Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c2fae133-061b-4a28-9d2b-b752d98ef502.roa
File: c2fae133-061b-4a28-9d2b-b752d98ef502.roa (raw, json)
Hash identifier: lHMptPbttBnk6oR66WY9OhdPrC2wyRV5DHYWAjFUiL0=
Subject key identifier: C3:D3:5C:70:B5:96:8B:AC:D4:69:F1:D3:E0:A6:3D:D3:C5:C5:67:71
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6BADC49E04EF559C17A562EEB6E6484C9E5FE251
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c2fae133-061b-4a28-9d2b-b752d98ef502.roa
Signing time: Mon 16 Jun 2025 20:50:46 +0000
ROA not before: Mon 16 Jun 2025 20:50:46 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ad:c4:9e:04:ef:55:9c:17:a5:62:ee:b6:e6:48:4c:9e:5f:e2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:50:46 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=4cb94e387b8b2812d5c1ac51889d1d1872770a38bca6165cc0857ec0ca976747, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:b6:52:93:a5:a1:f7:be:c6:fa:0b:66:8e:
30:f0:4d:0c:f3:8c:d8:d7:55:fc:7c:d3:9c:72:f8:
36:dc:2a:4a:83:30:c4:6a:3a:fa:76:a8:af:a8:12:
96:e9:61:b7:72:2c:14:89:3e:96:73:a2:e0:5e:fa:
51:52:76:59:1f:11:d6:cc:c6:d9:ff:76:e4:09:47:
0b:b3:4f:30:c2:f5:b8:8d:58:c2:52:ea:36:5d:bc:
f0:09:2d:99:db:96:cf:bb:f4:7d:22:39:4e:50:a8:
41:81:e5:40:af:b5:d3:d4:b9:2a:c4:4c:42:6c:11:
a3:4f:3e:57:5b:1b:09:a2:41:f5:2a:4b:da:d1:d8:
a4:01:0e:34:b5:d0:ec:f2:02:f0:6f:24:f3:83:f3:
4a:c9:02:ac:92:dd:03:59:f9:95:a8:91:80:21:fe:
13:64:6e:22:42:c7:e7:9a:02:52:0f:f9:56:0a:78:
b4:32:1c:7a:93:9d:cf:1f:f2:c6:90:47:33:b4:fe:
7b:0c:c3:91:02:41:20:da:9f:38:4a:76:09:67:d5:
71:ad:bf:df:47:62:c8:f2:98:4d:f8:88:1f:25:26:
0e:be:28:bc:25:09:10:d3:83:51:00:ab:6d:9e:ac:
23:7f:d9:58:2d:41:70:d2:4e:91:44:58:4c:84:ce:
a1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D3:5C:70:B5:96:8B:AC:D4:69:F1:D3:E0:A6:3D:D3:C5:C5:67:71
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c2fae133-061b-4a28-9d2b-b752d98ef502.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:5000::/40
Signature Algorithm: sha256WithRSAEncryption
20:f9:b5:b4:7f:ca:b0:4e:a6:27:d6:0e:40:7d:1c:1d:0c:2a:
e8:af:33:ed:0d:6f:88:7c:02:71:73:6e:c7:59:42:63:e5:c5:
a2:21:cb:69:2e:25:59:72:c2:d1:7b:97:79:0d:9d:ea:a7:0d:
78:55:5b:c5:22:ba:09:a9:36:c4:80:96:c4:ee:50:24:29:6d:
b6:2c:e8:5e:88:d1:79:87:0d:52:b9:7e:43:7c:35:b7:fd:da:
e1:2d:3b:3d:14:0d:4c:5f:6c:a8:d6:0a:d2:9e:e5:36:ce:43:
bc:97:fe:93:61:5d:85:90:97:59:85:5b:7a:cf:02:b2:6e:97:
af:33:0d:96:8c:a0:70:67:5f:0a:b7:29:17:ee:83:44:da:b7:
e1:19:72:28:ec:85:d8:fc:e1:b6:82:9d:1a:ee:85:5d:6e:be:
cf:3c:ba:e6:3b:61:5c:6f:5d:e2:a5:d3:28:d0:0a:69:47:52:
51:dc:63:ed:03:23:03:4e:f4:46:9a:02:6d:c0:d6:66:ff:19:
6c:a2:31:4d:53:be:bf:31:a7:00:3c:95:4c:8f:7c:52:ff:a1:
1d:05:1c:11:ed:4b:f6:96:ee:23:19:d3:2f:df:22:8b:0f:21:
5e:3d:de:f3:03:1d:bd:dc:8f:de:62:06:68:bc:7b:6e:79:8d:
3d:2f:37:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:26:47 2025 by rpki-client