Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58699fff-50fe-46a7-8e85-38dbafe34c1b.roa
File: 58699fff-50fe-46a7-8e85-38dbafe34c1b.roa (raw, json)
Hash identifier: H7Psvc3Kt2RwoFdXjDkeEmYzID0OCzqfraJkvRNl7LI=
Subject key identifier: C6:2E:24:7C:5C:40:30:ED:02:E9:18:57:FB:B3:96:8C:20:6D:32:80
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 058B82084F8BC5015F4916FF3E1195ADAE4D0E2A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58699fff-50fe-46a7-8e85-38dbafe34c1b.roa
Signing time: Tue 17 Jun 2025 00:40:40 +0000
ROA not before: Tue 17 Jun 2025 00:40:40 +0000
ROA not after: Tue 22 Jul 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:8b:82:08:4f:8b:c5:01:5f:49:16:ff:3e:11:95:ad:ae:4d:0e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 17 00:40:40 2025 GMT
Not After : Jul 22 23:59:59 2025 GMT
Subject: serialNumber=8f7b012be919b3fb923321c92987f1af8126eb2f9f6e22ee7a495c9136efdea9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:d4:0b:73:4c:a1:78:2f:13:a7:f0:73:c6:
6e:7f:3a:9f:83:01:01:e8:d5:00:07:43:db:01:27:
10:5a:87:5b:18:50:e1:86:d6:a0:c7:61:3e:55:71:
fc:1c:a9:ae:d8:46:b3:5a:43:0a:67:7a:eb:a1:48:
4f:2c:d3:5d:6d:fe:de:90:44:94:79:39:06:85:eb:
c7:e9:a1:a2:c1:3d:d7:35:4a:cb:7d:b9:61:20:6f:
4d:87:99:8e:67:5d:f3:55:2d:62:80:c5:da:20:3d:
94:81:a2:77:60:e3:b4:fd:96:fb:91:85:dd:b7:07:
d8:26:be:d9:c4:84:d9:4f:cb:ca:da:8a:8b:97:fc:
ed:f3:6f:f7:17:ca:52:77:90:fc:c6:93:db:1b:25:
7d:ef:8d:11:7b:05:dc:0e:ae:d6:f6:e8:ef:9a:cd:
e9:a6:81:b1:fd:8c:10:be:cf:66:e0:75:a6:07:b0:
a1:ff:04:57:a6:08:7a:32:c0:19:8e:3d:80:6f:93:
84:3a:4d:1e:5f:59:cf:fe:0f:cd:d1:b9:01:61:8c:
90:7d:18:30:64:6f:ca:be:8e:e8:c0:88:f8:95:9e:
6c:62:88:59:93:6f:a4:0f:a2:5b:ac:74:56:dd:a9:
cf:22:16:a3:cb:89:9e:bf:c7:8a:90:76:de:92:4f:
67:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2E:24:7C:5C:40:30:ED:02:E9:18:57:FB:B3:96:8C:20:6D:32:80
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58699fff-50fe-46a7-8e85-38dbafe34c1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:e000::/40
Signature Algorithm: sha256WithRSAEncryption
19:87:c0:42:b0:75:ed:2e:73:d4:24:0a:71:a8:99:f8:c1:aa:
6d:97:83:1f:87:33:c2:c0:e8:60:85:2f:74:6a:af:b0:39:07:
2d:09:e8:76:07:92:71:c5:96:d1:cf:40:19:a3:d1:26:68:39:
26:e3:de:29:2d:10:d7:4d:e8:3d:d7:cd:8d:37:35:53:15:ee:
67:1c:8c:3b:e0:13:40:c6:71:2d:d9:f9:6d:af:68:26:f7:a0:
15:de:d0:8f:9b:f0:53:3a:b3:9f:17:87:3c:97:19:1c:26:bc:
cd:13:c9:43:10:58:1a:ee:dd:27:d2:28:d5:f3:57:42:c3:45:
bc:d5:b9:1d:5d:60:88:a5:85:1d:48:73:f1:d9:ec:0c:e9:a9:
5c:80:eb:8d:5d:08:4f:48:31:7f:8f:73:06:84:b4:1b:24:b8:
d0:fb:a1:ed:ef:3b:4b:15:75:df:4b:28:e1:35:1c:65:0a:40:
e6:61:c4:d7:d3:53:77:d3:1a:37:79:4b:37:23:8a:8e:b3:85:
db:02:b5:d3:96:e2:da:1c:06:3e:c3:dd:7e:fb:a6:85:32:18:
45:af:d4:0d:1c:79:79:8c:4c:66:43:48:e7:32:92:34:15:89:
f1:78:4d:ab:fb:2a:f0:84:70:ea:6a:e5:3a:c6:d0:d6:77:5f:
46:a5:6a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:04:22 2025 by rpki-client