Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60c499a8-e470-4a76-9095-20d8554a426a.roa
File: 60c499a8-e470-4a76-9095-20d8554a426a.roa (raw, json)
Hash identifier: K7Tl8BTaZ0zzXXVDlu9e2pEt7a8GpvwMTwm/9wzD4TQ=
Subject key identifier: 56:96:44:C8:B2:05:7B:C6:DD:CD:C4:D1:6A:A4:47:3D:0E:94:FE:E4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 04CDFFBB6EFDF60A796E053C005548BF23C6E06A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60c499a8-e470-4a76-9095-20d8554a426a.roa
Signing time: Mon 16 Jun 2025 21:41:38 +0000
ROA not before: Mon 16 Jun 2025 21:41:38 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:cd:ff:bb:6e:fd:f6:0a:79:6e:05:3c:00:55:48:bf:23:c6:e0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:41:38 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=aca863a8814c26f777d6eda17633364e025d330ead135897618fc7dc92a4880e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c8:c5:e9:4a:fd:4b:4a:d4:58:90:6e:9b:ab:
a3:09:10:61:64:ca:7a:e8:fc:bf:23:cf:a4:1c:10:
2d:19:73:d3:6c:58:88:2f:da:e7:03:40:1f:19:7e:
67:70:ce:05:6e:59:b8:8b:4c:29:9b:ea:74:99:88:
9c:bd:44:ac:99:53:71:cd:5a:07:61:f3:91:90:7c:
25:8f:04:57:a6:6a:51:14:b6:3c:9e:f9:73:5d:85:
9a:38:8c:5f:93:3d:03:65:b1:fb:9c:9d:11:27:49:
18:9d:b6:59:f1:dc:43:c6:59:5e:48:1a:2f:e6:4c:
55:5f:d5:a9:20:76:bc:ab:32:41:02:78:a5:a8:eb:
08:3c:8d:89:a7:cd:f8:c4:67:7c:a0:4f:27:36:fe:
80:53:a6:7a:95:09:53:e9:44:6e:00:27:a6:b1:ec:
c8:c2:41:9f:25:9d:c6:35:9a:da:57:ed:c2:0c:92:
46:77:c3:af:5f:45:ae:26:fb:aa:b4:20:40:8a:63:
88:3e:47:bb:9e:a5:9e:fc:25:a8:a6:8f:06:87:9a:
66:9d:45:db:f6:79:f1:50:57:24:59:13:e9:15:37:
13:ad:a3:ab:98:26:6c:5c:c6:78:59:90:4b:e7:2c:
4e:ff:a0:0f:a5:ac:3e:aa:73:4b:c9:e6:51:66:29:
a1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:96:44:C8:B2:05:7B:C6:DD:CD:C4:D1:6A:A4:47:3D:0E:94:FE:E4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60c499a8-e470-4a76-9095-20d8554a426a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018:c00::/38
Signature Algorithm: sha256WithRSAEncryption
88:d6:f8:bf:dc:29:7a:f8:8c:17:11:eb:8b:49:ac:91:fc:69:
6d:c4:34:7d:e2:29:51:ed:4a:2c:fc:c0:e9:d4:a6:87:16:6e:
36:03:0f:82:6c:49:e9:7f:a6:8f:5c:30:0e:ba:98:e1:7d:07:
2e:eb:a1:2e:90:62:aa:36:6e:1d:54:85:73:14:51:06:60:64:
8e:26:e2:e7:b3:91:4a:e6:a0:3d:5c:92:81:b7:23:23:f7:18:
5c:b3:83:90:b7:0b:d8:a0:e7:7b:07:d0:72:c9:82:d5:57:59:
66:64:55:63:20:43:8c:03:4f:7b:27:90:1d:aa:50:f1:6f:87:
35:a8:a8:ca:cb:1e:03:70:32:21:aa:f4:93:ad:66:f1:bc:e0:
7c:11:25:7e:d7:f7:64:be:8a:d9:0a:a1:bf:44:99:32:94:8d:
db:21:86:dc:f2:29:6f:06:1a:9e:7b:9a:61:ba:6d:39:26:b8:
6a:95:28:a3:60:e5:07:06:8b:b6:ce:83:f4:33:4c:2c:06:e4:
cd:93:50:d6:b2:46:55:06:c5:74:58:ef:8b:1c:78:2e:79:75:
05:a8:9a:bf:89:1d:8a:1b:92:62:32:35:2a:52:9a:3b:55:3c:
83:fd:58:79:c7:8a:42:ec:d4:6e:2e:5c:a3:f0:19:b6:1e:9a:
ec:b4:91:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:22:55 2025 by rpki-client