Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/38f9c0f0-a109-485c-bd2d-2e1a440b864e.roa
File: 38f9c0f0-a109-485c-bd2d-2e1a440b864e.roa (raw, json)
Hash identifier: WIAVqFYGJft3ZjmALAFJM9MrTfTxjQs7ScfM1jOAGA0=
Subject key identifier: 39:76:F8:DC:13:67:F4:63:5F:4B:74:3B:88:AC:94:58:05:00:4D:A0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 05E427380A49F78D4AFCE4C1EB6D0D40B4608953
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/38f9c0f0-a109-485c-bd2d-2e1a440b864e.roa
Signing time: Tue 20 May 2025 19:50:14 +0000
ROA not before: Tue 20 May 2025 19:50:14 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:e4:27:38:0a:49:f7:8d:4a:fc:e4:c1:eb:6d:0d:40:b4:60:89:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:50:14 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=2febc9cf8751f00568c44d47fee39397207bc6f1570d5a4d38295ff46487d470, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:20:88:6a:ac:c1:96:b1:af:fd:ef:e1:ec:
26:d6:f9:0a:5e:f1:cf:8c:9b:74:8e:ba:5c:b1:4d:
d3:9f:58:ec:7d:7f:c6:6c:fd:44:ae:fa:2d:4e:b4:
27:a8:58:40:13:ae:ba:b0:85:7d:66:22:e9:81:f3:
6d:2a:6d:a2:79:06:12:63:e8:48:44:ed:c8:e1:f4:
ec:c0:ce:87:0b:2b:a0:10:b3:5b:bc:89:11:38:ec:
25:13:c4:46:6f:2f:54:4b:fb:7c:9e:82:37:bf:8b:
c0:41:ae:18:3e:f1:18:4a:e1:46:62:9d:06:64:17:
8e:c1:97:53:ab:12:ca:85:a7:4a:ff:21:11:c7:86:
7e:f4:98:0f:4e:61:78:a9:44:66:1c:30:86:88:b9:
bd:d9:6b:94:85:fb:98:f0:62:06:09:b8:36:ec:e7:
cb:9b:4e:c2:18:5f:b9:78:d9:f8:a7:d7:d3:5a:61:
cc:92:ed:88:dd:31:c4:3d:5c:a7:8b:76:92:00:2c:
12:fc:0e:4e:72:53:13:14:6c:e2:07:27:29:a2:65:
42:0e:2f:98:10:ea:f1:e5:94:04:aa:d9:28:c7:89:
0b:bc:64:c9:39:61:ed:41:1d:e8:32:3d:db:4f:3f:
e9:f8:fb:77:76:01:45:73:ec:67:19:f5:47:02:9a:
2d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:76:F8:DC:13:67:F4:63:5F:4B:74:3B:88:AC:94:58:05:00:4D:A0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/38f9c0f0-a109-485c-bd2d-2e1a440b864e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:6000::/40
Signature Algorithm: sha256WithRSAEncryption
0b:8b:81:b3:21:9a:09:fe:e9:98:4e:31:5f:a2:f3:f4:69:fa:
2e:c0:65:52:b2:ca:7a:bd:69:83:eb:73:77:a4:42:72:63:7d:
e4:0d:86:24:b0:db:85:ce:7c:fa:c5:bd:46:73:c6:b3:14:16:
bd:36:bc:b7:b3:78:dd:51:42:ca:aa:cb:30:c2:ec:ab:81:83:
83:62:76:d5:b6:f5:ff:1e:59:e1:93:ba:0a:ee:c4:35:f8:b3:
a0:3d:cf:a6:0c:97:48:ce:ac:14:a8:6b:90:3d:a5:c5:a1:ca:
54:6b:54:a2:d1:d6:22:90:69:3d:71:d6:51:34:b9:87:e3:9d:
50:08:56:55:58:05:2c:67:51:f0:17:6f:44:d6:b3:19:e3:1f:
b5:18:e3:d4:77:14:42:a3:42:58:b1:ed:12:f3:39:be:31:42:
e7:3a:a3:b0:86:ab:b9:b4:25:ce:bf:e7:24:e5:56:44:ab:02:
26:fd:65:43:66:5c:56:ae:66:0c:40:fb:4a:b7:df:a3:a3:a5:
90:4c:c8:ad:cf:98:a0:1c:c3:87:0b:a7:68:5b:a2:40:a7:fc:
37:00:d0:40:53:16:b6:a7:2e:30:ed:a8:e7:3d:7d:4d:44:98:
81:27:1d:20:34:89:8d:48:e0:b3:c4:33:7a:6d:b9:f5:f1:c0:
df:dd:04:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:36:57 2025 by rpki-client