Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa
File: 788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa (raw, json)
Hash identifier: HCmxV4fjQlqQHyVZq0TIlaJXdi9pdmJ8MZ0pfmcpkgM=
Subject key identifier: F7:05:ED:3B:31:B8:49:EF:3E:82:96:92:F5:04:BF:F1:E8:D6:D7:CB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1BC1A2501C600603AA0171253297A5A2F2C2A303
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa
Signing time: Tue 17 Jun 2025 00:40:04 +0000
ROA not before: Tue 17 Jun 2025 00:40:04 +0000
ROA not after: Tue 22 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c1:a2:50:1c:60:06:03:aa:01:71:25:32:97:a5:a2:f2:c2:a3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 17 00:40:04 2025 GMT
Not After : Jul 22 23:59:59 2025 GMT
Subject: serialNumber=d21279607b8b1076523e3b184c15d1a91cdd5a01164984e45298b10b86c1c1a3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6c:20:d7:5e:e0:0b:04:f9:de:c1:af:26:a9:
b9:40:c7:34:aa:d5:50:da:79:27:88:1e:0b:fd:7b:
f1:cd:44:f4:37:f1:22:7a:bb:3c:1b:7f:ec:b0:bf:
a4:0d:2f:c1:9f:74:45:c1:4b:0c:ad:e3:77:94:9d:
eb:85:c5:0b:3c:4d:df:32:ef:2c:17:f0:89:53:32:
54:35:54:41:74:f5:ef:e0:64:4d:74:dc:e9:55:84:
14:4e:32:85:7e:e9:00:f3:36:75:55:55:61:02:a5:
ce:a2:53:33:26:36:97:b8:59:ad:10:68:4d:4b:65:
f8:ef:f7:e1:a2:4b:f4:7f:96:b5:f0:5b:1e:dc:a6:
de:66:82:95:79:db:fe:01:9a:c1:75:62:ab:fe:20:
30:6a:5a:a1:12:3e:94:da:b3:7b:ce:3f:e6:79:1e:
77:6d:e4:4d:35:6b:95:51:93:29:5e:4a:a1:60:ff:
bf:e7:4d:41:c7:cd:4c:4a:83:25:5a:1d:dd:2f:a3:
1e:5c:7c:78:fa:48:79:e0:fd:47:7f:65:35:1c:a2:
54:73:7f:96:df:f2:23:eb:9a:d6:a4:d0:ce:11:f9:
e6:2d:39:d7:08:2e:bd:4b:37:75:8b:3d:4d:b1:c0:
80:c3:ae:8a:7c:c8:96:b0:19:df:93:00:b0:61:56:
1d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:05:ED:3B:31:B8:49:EF:3E:82:96:92:F5:04:BF:F1:E8:D6:D7:CB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:9000::/40
Signature Algorithm: sha256WithRSAEncryption
70:11:54:b9:08:f0:10:3e:1f:6e:fd:45:e6:36:aa:59:71:2e:
e6:3c:f3:d2:b2:9e:4b:00:79:5c:93:ba:56:62:2f:0f:0e:01:
dc:e3:42:0e:09:50:79:67:b0:1f:89:86:4a:32:f0:98:c0:04:
af:f3:1c:01:e6:d4:16:f4:e9:67:e3:05:9f:e3:25:23:41:b5:
1b:16:e8:cd:7f:f3:e7:5f:dc:ef:cf:8f:54:9d:ca:57:32:11:
37:51:cb:cb:66:f2:0c:6d:a6:4b:a0:71:d8:53:1a:03:e0:c4:
81:82:02:b0:0e:37:11:c2:74:4a:66:d6:e8:8f:5f:f6:75:53:
8d:7d:31:48:05:df:bf:37:80:e6:85:62:71:c6:58:48:c4:64:
56:c7:db:f6:0d:8d:0d:9a:11:3e:4c:95:f7:0d:28:6b:6f:cc:
41:18:cb:76:68:6f:d1:cc:86:63:09:a6:82:09:8d:d2:04:98:
57:f4:1f:07:02:e2:fd:79:e8:e9:11:6d:d4:ea:17:42:38:a5:
e9:e5:c3:40:63:b7:87:12:ad:ee:87:b9:22:4c:bc:fb:b8:2b:
b6:89:41:3b:dc:25:e2:c3:a5:0c:b3:58:29:03:0b:6e:c0:f3:
43:d3:43:8f:08:6d:d9:3e:41:0a:09:dc:ab:c8:1f:90:d9:d6:
c0:49:21:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:52:40 2025 by rpki-client