Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a3d7a75-b59d-4700-823c-8c52150b4c70.roa
File: 5a3d7a75-b59d-4700-823c-8c52150b4c70.roa (raw, json)
Hash identifier: SEjbozveicGpgTpXZvoPLcFKe3nVjAHZnnhTe5gBTIY=
Subject key identifier: B9:7A:34:B1:8E:FA:6D:71:7A:BB:FC:8A:A3:91:4C:B7:3F:09:CE:F8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 40F2613B3E1B1E04CA0E0D786DEA2E330C45B320
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a3d7a75-b59d-4700-823c-8c52150b4c70.roa
Signing time: Mon 16 Jun 2025 21:01:13 +0000
ROA not before: Mon 16 Jun 2025 21:01:13 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:f2:61:3b:3e:1b:1e:04:ca:0e:0d:78:6d:ea:2e:33:0c:45:b3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:01:13 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=f608d17cc52d00556217ac4e77406e1a985386b2aff62c8fd617e4512c7e927b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:47:05:e6:04:8b:e8:c7:bd:d2:5a:10:8b:
43:40:12:be:0c:63:11:e8:05:63:99:26:1f:72:b1:
7d:c2:d5:82:59:0a:ca:8f:0d:38:4a:b6:ad:af:24:
c3:4e:6c:ce:b4:38:88:cb:5e:12:cb:c8:d7:9e:b6:
6f:eb:5e:8f:a7:d9:4f:3f:a5:6c:de:a2:ef:ec:c5:
d8:ff:3a:0c:1e:13:4b:5d:62:ca:c1:ff:3c:e5:08:
81:bd:79:93:75:df:36:61:7b:d5:42:8f:fe:6d:c2:
36:d7:1a:7d:03:32:20:0d:97:a3:7b:cc:18:a4:41:
53:b2:a7:75:42:ac:41:e3:15:2e:3c:f9:e3:9f:b7:
96:b2:19:f3:9f:dd:58:7d:08:74:90:29:03:d5:69:
24:93:8d:31:ae:c8:4b:54:bc:ae:ea:04:5b:77:17:
9d:21:99:af:3e:07:8d:32:5c:ec:df:f5:dd:fb:87:
38:2b:58:0f:98:78:23:54:ab:bf:27:5d:7d:1e:ec:
78:7a:b3:78:72:7c:34:f5:b2:76:db:b1:ce:9f:94:
2e:0e:ef:0c:cf:a3:c8:81:0d:58:46:2e:64:70:65:
91:79:8c:34:b4:d1:35:65:7b:ea:3d:0c:0d:73:5e:
82:a8:30:f2:c2:a9:44:f0:8c:86:55:87:8d:d4:9e:
8a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7A:34:B1:8E:FA:6D:71:7A:BB:FC:8A:A3:91:4C:B7:3F:09:CE:F8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a3d7a75-b59d-4700-823c-8c52150b4c70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:5000::/40
Signature Algorithm: sha256WithRSAEncryption
c0:aa:b2:49:99:64:29:05:e7:d7:85:fd:41:c4:22:28:a0:16:
b4:4f:fe:b6:6b:bc:ee:85:ca:b9:75:9a:44:2d:ea:4d:42:3a:
2a:03:41:a6:ba:7c:a5:b3:45:85:8f:c6:7a:fa:4b:07:f7:7f:
7a:96:a8:b8:b0:c2:cd:95:59:93:1a:de:d4:80:99:8e:d6:67:
77:1b:8a:74:99:17:99:86:08:4b:c9:76:a8:5b:ab:83:cc:4e:
79:c8:e3:f2:b5:d7:c7:7e:49:92:69:36:bd:2f:c8:17:fa:be:
ac:ac:11:a5:44:a6:4f:f2:1e:36:d4:9c:bf:37:64:11:03:34:
10:de:2e:63:90:74:e8:ff:f1:8b:1c:85:f4:6a:40:8c:fd:0b:
25:85:f1:6f:b8:eb:04:f3:ce:3c:60:c7:33:96:e0:a8:b1:3e:
53:02:03:3b:dd:14:1f:34:6f:f9:48:b1:47:bc:9d:f4:17:ec:
e6:31:c4:37:13:60:ab:49:4e:be:de:58:43:17:2c:f0:cf:8b:
b2:4d:70:95:38:77:13:a0:9d:bd:ec:79:3e:85:f0:3b:00:df:
27:3a:53:65:2f:9e:97:6c:e3:ff:0f:27:a3:e9:a6:d4:1a:ac:
71:83:08:76:6a:0a:13:f3:f4:e9:7c:f4:0a:0d:9b:b9:80:de:
b5:12:98:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:51:14 2025 by rpki-client