Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f2d2dfe9-f57a-43e4-8471-748b12e9dda6.roa
File: f2d2dfe9-f57a-43e4-8471-748b12e9dda6.roa (raw, json)
Hash identifier: dyoEf+mXM42CZUgT9wljuLNGTY/Geri9tkbY5M0m9bw=
Subject key identifier: 76:25:7C:AF:D1:4F:F5:7A:C2:53:BA:FA:EB:89:86:6C:AA:B1:63:72
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3A74EE55B0BD938D6D7F273F4C1AC478A26E5870
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f2d2dfe9-f57a-43e4-8471-748b12e9dda6.roa
Signing time: Mon 16 Jun 2025 20:21:21 +0000
ROA not before: Mon 16 Jun 2025 20:21:21 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:74:ee:55:b0:bd:93:8d:6d:7f:27:3f:4c:1a:c4:78:a2:6e:58:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:21:21 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=6d57c92aa158d5ba7995e717d99836513273042ded702927bb9d3fdaee03b3a4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:47:06:09:a3:23:51:26:b9:7b:5c:4c:ea:
3f:6f:59:3b:55:59:34:ee:b8:34:d7:99:fb:93:0d:
49:ed:14:5e:41:a8:af:34:03:6c:98:30:14:e8:fa:
9e:4d:de:5d:b8:44:cf:ac:20:6e:ea:34:ec:78:ef:
54:0e:9c:67:89:99:97:fe:c6:b3:55:03:54:be:cb:
82:71:e2:17:04:09:6d:7f:5a:ff:f2:f7:87:84:a1:
76:38:cd:fb:83:ee:02:b0:80:1b:60:7b:18:fe:e4:
be:e0:56:f9:43:f7:34:bc:6a:38:8e:9f:80:63:f7:
28:dd:e3:40:a0:99:e6:78:8e:11:3a:18:21:df:7b:
26:bb:9f:8d:58:20:ce:f8:33:ae:6d:5d:56:4b:44:
68:7f:e8:b6:f1:c2:f8:69:d9:f9:f7:17:6d:4f:f4:
25:cd:b9:78:8a:e0:48:09:42:b5:0d:0b:b7:fb:1a:
2a:9a:ac:9e:bb:a3:0b:de:a2:ab:5b:e3:8c:ec:03:
1b:37:5a:5c:46:77:1c:88:99:12:2b:7c:43:3b:1e:
5f:35:8d:fc:cd:d9:61:c6:39:e3:29:d9:2c:f0:68:
fd:bf:1b:62:b9:5e:8d:48:0e:fa:bb:af:97:c2:4c:
8d:3d:08:bb:33:09:32:f5:98:f3:35:48:3a:3f:b9:
85:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:25:7C:AF:D1:4F:F5:7A:C2:53:BA:FA:EB:89:86:6C:AA:B1:63:72
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f2d2dfe9-f57a-43e4-8471-748b12e9dda6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8000::/40
Signature Algorithm: sha256WithRSAEncryption
16:2d:6d:be:89:91:12:0c:a7:71:5e:cf:5b:fd:30:11:00:c7:
06:b8:62:ad:8b:4d:41:71:17:75:47:f0:67:d2:4b:ce:9b:87:
1e:48:f2:c9:47:be:24:b5:12:44:59:62:16:26:40:df:b2:99:
9d:5b:ba:d2:f4:ab:3b:c5:3d:75:90:db:a1:4a:99:c8:d5:a7:
4d:94:61:d4:af:04:7e:a5:4e:00:d3:9e:e9:48:55:2b:72:21:
4a:a8:2b:e3:94:1c:64:cd:9a:30:6b:fc:87:88:a2:6e:94:db:
9f:2f:3c:3b:66:1a:68:fa:63:96:d3:e4:ed:4a:33:12:10:d1:
61:a7:58:e4:3d:1d:b4:c3:c0:41:5e:bf:e1:9f:d0:42:38:97:
a1:49:d2:f9:c1:62:40:86:e3:f1:8b:34:cb:0e:e2:1e:d6:60:
4d:12:e1:81:69:72:a6:f8:40:6e:9e:51:bc:cc:5a:1c:77:7d:
17:3e:a3:07:d0:25:7a:8c:34:a2:0d:cc:90:d2:88:29:9a:a6:
09:0a:44:36:6c:2b:15:44:3a:ff:36:87:01:4d:6d:79:7e:14:
93:d9:c3:5a:0f:c3:cc:31:64:07:39:c6:62:10:77:ed:e3:2f:
1a:41:30:16:b2:db:d3:bb:87:9f:d4:8f:2d:f6:8d:a8:55:44:
b3:d4:b7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:25:46 2025 by rpki-client