Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5acd35f8-42dc-4211-8060-407321cbd4dd.roa
File: 5acd35f8-42dc-4211-8060-407321cbd4dd.roa (raw, json)
Hash identifier: vQVgJjzqJaD8lA+KCDmy1COI3lr2aeIJND/QTCGMJ2s=
Subject key identifier: 49:29:54:C3:86:61:6B:C2:70:0F:4F:87:44:53:D4:3E:1A:2B:43:49
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5B4C4814D73963483C67D5B57D2B5E3A5D6FB997
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5acd35f8-42dc-4211-8060-407321cbd4dd.roa
Signing time: Mon 16 Jun 2025 20:40:14 +0000
ROA not before: Mon 16 Jun 2025 20:40:14 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:6040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:4c:48:14:d7:39:63:48:3c:67:d5:b5:7d:2b:5e:3a:5d:6f:b9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:40:14 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=135ee4a6751e99b0932446581118f85bd089a28d8e485a08e8db818c5f7c7c26, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:38:1f:31:1e:34:c9:b2:de:fa:c0:27:74:ca:
6d:95:17:91:0b:52:a9:0c:0d:2b:ca:3d:d9:0f:44:
fc:5c:84:a8:03:e1:78:33:7b:70:31:3d:4d:fc:37:
27:ae:1d:bc:ce:8d:1d:0b:cb:28:a1:61:5a:5f:62:
84:cf:91:c6:84:9d:f0:7d:a3:85:bb:51:7e:47:6e:
87:66:3e:77:04:41:29:41:d2:49:c9:f4:b3:53:84:
e0:5b:85:be:d6:28:fc:19:69:a9:ab:94:b0:2a:85:
3c:da:6e:18:d7:2c:c6:11:59:69:94:e2:10:c1:03:
22:8d:f3:23:7a:4f:23:fd:27:7f:69:84:40:32:10:
e5:22:24:7a:eb:57:ad:f4:fa:0e:1f:f0:fd:f4:af:
cc:6d:58:ea:07:87:a1:45:77:2a:83:67:1b:45:d8:
ad:fe:01:e5:91:2a:03:16:95:4a:9a:cd:59:59:37:
26:3a:4e:ac:04:7d:54:48:80:10:3c:63:cc:da:3a:
f2:41:5f:51:d7:13:b3:5a:fc:18:22:d8:68:d6:26:
5e:a8:01:62:b2:25:3b:40:08:77:10:53:2b:99:41:
94:2b:3e:67:03:5b:4c:1f:ac:50:d4:c1:be:dc:3a:
a5:e4:c6:69:45:03:7c:03:06:02:1c:20:69:d8:95:
a2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:29:54:C3:86:61:6B:C2:70:0F:4F:87:44:53:D4:3E:1A:2B:43:49
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5acd35f8-42dc-4211-8060-407321cbd4dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:6040::/46
Signature Algorithm: sha256WithRSAEncryption
54:25:50:95:fd:fe:b8:2f:ff:0a:96:b1:95:32:f3:2b:28:3f:
9b:6c:d6:79:87:ff:7c:b8:92:5b:4f:76:2f:c0:18:53:bf:d0:
06:84:3a:50:74:17:c0:c4:c7:44:6b:b6:41:c2:95:d9:76:73:
27:b9:23:bf:25:67:0f:76:d9:de:fa:7c:a3:c8:4f:0e:5a:de:
9b:38:79:89:49:52:23:4e:bd:e8:9d:82:c3:f1:dd:2f:17:5c:
9d:59:e7:82:03:25:da:83:99:aa:65:34:a2:72:6f:a2:e9:7c:
2b:80:6b:c3:d2:04:24:49:12:17:18:1c:4a:f5:4e:61:9f:db:
fa:14:ac:ca:e1:49:88:db:75:66:20:1f:e8:37:bb:47:ec:21:
fb:ee:f8:7e:7c:df:32:fb:54:1e:26:c6:13:ff:1e:7f:e1:ec:
ad:5e:6e:04:2e:c1:19:4a:13:3f:4e:7e:2a:0c:1f:77:e7:b1:
54:b7:b2:62:e1:91:7d:9e:80:08:f4:61:91:bf:5d:ae:28:a6:
bd:d1:d8:06:7a:54:b9:d6:00:dd:92:41:2c:12:34:a6:a1:65:
b4:86:76:7a:a9:1a:bb:c9:9f:12:7f:00:a7:cc:63:d8:ef:5d:
e6:5e:c3:f8:1b:5a:ba:81:f7:b2:45:06:67:7c:6b:4e:15:12:
d7:04:05:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:04:33 2025 by rpki-client