Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a56b250-ea3b-4b36-bc05-9e25e6cabb2c.roa
File: 5a56b250-ea3b-4b36-bc05-9e25e6cabb2c.roa (raw, json)
Hash identifier: WwiDwbk1FEZbtVUqwMy6WpKkVuT2JNApydraq0i1+NY=
Subject key identifier: 50:39:B5:DD:B7:3D:9F:94:A8:AD:FD:18:1A:26:08:13:46:63:15:87
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 346A5081B6CBA3A70BC8248186260DFDE9A29C24
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a56b250-ea3b-4b36-bc05-9e25e6cabb2c.roa
Signing time: Mon 16 Jun 2025 20:51:02 +0000
ROA not before: Mon 16 Jun 2025 20:51:02 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:6a:50:81:b6:cb:a3:a7:0b:c8:24:81:86:26:0d:fd:e9:a2:9c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:51:02 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=8fd5fa8b67a8eedd7f24708e54c8627b844efccc02d5555c7047b2a09d7203e6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:80:6b:87:66:0e:8a:37:99:8c:c6:c5:2a:
cc:a7:92:76:20:93:4a:21:f3:2b:8f:80:77:05:e8:
cd:79:3b:48:a7:ff:64:ea:33:02:e2:06:01:69:49:
d4:b5:37:7d:73:da:6c:88:5e:2d:cb:cf:78:c7:b4:
98:7b:c9:29:e7:8a:c7:0f:34:5d:19:a3:59:bb:b9:
e4:b2:bf:f6:fb:08:18:58:52:56:5f:e7:88:bd:f8:
97:6a:9d:07:c9:d3:cc:d8:a1:bb:50:15:97:51:ff:
3a:2e:26:8c:0a:71:93:37:44:b0:da:b7:38:ae:74:
0e:31:4c:23:2f:0c:97:65:25:12:a6:74:be:02:f4:
32:43:e6:8c:37:29:e2:ec:c1:4a:f1:cf:eb:9a:69:
b9:02:b7:2b:33:ac:91:d3:96:a7:99:60:84:58:6b:
c2:2c:c6:48:53:84:93:64:ac:de:14:5d:5d:68:a9:
8d:3a:24:d8:37:cc:36:cf:62:9c:03:b5:12:c6:4b:
56:27:fc:af:2f:0a:32:ff:8a:59:d8:58:02:29:82:
ac:62:a7:44:59:37:98:d7:5c:0b:92:c1:fe:ec:f0:
55:3b:01:7e:fa:90:f1:52:30:42:9f:aa:74:67:ed:
3d:c9:1e:bc:27:62:91:9f:e8:dc:38:c0:aa:2c:86:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:39:B5:DD:B7:3D:9F:94:A8:AD:FD:18:1A:26:08:13:46:63:15:87
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a56b250-ea3b-4b36-bc05-9e25e6cabb2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:9000::/40
Signature Algorithm: sha256WithRSAEncryption
6d:5d:8a:3d:fe:b9:cf:84:79:33:f6:54:41:a6:54:11:52:fd:
84:6e:80:7f:96:1d:33:29:0f:ba:fe:74:54:85:ae:f4:16:30:
77:49:bd:0e:76:c0:d5:78:3c:fd:87:8b:65:76:6d:cc:f8:c2:
2d:86:dd:32:4e:a0:a3:36:e6:23:5c:a7:2a:76:7d:f4:a6:0a:
2a:43:e5:73:aa:37:76:ec:81:05:9a:e2:77:ab:f5:c0:62:7d:
b2:2f:65:03:85:bc:28:34:5a:d9:e1:9c:32:ed:e1:6a:7c:fb:
4e:a7:33:39:ae:ee:20:e0:7a:40:f7:a3:2f:01:9a:9e:26:1f:
2a:bc:3e:22:70:a3:95:75:0b:4e:23:35:9d:df:13:4f:9e:ad:
a8:a6:f5:79:65:9b:80:10:c5:87:a8:17:fe:f4:e6:da:80:7a:
7c:24:e7:0f:3d:91:a1:e8:c4:50:c3:80:da:a3:ef:1a:70:f4:
7e:90:6b:6f:c0:a9:3a:22:47:12:86:3d:61:88:da:0e:fb:14:
3e:9a:c3:ee:52:31:aa:91:7e:17:11:7f:ec:9f:78:42:75:dc:
61:5b:7b:01:5f:19:af:d7:8b:66:5b:e0:d3:9b:87:1d:31:eb:
39:37:9d:62:c6:e5:c0:26:5f:1a:af:dd:17:e9:67:86:2b:a4:
20:84:33:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:23:43 2025 by rpki-client