Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe931ae-e353-437d-9738-79004c5e9188.roa
File: 5fe931ae-e353-437d-9738-79004c5e9188.roa (raw, json)
Hash identifier: yRCtwZUIHCYzrn++GnMgS1lb6rVt4raZXYa3rhxlVNw=
Subject key identifier: B7:67:7B:E6:6F:79:FB:86:F7:D4:01:57:21:FB:3F:DE:61:26:A5:C4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: E78E342725D8BB85BF798556F6562971E91294
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe931ae-e353-437d-9738-79004c5e9188.roa
Signing time: Mon 16 Jun 2025 21:20:50 +0000
ROA not before: Mon 16 Jun 2025 21:20:50 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e7:8e:34:27:25:d8:bb:85:bf:79:85:56:f6:56:29:71:e9:12:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:20:50 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=168390b60f722d05bcfe2686929cb73690cc0f3184a96ce1763fa5f31bc887da, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:78:7c:4b:df:58:59:b3:a6:ae:cc:d6:12:e7:
d1:eb:a3:bf:f9:db:cf:f3:ec:30:1d:69:69:25:8d:
67:29:5d:28:9f:1b:dc:8a:ff:c1:0a:67:33:c8:9d:
6e:33:53:58:00:d0:3f:2d:23:e3:65:c3:3c:1a:c7:
4c:f4:90:67:2a:c2:4c:03:70:e1:e3:67:b5:1b:f0:
2c:09:53:5f:d8:39:47:a6:af:2a:17:8d:61:63:39:
81:24:45:09:f3:5a:0e:98:72:a0:d9:37:91:0e:96:
fe:9b:da:fd:d9:75:e4:1a:f5:f6:55:00:eb:13:1b:
6d:40:c5:28:5f:df:27:9b:9a:d2:a8:85:7c:3d:97:
76:2a:37:29:7c:3b:e5:4a:2b:89:58:b5:dd:21:f2:
d6:0f:2d:ab:10:da:44:29:df:9f:e6:7e:38:24:ea:
bb:7d:8a:e6:c4:97:c1:23:85:d0:07:7e:c3:f3:44:
2c:67:c0:df:2e:f1:3c:7b:1b:e9:57:2c:83:a4:92:
7b:28:e2:51:1e:23:e0:76:2e:84:67:eb:94:f4:10:
08:17:ef:f8:61:0a:71:c1:f6:ca:3c:2a:59:ae:78:
50:0d:f6:23:ed:18:5e:92:6c:04:2b:80:33:aa:d1:
a7:cb:06:ab:e5:1e:f3:6a:5c:8d:c6:5e:38:84:11:
50:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:67:7B:E6:6F:79:FB:86:F7:D4:01:57:21:FB:3F:DE:61:26:A5:C4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe931ae-e353-437d-9738-79004c5e9188.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:c000::/40
Signature Algorithm: sha256WithRSAEncryption
5c:ca:16:f5:8b:3e:15:0e:5c:c8:9f:73:af:d5:2b:de:59:17:
2c:2f:ca:11:c2:0f:25:68:51:60:7b:66:20:0a:82:da:87:40:
95:26:91:09:9d:fd:24:94:18:cc:2f:29:63:f9:e4:0d:ea:d7:
65:af:c1:04:35:c3:3e:bc:b6:3f:dc:d3:85:da:f6:11:ad:d9:
6f:24:69:c9:48:b5:6c:1e:9c:36:06:f0:93:7e:22:5e:9c:a1:
e9:68:a9:a1:51:19:bd:f3:a8:9b:32:26:64:dd:a9:e9:e2:ad:
cd:22:9e:dd:b9:5d:c3:a5:a4:1d:b8:45:d3:64:58:13:4e:69:
69:f4:d4:f7:27:41:58:b0:92:80:a6:ec:d1:e1:fd:71:17:98:
53:e5:22:d1:96:b1:f8:cd:4c:2a:d9:95:79:19:0b:97:36:a1:
41:f7:01:b2:f8:41:b6:ed:2e:e8:ba:4c:3b:28:7c:6f:60:30:
a7:77:79:0f:15:e7:70:2b:3a:69:2b:52:5f:28:5e:b2:8b:d5:
a1:01:57:2f:16:9e:86:9f:5d:ff:93:ca:cd:e9:07:54:8b:c6:
cf:18:36:be:61:9f:0b:91:45:34:c9:c9:63:4e:00:8c:fa:86:
64:76:21:c0:77:a6:67:6d:66:f7:c6:49:df:b4:11:8d:61:fa:
b2:85:41:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:54:05 2025 by rpki-client