Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be1170a3-5a68-4c9c-8b51-b7efde64b945.roa
File: be1170a3-5a68-4c9c-8b51-b7efde64b945.roa (raw, json)
Hash identifier: dEpIZH+dXi6DnS3bubSQotQC8BC2OV7jc0VC6o1MRzQ=
Subject key identifier: 15:27:BF:05:C9:59:24:0C:B2:86:62:6E:C4:FD:3A:42:3C:87:C0:A1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 393B1EAD979A299EF3A6DB89E673E08979A07310
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be1170a3-5a68-4c9c-8b51-b7efde64b945.roa
Signing time: Mon 16 Jun 2025 21:00:03 +0000
ROA not before: Mon 16 Jun 2025 21:00:03 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:3b:1e:ad:97:9a:29:9e:f3:a6:db:89:e6:73:e0:89:79:a0:73:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:00:03 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=de21a3b09c02b2d0cb2c2c25632c89378b2187861a42a004519be877e9a5fee6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:dd:40:8d:a3:fa:63:b0:dc:d0:b4:21:1b:
b6:a6:00:6d:7b:c2:cc:3f:51:9f:35:00:3f:41:75:
d8:7c:24:7f:ed:40:8a:84:1d:81:6a:9d:6e:a9:44:
78:19:2f:ea:4e:ce:b8:76:c7:fd:d6:a4:b7:57:29:
2e:25:f6:5e:7a:c2:99:c3:dc:78:b3:65:db:71:98:
ed:fe:a4:25:05:d5:60:a5:57:40:fe:c5:b3:5a:5c:
6b:c7:3e:d5:e9:5d:ff:b6:da:33:fb:c7:41:ef:aa:
c3:72:04:32:43:52:ce:87:73:1f:b0:c9:b7:e4:f7:
e6:dd:ed:a0:3e:30:b7:99:85:d1:15:40:04:c9:09:
12:bf:ec:0c:4b:11:fa:df:72:81:91:50:e7:cf:7f:
d3:6a:e6:bb:e8:0f:3f:06:f4:6d:41:30:63:1a:40:
02:47:ce:23:d9:52:eb:bb:09:a8:00:a8:af:a3:2a:
73:61:a1:47:44:89:b4:f5:ed:7e:1a:8a:f9:18:ca:
b0:58:c2:9d:b6:f4:1e:3d:d1:52:da:d8:8c:9b:84:
18:aa:54:03:a7:92:bd:50:21:59:72:88:b3:b7:71:
fb:20:d5:6b:e9:aa:c3:ee:ae:04:90:e1:16:8d:8d:
55:1b:52:9a:c5:5f:70:8d:76:04:d7:51:a6:86:68:
b7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:27:BF:05:C9:59:24:0C:B2:86:62:6E:C4:FD:3A:42:3C:87:C0:A1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be1170a3-5a68-4c9c-8b51-b7efde64b945.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:6000::/40
Signature Algorithm: sha256WithRSAEncryption
55:1d:6d:fe:93:15:78:d6:bb:b9:75:c9:a4:a6:ca:8e:99:83:
70:93:39:05:c3:94:7f:6c:6c:f1:48:08:31:7f:a5:08:c1:a0:
8a:98:91:9a:dd:76:dd:25:18:7b:78:37:e5:80:b1:96:e7:37:
9c:b3:97:83:da:89:3c:aa:22:61:51:81:da:88:0d:46:43:eb:
6c:d1:7f:78:9b:3c:15:9a:5d:0d:12:6d:f1:36:8e:f8:5c:1b:
da:ed:1d:35:3a:de:03:95:4b:ac:aa:96:be:0b:ea:eb:30:07:
35:cc:1f:31:be:e4:ec:84:af:6e:a5:ba:a1:c6:a9:2c:84:35:
a9:a4:61:e0:16:8e:5b:5d:05:ad:26:56:ad:58:42:6c:b6:17:
04:f4:fe:4c:1f:32:85:f1:78:a7:ca:35:5f:73:c6:cf:7a:37:
7b:5e:3b:d6:70:66:ed:72:8b:bb:30:99:74:4e:32:d5:97:a4:
1f:53:31:13:ff:b6:bd:07:35:72:f3:74:16:45:74:01:25:bb:
af:0c:56:50:48:6d:65:cd:f4:95:72:33:c8:2b:96:01:6b:63:
57:1a:d5:db:68:1e:37:bd:bd:aa:27:63:b5:22:a2:e6:08:86:
d2:cb:7f:25:5c:a0:a0:24:4e:7d:c8:50:bf:ca:af:c5:87:0b:
a5:49:f7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:49:15 2025 by rpki-client