Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7be7b1a7-fc94-4ff6-9fe8-9e8c1a28d695.roa
File: 7be7b1a7-fc94-4ff6-9fe8-9e8c1a28d695.roa (raw, json)
Hash identifier: f5WEeM2E2gyKl/6SNUQfok9YS5ikKtLgy3fuLJFBFwo=
Subject key identifier: 07:8C:FE:AE:05:D3:B7:DC:3B:86:39:16:6B:89:A9:D3:72:15:12:36
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5BB697EE33199D0DABFA88B380EFC6043AFC53D7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7be7b1a7-fc94-4ff6-9fe8-9e8c1a28d695.roa
Signing time: Mon 16 Jun 2025 20:50:40 +0000
ROA not before: Mon 16 Jun 2025 20:50:40 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:6080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:b6:97:ee:33:19:9d:0d:ab:fa:88:b3:80:ef:c6:04:3a:fc:53:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:50:40 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=952d7f0cdeac5cad52c7724f8a7efd680a3caa420e0b2d1a47d96103bdd0402e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:5d:bf:eb:69:dc:e7:21:b5:2f:d2:f4:e7:
4e:e1:e9:d5:4c:29:7d:41:92:8d:f1:7a:df:1c:56:
93:1c:73:4a:29:40:5e:04:68:fa:60:c2:79:f5:18:
a0:cf:dc:44:25:90:59:d9:fe:2f:03:ca:76:2c:dc:
d0:b3:c3:f2:13:00:20:cc:c5:f3:b5:77:e0:68:24:
96:7a:1e:19:c5:e1:d5:a6:f9:64:61:8b:54:6f:bb:
e1:22:cf:25:d9:e2:98:8f:fb:5d:00:63:38:b4:ed:
e2:25:4b:80:f7:41:f1:e1:07:3f:7f:f2:9d:7c:91:
cd:0b:90:c9:fb:96:d2:75:18:14:2e:fe:5c:0a:47:
1e:ee:92:b0:fe:b8:28:d0:ab:ab:98:a8:2d:b1:0c:
43:2f:3e:c0:38:f0:e1:77:8a:5e:97:d3:d6:5e:6d:
91:65:f2:e5:ab:72:06:0d:96:98:a2:b5:cb:53:aa:
e9:cf:33:fc:dd:40:6e:44:70:d2:54:02:c3:90:17:
ae:65:f8:9f:f4:4b:c5:99:19:80:85:0f:3a:45:d4:
ba:75:89:f1:0f:5b:a6:17:a9:b3:93:62:19:b8:ec:
64:0d:8c:08:46:cf:1f:55:80:a8:87:08:1d:04:49:
0c:5e:de:b0:ae:92:e6:97:46:4e:3d:85:2a:69:05:
84:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8C:FE:AE:05:D3:B7:DC:3B:86:39:16:6B:89:A9:D3:72:15:12:36
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7be7b1a7-fc94-4ff6-9fe8-9e8c1a28d695.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:6080::/46
Signature Algorithm: sha256WithRSAEncryption
b1:e3:ed:36:2c:29:f2:d1:f7:27:cc:26:ba:75:f3:d1:dd:42:
cd:e3:83:e2:fd:53:a9:ca:91:02:e1:80:1c:e0:aa:c4:f3:31:
4e:2b:1e:32:c4:45:59:4d:9d:19:5c:1b:b7:59:85:45:bb:77:
49:ca:5c:99:c2:ac:3c:9e:2e:00:38:e2:53:7c:58:86:f1:22:
5e:7a:6e:53:89:ce:18:b6:22:9c:dd:8d:5d:b8:ea:2c:21:d7:
7f:4c:c5:73:90:f6:32:e5:b9:83:5c:ce:6c:ec:8f:52:81:9d:
6f:ee:02:18:43:31:0a:91:aa:c4:df:71:ee:c2:a6:a8:e1:b7:
54:17:b8:53:c2:69:71:1d:f6:c3:de:85:b8:e6:7c:dd:0d:4f:
29:81:f9:ee:8e:8a:fc:0d:d2:c5:ac:c6:cd:63:15:84:d3:59:
38:48:8c:32:99:50:22:04:52:44:86:32:61:9e:03:e1:fe:f4:
0d:3c:22:e1:cb:c4:ce:95:a4:c9:9e:7f:78:17:dc:3e:ea:b7:
56:05:24:df:9b:50:e1:33:f1:ad:3c:78:ec:14:2f:40:0a:a4:
18:9a:9d:fc:24:a4:a5:67:44:67:b6:70:cd:4a:1e:64:e1:f4:
e4:98:7a:f6:3d:62:ce:c7:0f:ca:b7:41:23:cc:b8:59:e3:3e:
f3:f2:bc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:54:46 2025 by rpki-client