:80:52:e5:a1:
64:81:a3:43:50:34:26:e3:6d:71:06:6d:5c:5f:70:
ac:b5:6a:bb:49:8e:6f:6e:0e:43:05:54:2a:3f:49:
3b:93:7b:b3:48:cc:41:24:f8:8b:b0:34:77:0e:be:
1d:b6:c5:7a:c5:57:07:04:20:ea:48:86:3d:91:a7:
c0:f1:e1:fb:18:04:e6:ee:c9:2a:7d:13:c0:1b:84:
4f:ae:d2:84:6b:fb:2b:db:fa:ed:4e:95:00:a3:eb:
54:8c:a8:66:89:78:9a:42:88:66:0a:5f:ae:fe:a4:
2e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8B:FE:21:4C:C4:33:CB:17:A3:72:4B:C4:06:78:3E:CE:C2:A4:FA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ec3ef54-a209-4902-b036-4d329fe00df1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:8020::/46
Signature Algorithm: sha256WithRSAEncryption
46:04:32:b8:bf:ba:f7:97:3b:53:01:ea:d7:84:48:e9:4c:56:
16:02:ec:7e:64:3f:0c:32:16:c2:07:c0:2d:34:96:7f:7c:eb:
ef:2a:51:a6:c9:98:6f:9c:dd:a9:a2:dd:87:d7:d2:23:84:54:
e4:e3:13:a6:c7:a5:5a:46:a0:aa:45:92:e9:8c:22:0f:8d:7d:
cd:82:da:0e:e3:fc:8c:61:ba:dc:87:fd:2e:56:3e:99:9c:a7:
4a:fd:2d:a4:71:04:aa:38:37:f3:6c:ee:77:cb:41:61:88:0f:
17:1d:e1:ae:b4:ed:43:b8:c6:8e:1d:3f:44:d3:8a:b3:01:90:
c9:0e:05:3b:01:8f:e3:69:83:f8:1e:17:72:5d:5e:5e:68:76:
80:6c:00:be:eb:be:d6:2f:20:b9:b4:09:1d:ce:7d:56:de:9f:
8d:bc:6f:05:f8:96:9c:a3:e7:1c:b0:c1:05:22:06:a2:92:39:
88:45:aa:c5:07:53:ec:9d:4e:61:7c:23:b4:5b:75:c1:0e:73:
e0:53:61:2b:c5:77:56:f9:bd:4e:c2:b2:1a:48:36:a8:26:ec:
38:21:fb:99:b4:cf:31:eb:d1:32:b4:4d:eb:8f:33:cc:39:df:
e0:6b:5a:36:09:65:3e:a0:81:81:23:dc:6a:a4:29:87:8e:64:
6b:a0:61:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:10:17 2025 by rpki-client