Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acd7954f-99ee-4af0-9763-11271381925f.roa
File: acd7954f-99ee-4af0-9763-11271381925f.roa (raw, json)
Hash identifier: pcCL4eSG/D0PGnKzAongurHhTZMnoHuchACts3ndsPg=
Subject key identifier: D4:12:6F:B3:C5:AE:35:6E:D1:66:E0:9B:70:71:05:93:A9:A1:AD:A1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3D7C7DE9F6D6EB68889B5435B6946E2B9617A049
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acd7954f-99ee-4af0-9763-11271381925f.roa
Signing time: Mon 16 Jun 2025 20:31:40 +0000
ROA not before: Mon 16 Jun 2025 20:31:40 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:5080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:7c:7d:e9:f6:d6:eb:68:88:9b:54:35:b6:94:6e:2b:96:17:a0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:31:40 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=90d7cef6dc324eb726ec5dc221c8c0d008f0c701ef8cacb0aea04c717c19f8d4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:cb:1c:68:dd:df:3d:d6:64:e4:1e:de:19:
11:86:40:23:c6:a7:0e:33:be:94:9e:94:d7:00:26:
13:81:de:1a:8b:08:b6:ae:a0:34:5d:bd:17:d1:5a:
fd:39:33:07:dc:f5:dc:19:5e:a3:bb:f8:77:31:b5:
eb:75:85:80:2f:a8:01:b4:dd:13:64:c8:27:83:01:
37:45:a7:9f:de:c6:0f:d8:b0:ca:7b:4f:22:c1:48:
e7:86:57:2e:1a:ce:2a:99:80:b3:3f:81:9e:e4:6a:
e0:a7:a1:b2:47:49:1d:34:f6:c5:02:e5:7e:ed:13:
50:97:2f:7a:c5:14:54:10:04:54:ba:20:23:60:9b:
ad:37:a8:c2:e3:d2:78:32:be:28:d0:c2:7b:39:6d:
37:77:60:1e:95:db:1a:dd:23:87:25:6e:14:28:b3:
89:09:a2:13:42:4f:e1:31:31:eb:14:9d:44:19:64:
93:22:cf:b8:3f:53:3b:75:29:b6:d9:e0:4b:40:73:
c8:cc:d1:94:17:26:35:06:97:72:69:8d:08:d3:7b:
d9:bb:a2:5e:fc:73:69:d4:fa:a6:d7:72:20:5e:7f:
85:e8:f6:0b:76:14:7e:de:87:25:80:fc:2c:05:2a:
34:9d:68:14:d0:0b:16:b1:36:1a:0d:95:de:3f:2a:
b0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:12:6F:B3:C5:AE:35:6E:D1:66:E0:9B:70:71:05:93:A9:A1:AD:A1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acd7954f-99ee-4af0-9763-11271381925f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:5080::/46
Signature Algorithm: sha256WithRSAEncryption
a1:27:dc:a3:28:bb:67:dd:17:5f:aa:89:83:c9:fe:39:6d:62:
7e:f3:32:62:58:3c:b0:f2:d1:31:ba:35:19:96:c2:3e:dd:4b:
58:c4:af:e2:ba:f1:f8:e4:2e:8b:ec:23:b6:d2:76:f6:89:97:
a2:16:4f:60:14:5c:06:1e:52:9c:34:9c:c6:d2:b0:ef:da:31:
d3:27:12:76:97:63:c8:26:34:11:86:fc:f4:a9:65:93:44:01:
3b:65:54:7b:d5:6e:06:1f:55:29:74:fd:5e:2a:9f:6c:8a:d2:
96:3d:7a:fe:a7:f1:b0:13:82:b7:b8:8e:32:06:a2:a3:de:d8:
a1:76:f9:f7:ce:e8:8a:11:d4:e2:d8:5d:df:b4:01:ef:4f:3d:
1a:68:92:be:fa:35:5a:07:0c:ee:07:73:12:3c:79:aa:ba:c2:
76:2c:a1:00:3b:31:b2:0f:91:ef:b8:27:df:9d:d6:31:d3:8b:
17:a2:ba:8c:ea:75:3e:1c:3f:9f:56:73:9f:56:d4:38:76:57:
6b:da:0f:2d:2b:89:4e:c6:43:c2:94:d4:83:6c:14:14:10:ee:
77:0c:47:77:96:2e:32:2f:a7:bc:b7:67:f4:fa:00:fc:78:f2:
00:23:c5:b5:4e:8b:1e:e3:e8:23:23:8c:85:eb:5d:e1:a5:95:
42:f7:17:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:04:47 2025 by rpki-client