Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa
File: b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa (raw, json)
Hash identifier: AISejT/8oa6aB6QAgI9+fMcpqktKdvMxTKQmjhNXUnI=
Subject key identifier: BB:98:D0:B7:66:B4:1F:91:1F:43:A7:02:3B:F1:D0:A6:B7:DE:85:39
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 409C0C1B85B57A48F5C7063CC8DC3A444482C048
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa
Signing time: Thu 26 Jun 2025 19:37:09 +0000
ROA not before: Thu 26 Jun 2025 19:37:09 +0000
ROA not after: Thu 31 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:4020::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:9c:0c:1b:85:b5:7a:48:f5:c7:06:3c:c8:dc:3a:44:44:82:c0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 26 19:37:09 2025 GMT
Not After : Jul 31 23:59:59 2025 GMT
Subject: serialNumber=f0fd434355fc0c16c7ef5a90be90334bb41071b14cddc6e8adf97057d18e995e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:78:4d:5b:d4:20:13:51:d2:39:bf:d6:17:1f:
a7:26:82:ad:ae:be:34:54:f7:51:ba:57:59:10:9d:
16:62:88:f8:04:8c:19:6c:09:75:e5:51:06:19:aa:
f4:8d:ff:f7:a8:6a:84:d7:8a:98:1b:a6:15:6e:43:
87:e6:a7:c1:4f:b7:60:f5:f5:59:96:bb:d2:dc:12:
05:e1:2d:b4:22:5c:c4:ac:4c:5c:37:cf:82:a8:b3:
ec:49:ca:b5:7c:2b:92:1e:40:59:33:2d:fc:fc:1e:
39:b0:08:f9:3d:67:55:1e:0f:d0:f9:99:63:8d:a1:
bb:03:25:34:b8:57:29:9d:b6:ef:34:e0:57:5e:a9:
f7:cb:5e:59:7c:76:6c:75:54:1c:13:6d:38:e0:0a:
ac:1d:84:e6:a7:f9:bb:c6:d3:31:45:0a:66:b9:c1:
65:3b:8d:9b:ad:66:6b:2b:14:a3:d8:ff:fd:f4:ea:
dd:67:64:ed:fa:0c:99:86:6b:2e:28:b8:4c:7f:39:
67:56:67:e5:0e:52:f7:2e:1b:9a:3c:cf:e6:e9:0b:
ca:ee:81:b9:8b:4e:86:0c:31:3f:1b:41:06:e6:86:
16:c3:a2:6c:37:e4:3f:bc:cc:c9:f5:e8:9a:cf:09:
05:ba:2a:7a:33:92:5e:0a:2b:40:b0:93:c8:3f:1b:
49:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:98:D0:B7:66:B4:1F:91:1F:43:A7:02:3B:F1:D0:A6:B7:DE:85:39
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:4020::/46
Signature Algorithm: sha256WithRSAEncryption
84:7c:d8:e2:47:29:9c:e2:36:d8:7f:6a:d0:57:8f:65:c0:41:
23:3b:61:af:f7:6d:6b:c7:b6:40:64:7c:2b:c0:ca:46:83:f7:
64:bb:0b:41:9e:58:8b:3f:80:1a:5a:b0:19:41:5e:e7:08:e2:
ef:ac:75:d9:c1:78:66:fd:1c:4d:fc:c9:dd:6e:9a:2e:d1:3f:
82:58:4a:33:5c:41:db:4d:a8:78:23:3c:69:bc:31:b3:e4:ca:
bb:2a:1a:76:e8:b0:f8:5c:9c:03:4d:11:e3:fd:53:4f:4e:3c:
65:fd:97:6b:f8:79:77:d9:dd:2f:35:d5:b5:17:c8:8c:1c:65:
34:47:e5:53:00:56:9f:7b:6e:b0:d2:93:2a:bc:8d:60:86:b1:
48:cc:81:b7:46:60:39:46:47:e2:98:96:75:5a:d0:81:84:b8:
c2:e7:cc:61:3d:4d:db:66:b3:91:20:f8:87:7e:a1:af:18:c0:
9e:32:96:79:66:c2:e3:b1:cf:01:97:19:25:ec:43:4d:d1:b8:
e1:be:1b:10:2c:ea:e3:84:09:1d:e1:11:bc:62:b6:7c:f7:42:
67:26:70:51:75:6b:1b:c3:63:bf:ec:30:34:17:c1:84:db:8a:
15:3c:47:e1:d4:72:a9:b7:38:8e:a9:d3:22:d2:d1:31:3b:ee:
f2:1f:6b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:51:22 2025 by rpki-client