Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ead335a6-c944-4428-8125-039e74da6674.roa
File: ead335a6-c944-4428-8125-039e74da6674.roa (raw, json)
Hash identifier: T9K9eqIv7d2kjVPq6P+Xj958A1NkPSY+pVOjmTMgzi8=
Subject key identifier: 8E:FC:78:3B:8C:8C:31:A5:00:71:AC:26:08:CD:42:FB:9F:D2:07:BF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6F8217E711B5AC7860E12CFBA419979C3336E89F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ead335a6-c944-4428-8125-039e74da6674.roa
Signing time: Mon 16 Jun 2025 21:00:50 +0000
ROA not before: Mon 16 Jun 2025 21:00:50 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:82:17:e7:11:b5:ac:78:60:e1:2c:fb:a4:19:97:9c:33:36:e8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:00:50 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=6a943f0b7c0acfffa47d9a15c24b8147e6513283f0b0a7836757979187f9d3a3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ae:cc:a1:54:77:a8:98:53:53:dd:ad:fa:a3:
7f:a9:0e:6d:d3:68:25:57:90:33:e2:0b:89:a0:54:
1f:ba:cc:73:e7:28:f8:a7:8e:ba:32:04:01:e3:1d:
15:5c:40:4e:63:86:c6:8d:2c:dc:6e:23:07:b6:08:
a1:30:15:3f:86:11:6c:29:9e:5e:97:54:69:81:2c:
25:66:48:89:c6:c4:05:6e:c6:26:64:49:88:7c:96:
52:aa:b3:e6:41:d4:5d:3b:cc:70:96:21:35:b3:47:
b0:15:7e:1b:2b:63:b5:87:95:0c:58:b0:e1:b5:72:
4c:e7:65:08:cb:4a:16:80:ef:64:fb:e8:69:9d:4f:
b4:0f:1c:81:b4:4d:fa:ee:e1:2b:24:f6:7b:91:c4:
72:fc:0f:8b:7f:39:92:ac:d9:8a:0e:f8:03:0a:f4:
8b:44:cd:04:dc:97:98:1f:0f:b5:e4:85:6e:75:02:
bc:5e:e4:fc:71:6f:14:32:fa:ac:21:3d:62:11:06:
18:f6:83:10:42:14:4c:9b:62:aa:e1:59:0a:a5:1e:
0c:9a:6d:6c:69:2d:67:df:06:c5:94:6c:cb:be:b6:
65:35:b9:65:23:a8:5f:24:b7:d3:77:5d:70:1e:dd:
01:82:11:b3:ee:54:60:9f:ad:86:11:a8:59:94:88:
6c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FC:78:3B:8C:8C:31:A5:00:71:AC:26:08:CD:42:FB:9F:D2:07:BF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ead335a6-c944-4428-8125-039e74da6674.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:2000::/40
Signature Algorithm: sha256WithRSAEncryption
04:7e:99:8a:3c:92:d0:94:42:ec:9a:55:21:0b:c2:4d:aa:0a:
d3:c2:47:7e:f4:ab:6c:7d:b2:57:46:96:ab:ab:f0:53:f1:aa:
f5:be:99:66:6a:f6:77:cb:dd:0f:c3:f1:a7:57:d7:d5:39:a7:
81:12:61:09:85:6b:3e:7b:a6:f1:82:8c:63:00:1b:38:50:50:
85:04:c4:a7:bb:14:3a:15:76:c3:eb:a1:91:21:52:5a:e4:9b:
7e:27:e4:b0:ca:2a:bd:45:e3:41:49:b0:77:84:d0:1b:a1:e0:
90:77:86:ad:62:5c:5b:51:bc:94:58:7b:d7:24:d5:21:b5:c5:
71:ab:5b:b7:ab:a4:37:06:4c:3a:4d:4f:77:24:5d:b2:a9:ec:
8a:d9:76:af:14:7b:a6:6d:64:23:a8:22:97:11:fe:89:ae:4c:
60:08:39:ba:8d:b7:7e:7b:a6:af:ac:ae:19:d2:31:ea:e7:29:
25:09:29:65:8c:fc:67:2e:88:d6:f9:75:ab:ea:71:b0:82:d8:
df:b2:8a:be:29:0d:74:4d:71:cc:61:e4:2a:66:52:fa:7e:4c:
68:fb:02:25:9e:ff:fa:8a:d5:45:1d:de:06:fa:55:4f:29:4c:
0f:8d:e4:c9:e1:0d:9e:f5:c2:61:2c:66:b6:5d:d7:98:d9:cb:
f2:79:82:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:02:51 2025 by rpki-client