Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ab51a88f-7495-4754-985a-700885d2554a.roa
File: ab51a88f-7495-4754-985a-700885d2554a.roa (raw, json)
Hash identifier: wZWhjQoj7oI9v7T1AFjdEOsOcNUEVFj5ouxC9CLrDTI=
Subject key identifier: F0:B3:DB:FA:28:3A:59:B4:98:C2:60:A9:4F:72:9D:18:60:12:25:A8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 58162D6101C1C6372C6B7938E1A9013895402184
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ab51a88f-7495-4754-985a-700885d2554a.roa
Signing time: Mon 16 Jun 2025 20:30:23 +0000
ROA not before: Mon 16 Jun 2025 20:30:23 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:e040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:16:2d:61:01:c1:c6:37:2c:6b:79:38:e1:a9:01:38:95:40:21:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:30:23 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=d90b97753e917c132a3390d6c2b81059437ecfe9e9d950297bd742041822b4da, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:1b:5b:c2:b0:2a:bc:ff:c5:45:38:43:3b:
bf:66:a1:03:1d:fc:6b:c4:28:1b:fc:df:fc:d5:cc:
19:12:a2:a8:bf:4f:74:d2:d4:f7:e4:19:bb:3e:5d:
7a:14:5f:ed:78:7d:e1:08:3d:b9:a1:e3:ef:46:a1:
9a:fb:bc:4b:68:e9:24:bd:8a:13:2e:2e:83:3c:10:
18:5c:71:07:32:10:38:ea:8e:c1:c3:b6:f1:68:47:
eb:ce:d1:1a:dc:25:5d:b1:56:91:6f:a4:75:b1:97:
41:24:58:b7:86:11:83:91:07:8d:e3:eb:1a:b3:e7:
df:6f:20:ce:c9:f3:6d:dd:cf:7e:2b:c9:cf:02:d1:
50:0f:a3:34:96:66:e0:8e:d0:18:4d:96:ec:27:89:
44:d7:01:85:de:13:ca:c5:5b:6d:78:4d:dd:04:4e:
cf:35:bd:f3:64:74:fe:a9:58:cd:ab:bc:17:77:29:
45:00:4c:3a:b0:82:e1:8b:ea:69:fb:6f:03:5e:0e:
fe:36:23:2e:9b:e3:1c:fe:5d:3b:d0:7c:d3:e6:f2:
27:3d:84:9c:5d:48:90:23:68:91:cc:c8:f1:5d:3d:
a5:e5:fd:f8:53:14:9c:6f:d7:79:94:ff:5b:00:ba:
b2:4f:2e:1d:b4:80:7e:a1:47:a8:0d:3c:c8:c1:c6:
a7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B3:DB:FA:28:3A:59:B4:98:C2:60:A9:4F:72:9D:18:60:12:25:A8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ab51a88f-7495-4754-985a-700885d2554a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:e040::/46
Signature Algorithm: sha256WithRSAEncryption
65:69:71:d8:03:31:c9:d8:4d:ea:93:98:e5:e0:10:38:f0:e2:
49:cf:9f:88:a9:ae:6a:a0:ad:f6:4e:7b:ac:df:30:0d:1d:b8:
69:4d:24:66:45:9d:b5:5a:54:05:d6:51:5e:24:ee:9e:10:a4:
0f:a4:91:b1:ac:f5:b8:96:15:52:00:73:21:90:c2:f3:7f:1a:
4c:da:62:41:8d:87:84:85:c4:3d:43:4a:10:b7:51:d7:41:00:
5a:49:e2:5c:3a:60:ff:2f:f8:0f:f1:c3:a1:39:60:42:83:67:
4f:a1:7c:d3:14:a7:f0:bf:30:69:60:c0:63:5e:be:f7:d4:5c:
55:e1:82:0b:0e:98:bc:b6:9c:e3:9a:23:46:21:28:fc:b8:0b:
ab:98:d3:94:cb:1e:82:2c:35:90:74:e5:fd:3a:84:6e:89:05:
fb:10:f0:e2:6c:67:b4:c1:f9:88:84:f3:f2:2d:da:f9:3b:66:
e0:30:9c:b0:61:04:ca:d9:7e:40:93:89:e9:4a:05:b3:f4:b6:
b4:04:2a:f2:45:8e:cf:ac:a6:88:a2:98:a6:fd:ae:1e:71:64:
88:a7:fe:48:4f:06:ff:30:55:2f:0f:6e:27:71:a8:54:4b:b8:
8c:41:d7:b0:38:29:d9:1b:a1:86:d3:ed:46:24:34:47:6b:cb:
b7:cf:32:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:52:21 2025 by rpki-client