Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea9f1f24-552b-49dd-a167-4872d5575c1d.roa
File: ea9f1f24-552b-49dd-a167-4872d5575c1d.roa (raw, json)
Hash identifier: 23sTpz8Z3uIuJ1woMRVyVngTDHcuQBxEjGXlQHr3jGI=
Subject key identifier: 34:87:B6:A7:08:15:49:B4:66:0D:4C:3F:1C:9A:D6:C7:DF:29:B7:06
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5011C17187AEF121CA8FB03F0F04791CC8267609
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea9f1f24-552b-49dd-a167-4872d5575c1d.roa
Signing time: Mon 16 Jun 2025 19:30:06 +0000
ROA not before: Mon 16 Jun 2025 19:30:06 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:11:c1:71:87:ae:f1:21:ca:8f:b0:3f:0f:04:79:1c:c8:26:76:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 19:30:06 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=fa51f21c95f8d35eefb2c7f56f945a199dc53c3e20b8bf09b9c2082c5a0a2e64, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a8:7d:c0:ae:1e:76:9c:75:7a:d1:ed:d2:72:
1e:2d:83:60:85:e9:27:42:d0:1d:fa:a6:56:0e:e9:
06:82:9d:81:90:32:40:e9:2d:f5:af:8d:c7:02:b1:
33:76:d5:d4:58:0d:82:d3:44:f1:a5:e0:bd:a7:a8:
a2:45:af:5f:ba:6b:86:fc:e3:32:87:f0:ff:ea:94:
2b:e8:32:f5:ba:d4:80:f8:03:04:d6:d5:e4:b6:a1:
4a:5d:e1:30:48:8e:a0:f7:15:4a:51:9c:95:83:ea:
31:af:b2:dd:21:fb:a6:3d:a5:21:89:72:bc:5f:be:
78:4d:b7:ac:69:7d:d3:44:2a:68:d3:29:02:d9:d3:
c2:1b:38:9b:e8:f1:26:15:ef:5d:d9:b4:f3:20:68:
83:96:2e:d1:cc:34:70:57:05:ad:2b:2a:22:b6:24:
03:9b:16:c4:e0:34:26:34:cc:42:55:5f:59:3c:24:
6d:84:48:26:6d:eb:10:a0:34:51:13:35:71:9c:5d:
9c:55:5b:0d:77:14:6f:16:65:77:62:ef:5c:fa:7e:
c2:1f:dc:b8:f8:ce:50:30:4e:43:68:3c:bf:bf:c3:
48:f6:fb:1b:ed:47:8f:85:dc:84:56:65:14:51:2b:
c7:74:f1:99:15:5c:67:08:f4:7a:61:7d:94:45:17:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:87:B6:A7:08:15:49:B4:66:0D:4C:3F:1C:9A:D6:C7:DF:29:B7:06
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea9f1f24-552b-49dd-a167-4872d5575c1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.120.0/22
Signature Algorithm: sha256WithRSAEncryption
af:66:4d:97:d8:31:7a:93:65:83:11:66:70:9a:c6:5e:33:9b:
b2:fc:91:af:52:f4:ae:e2:dd:c8:e3:00:c9:f4:19:60:19:4d:
4f:ae:71:b2:1b:82:15:52:5f:e2:39:e4:b1:d7:21:f0:fb:c9:
ab:ee:4f:7d:76:c4:ae:e6:b5:bd:49:30:57:f4:db:c5:4b:66:
a2:f0:61:ed:fa:00:11:cf:36:48:dc:a5:34:ee:10:5f:46:0d:
fb:1b:1e:0e:30:2f:2a:b2:38:27:8c:ee:a3:b1:26:b7:89:97:
40:32:ab:71:4c:5f:ea:c9:94:46:18:ca:95:20:b7:90:5f:a0:
03:42:67:85:6f:77:b2:37:dc:d0:ea:88:c6:16:e4:e2:a6:c4:
f6:e3:10:c1:df:7f:94:2c:e8:3b:74:ce:b9:bf:ff:1d:76:7e:
30:91:48:ac:45:d1:cf:24:d2:54:07:54:76:4f:bf:67:c1:40:
2c:f1:73:a8:27:4b:32:61:9d:0b:bb:24:8f:64:25:ab:c2:ad:
04:23:cc:ca:88:19:5d:35:d6:35:9b:f6:90:52:a4:08:df:3b:
3c:83:0d:70:11:c3:5c:db:69:b0:86:ef:66:36:57:22:19:76:
49:5b:e2:c7:9a:61:d6:dd:14:ac:39:24:8d:ab:83:5c:f2:26:
f3:67:4d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:52:31 2025 by rpki-client