Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a51d6038-bb41-47b2-a883-07e17ac04d63.roa
File: a51d6038-bb41-47b2-a883-07e17ac04d63.roa (raw, json)
Hash identifier: gPq08AmQxbWzjU3GjXRdK+YaZr5HP0myevuPQnzH/oU=
Subject key identifier: 37:AB:3E:92:DB:F0:6A:61:C2:A1:8A:7C:E2:55:A3:10:38:9D:FC:38
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 41E2590A715E4134149CBADC6A20A1DAF3A65D7B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a51d6038-bb41-47b2-a883-07e17ac04d63.roa
Signing time: Mon 16 Jun 2025 20:41:05 +0000
ROA not before: Mon 16 Jun 2025 20:41:05 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:2040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:e2:59:0a:71:5e:41:34:14:9c:ba:dc:6a:20:a1:da:f3:a6:5d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:41:05 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=95fa05682981c3ccf921ac25c47759c443c017b0cd936e34e1a410eb914ac83a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:f7:0b:08:f7:ec:5d:81:b9:ed:ac:86:7a:
bb:f6:11:a7:fb:3e:f4:07:8c:7d:34:0b:14:68:0e:
dc:7e:1e:26:f5:24:e3:f8:b0:74:2f:c5:a9:c6:5e:
af:d5:df:ec:3f:71:fd:68:d5:fe:7d:2b:6b:cf:b1:
af:0d:05:bf:c8:74:58:3d:25:fe:d1:a0:da:5d:cd:
6c:0e:01:00:75:46:60:a8:b5:ad:e6:9a:31:f1:aa:
1f:0e:80:92:bd:d8:a2:46:8a:25:76:0a:a3:e3:8d:
07:80:80:2f:eb:4d:d3:e2:59:b8:d9:b8:b2:f8:e9:
f1:18:e8:31:5d:3e:5c:3a:de:cd:cc:ea:7c:1f:8e:
53:ec:e5:88:a0:d7:4a:16:b9:0c:cf:08:78:07:15:
98:c6:a1:c9:92:35:d0:af:24:22:6f:db:0e:fa:4f:
71:c1:2b:6b:aa:31:6a:a6:0b:14:0e:63:f3:03:4c:
f6:ce:95:33:a0:43:19:ee:5c:fd:5a:a0:ca:b8:66:
13:e1:bb:01:73:8f:4e:e2:1f:29:cb:84:b4:0a:d8:
69:7b:94:82:fd:e3:96:3d:58:32:3b:83:9a:57:5d:
b4:52:5e:24:22:c8:bd:7f:78:06:78:6e:3e:15:ef:
8b:9d:76:90:7e:81:97:c9:ed:3c:ed:f4:b3:c1:52:
75:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AB:3E:92:DB:F0:6A:61:C2:A1:8A:7C:E2:55:A3:10:38:9D:FC:38
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a51d6038-bb41-47b2-a883-07e17ac04d63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:2040::/46
Signature Algorithm: sha256WithRSAEncryption
1b:07:2b:5e:f4:f7:e8:65:65:e9:9a:e6:d6:62:fe:08:81:73:
d2:39:3d:2e:27:cf:7b:a4:99:e7:5f:10:83:b4:21:37:05:46:
e2:78:99:bc:06:5b:d7:10:bd:80:4f:fc:9a:b3:1e:71:a0:35:
e2:cf:f7:f4:25:bf:38:c3:31:5c:ea:11:68:d1:58:d9:90:98:
c0:04:c8:2a:65:89:fd:a0:66:6d:7d:03:c3:54:f8:d3:1b:de:
ec:23:90:70:fc:f1:20:3b:89:54:96:ca:3c:62:66:85:7e:98:
2b:b5:40:68:d0:67:1d:f3:4a:f8:25:b7:2a:60:3c:eb:35:61:
69:b4:19:83:62:f3:ed:49:21:e3:2c:09:e1:07:a7:8b:01:b1:
77:9e:b6:a7:49:10:71:32:b0:65:29:ff:ca:81:d7:f8:99:ae:
c9:33:2b:16:28:f4:40:fc:28:6b:45:e8:57:76:81:e6:78:3c:
c0:af:6e:a4:ae:af:0c:ab:37:a4:3c:ce:19:3a:0f:4c:dd:b5:
2b:85:10:a6:3d:12:3c:11:ee:42:67:98:a7:31:c0:f9:36:88:
1b:37:58:4e:29:40:86:e4:bc:45:57:e2:f2:1f:90:39:5b:7e:
49:4d:7b:70:26:75:7e:a0:4d:05:c9:b7:0c:7d:71:07:28:b3:
70:42:77:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:59:04 2025 by rpki-client