Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1af8ee5d-0148-4672-a9da-a1980cfe4768.roa
File: 1af8ee5d-0148-4672-a9da-a1980cfe4768.roa (raw, json)
Hash identifier: IyTHmLNEhGiDkoQUj6tb4tkMPWl79b4gOXh1TdPtA1U=
Subject key identifier: F6:9F:ED:98:43:75:82:4E:70:7B:F5:02:06:76:C7:4B:37:AF:07:FA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 27EA6055167374134CB33D4AEB9EE2061FEA5D16
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1af8ee5d-0148-4672-a9da-a1980cfe4768.roa
Signing time: Tue 20 May 2025 19:10:39 +0000
ROA not before: Tue 20 May 2025 19:10:39 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ea:60:55:16:73:74:13:4c:b3:3d:4a:eb:9e:e2:06:1f:ea:5d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:10:39 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=7b8685d61f44f8ea75476666590774004972dc1f9660c0d08913ec57d372a32e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:2c:b7:12:69:b7:3a:cc:c6:8c:d6:b4:07:
aa:b1:08:8c:2b:b5:0b:f7:00:7e:b5:f4:66:19:78:
0c:8e:c3:9d:a3:37:b7:31:17:dd:0f:60:71:27:43:
a1:7a:61:da:d9:f5:c9:4e:12:10:a2:33:7c:5b:98:
18:c4:ad:8c:ea:2f:bf:3a:ab:cc:bb:cd:de:3a:d9:
e1:e6:ff:1c:a2:72:b4:f4:e3:55:7f:73:2a:8e:e8:
72:35:10:d4:8b:e1:12:6f:54:7a:c5:7d:b4:62:f6:
a9:98:e6:f1:cf:4b:69:c7:18:fc:b2:08:e1:17:a7:
3c:76:81:eb:cb:22:86:d7:2d:c9:a2:80:4c:14:f3:
52:f7:e8:4e:20:0d:bf:6c:88:08:18:d9:43:ae:23:
b5:b0:e7:26:b5:5f:74:7b:8b:c3:ee:46:c9:02:41:
33:36:b3:24:39:e5:32:a9:b0:c2:2e:17:88:35:85:
18:ef:c5:68:f2:71:b1:83:a7:44:38:a9:52:d9:67:
d2:c1:47:c5:a4:58:77:f0:f8:4e:3d:b5:02:78:ee:
e9:48:6d:28:c3:53:38:f3:93:be:e6:57:2e:c4:55:
22:9e:9e:72:3c:ba:53:f9:c4:b6:14:ca:de:90:27:
10:d1:b6:d8:a5:4a:d2:a1:65:4b:7f:98:d4:65:02:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9F:ED:98:43:75:82:4E:70:7B:F5:02:06:76:C7:4B:37:AF:07:FA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1af8ee5d-0148-4672-a9da-a1980cfe4768.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:8080::/48
Signature Algorithm: sha256WithRSAEncryption
06:29:06:a4:e0:0c:63:46:df:e9:f5:c5:c7:36:3f:24:20:e9:
4c:1e:6d:dd:96:ff:bc:43:32:fe:2d:d7:c1:96:58:bb:1a:d0:
fa:bc:68:33:ef:1c:6c:46:5b:80:d5:e8:d0:b7:ef:c3:99:2d:
b6:19:a6:b6:a9:37:df:a6:12:6f:7f:55:29:4c:6f:bd:40:bb:
a9:5d:d6:4a:03:58:d9:53:82:61:0a:57:c7:29:ff:a1:f1:77:
80:09:ae:91:4d:21:f7:22:9b:c9:f8:7d:f4:00:36:9f:a8:1a:
b6:20:c6:cd:af:12:81:b0:54:2f:43:6d:13:8b:0f:7d:66:8d:
81:98:11:2a:a9:3b:59:f7:96:49:b7:18:22:30:d3:fe:66:c7:
ed:81:7b:be:50:98:2b:81:b7:c2:e8:c9:12:34:8f:d3:34:97:
2c:b2:4c:ab:c9:c3:4e:e7:07:b7:dc:ec:66:81:6e:6c:84:b6:
94:a2:9a:5c:95:63:e5:d9:fc:82:65:84:22:f3:72:cb:36:71:
00:b4:f0:88:35:58:3f:2c:1e:e9:d3:10:44:f4:2d:43:59:58:
16:4d:ad:b3:95:42:8d:7b:7e:95:d3:fb:3d:67:e1:5a:19:eb:
59:43:47:e5:3f:de:3e:99:12:31:40:4e:fc:c8:92:05:f2:29:
86:14:c4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:39:12 2025 by rpki-client