Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/739d8b08-f82b-4a2a-841c-2faf7a331ffa.roa
File: 739d8b08-f82b-4a2a-841c-2faf7a331ffa.roa (raw, json)
Hash identifier: F4QK4z3cZ0KrI++7vhMzoQN72PPFeXgZGWsP9O8Y3dg=
Subject key identifier: 97:97:4E:6C:26:66:97:E5:07:67:FC:8A:81:EC:67:86:E8:D1:91:2D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0D22894DA9282C2C1E7B81A7DB09D4A3D965F74A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/739d8b08-f82b-4a2a-841c-2faf7a331ffa.roa
Signing time: Mon 16 Jun 2025 21:31:29 +0000
ROA not before: Mon 16 Jun 2025 21:31:29 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:22:89:4d:a9:28:2c:2c:1e:7b:81:a7:db:09:d4:a3:d9:65:f7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:31:29 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=83fa5e56cd34bbdae3d0bd83f6d93fab1d4693d4e9e7e3d922f30bc3ebe101ee, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:c8:fe:ea:a3:9d:d5:c7:b0:32:bf:83:2e:
1a:16:6a:b1:4c:92:7f:f4:b0:2c:14:9d:f4:2d:ad:
dc:14:b2:87:a1:8f:29:95:ce:a7:8b:61:56:10:a4:
13:f9:1e:36:1d:cc:34:6d:b0:5b:78:cd:6f:29:c3:
9f:8f:60:2d:10:9f:3f:ab:76:09:a0:99:46:d8:7a:
d5:b9:9c:cf:ec:cd:bf:58:73:a4:60:be:c4:5b:79:
27:bc:e9:33:af:de:e0:f8:23:9e:29:e2:9d:e5:20:
97:8b:03:aa:ad:12:81:f2:38:5a:06:d2:e7:c7:24:
24:52:3b:91:4a:f7:ac:2d:cf:1e:e0:3e:de:df:03:
7c:68:e0:bc:4b:22:ee:2e:07:cc:ea:bb:66:9d:0e:
65:b6:25:b6:9e:5b:33:22:7d:38:53:20:b7:85:b4:
1b:6c:f6:c6:7b:fe:5d:45:94:8e:a7:86:6a:8b:ac:
e0:95:44:40:f5:a0:b0:2d:f6:69:cd:72:49:13:b7:
c5:23:ec:ae:a9:51:ea:dc:ea:4c:4e:c9:fa:bd:3a:
45:ad:77:45:ab:dc:8e:cc:5f:94:74:c2:52:f0:f3:
ec:77:5f:9a:c6:14:01:07:9b:4b:17:3b:6e:19:30:
46:74:eb:af:38:00:f9:4a:6b:3c:93:03:ff:bb:2d:
2f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:97:4E:6C:26:66:97:E5:07:67:FC:8A:81:EC:67:86:E8:D1:91:2D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/739d8b08-f82b-4a2a-841c-2faf7a331ffa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:9000::/40
Signature Algorithm: sha256WithRSAEncryption
c3:9d:51:d3:ec:10:8e:e0:3d:27:ac:95:58:da:a9:ba:42:48:
ac:d1:a7:39:23:39:21:f9:ce:26:72:73:68:46:15:00:69:53:
ac:21:4e:1f:f3:0e:c1:eb:55:9b:4f:d3:3f:37:40:31:34:64:
0e:fa:8f:29:72:54:e4:44:35:a9:c0:7a:13:e8:aa:ba:cb:f2:
58:e9:f9:1b:c3:a3:2f:e4:04:7c:4a:52:fa:9f:a1:23:c9:16:
b0:5e:fe:e3:97:47:e3:27:84:43:a6:12:1b:f8:4b:f0:61:4c:
b5:b9:8b:da:97:07:3a:f1:02:59:5a:1e:2a:c9:bc:06:60:e7:
3b:a4:9b:17:48:2b:ad:98:5f:d2:81:83:76:a3:3e:20:6b:4c:
e3:34:75:a4:6e:29:91:2d:84:f4:64:f2:17:df:eb:d0:00:e2:
f5:69:00:d2:0a:bd:ad:23:69:fb:66:5e:16:34:92:47:fa:3e:
df:3d:ac:70:0b:b6:37:d7:62:15:04:66:95:69:64:6b:b0:c0:
35:37:2b:76:46:88:74:8f:e9:42:ca:88:39:dc:ac:eb:a8:82:
aa:c8:66:01:42:1e:40:6e:8c:b1:64:c0:cb:f4:11:28:a6:d1:
31:15:19:32:be:ec:61:cd:dd:44:be:1c:70:de:e3:ae:43:86:
5d:88:54:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:49:07 2025 by rpki-client