Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4097b6b4-475f-4f96-9d5e-88c08f2c5804.roa
File: 4097b6b4-475f-4f96-9d5e-88c08f2c5804.roa (raw, json)
Hash identifier: J454GXbsxtRjL/pPBRGfwaFs3yuksJgRRfWY479SfeA=
Subject key identifier: CB:D7:48:6E:60:94:82:D6:72:BB:36:DA:EE:82:0D:F5:E2:66:1E:1D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5D0A0D5C750D58F6F4925D33607CF3B172B78821
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4097b6b4-475f-4f96-9d5e-88c08f2c5804.roa
Signing time: Tue 20 May 2025 19:31:06 +0000
ROA not before: Tue 20 May 2025 19:31:06 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:4080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:0a:0d:5c:75:0d:58:f6:f4:92:5d:33:60:7c:f3:b1:72:b7:88:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:31:06 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=bbbf7bc5168e895ae51210aaa2afc187c1fed00665305642d2cadda2fb3a8645, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:14:57:24:cd:60:d1:27:24:13:c7:db:b9:
0e:5f:d7:45:7d:b0:cd:d4:ea:2d:0f:97:d7:80:90:
51:16:9b:e2:2e:e1:07:00:b0:37:c3:ad:3c:9e:55:
0a:3e:3f:f5:a0:57:b0:62:18:3d:1d:00:5a:20:78:
a2:20:72:55:2e:7d:79:3e:51:6e:b3:3c:f3:c3:0e:
5b:33:6f:76:91:0a:a8:92:85:82:39:ff:af:09:73:
3e:b8:e1:78:ec:8c:3e:67:6f:59:5f:e7:e5:0c:50:
6b:af:db:13:a5:b4:92:e3:70:aa:36:fd:d9:0e:04:
1f:4e:68:28:e8:91:85:ed:22:ed:cb:ad:97:db:39:
83:4e:b0:17:f9:b4:2e:3f:2b:73:db:77:87:4c:9e:
fa:b9:61:b5:24:91:22:52:25:60:4e:ba:6c:cc:f4:
e6:7f:00:29:e7:8d:85:89:93:70:df:69:4f:d8:b7:
94:e7:41:15:4e:c0:0b:93:07:de:d6:4c:c9:a2:5d:
4f:1e:7e:b9:33:3d:cb:47:73:93:e7:f0:a8:a4:cb:
0b:c8:df:71:7a:07:a8:56:45:59:1e:8e:f7:e4:ba:
89:3d:0d:fd:bb:40:12:c8:8d:52:11:f2:50:eb:0a:
aa:85:c9:a7:15:a4:d7:6c:af:b5:da:07:d0:dd:e1:
e7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D7:48:6E:60:94:82:D6:72:BB:36:DA:EE:82:0D:F5:E2:66:1E:1D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4097b6b4-475f-4f96-9d5e-88c08f2c5804.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:4080::/46
Signature Algorithm: sha256WithRSAEncryption
88:58:3c:b6:be:37:00:c0:30:ff:88:b9:4c:06:d4:d1:59:2b:
cc:c1:58:b7:1c:8f:d4:3e:10:b8:b7:18:37:34:91:f4:05:d1:
2b:38:75:20:2e:8a:15:1a:16:eb:e3:87:45:a2:1f:66:85:2a:
67:69:8a:47:46:34:89:af:cb:34:fd:27:59:63:d1:38:4f:71:
97:ec:e1:08:0b:1e:e0:2a:cf:f0:a9:0b:29:af:bf:bc:f2:92:
4a:19:0b:99:42:44:da:06:78:55:eb:57:72:22:c6:58:d3:e1:
91:c4:85:f7:12:43:83:95:8b:d4:8e:8e:e5:71:b7:c9:e5:71:
a6:58:76:08:f0:6e:64:d7:d5:52:38:0f:f0:8d:99:57:2c:ee:
30:f4:3e:fe:92:e2:d2:03:b3:5d:8e:8c:2b:b9:b2:59:0c:63:
1f:e0:07:b8:ce:af:7f:5c:9b:df:45:17:2a:c7:74:d4:46:ba:
70:c1:c0:ac:0d:f8:13:8e:7a:27:c2:52:84:0c:65:fb:53:c7:
c8:95:6c:ae:43:cf:b0:35:41:8e:f5:bf:98:b6:07:9f:8a:0d:
ee:be:8b:f8:d5:5b:a2:ce:9e:a7:8b:d9:54:d0:99:7b:db:47:
2d:2c:5e:3d:b1:b4:e8:69:74:44:f9:29:71:85:8b:51:06:5b:
0b:e8:2b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:41:08 2025 by rpki-client