Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4408cd10-0fa6-407f-adbc-3a7a668523d6.roa
File: 4408cd10-0fa6-407f-adbc-3a7a668523d6.roa (raw, json)
Hash identifier: ve9KP/REeH2lMZeM2p+Uy3M7oNXigheIQ1I9HzVaauA=
Subject key identifier: 79:50:8E:9C:83:43:99:E2:48:36:19:89:D6:A7:D9:B2:5C:91:BF:7E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 74037E14D14CFD8E8D3717407564E651ED274161
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4408cd10-0fa6-407f-adbc-3a7a668523d6.roa
Signing time: Tue 20 May 2025 18:21:30 +0000
ROA not before: Tue 20 May 2025 18:21:30 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:1040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:03:7e:14:d1:4c:fd:8e:8d:37:17:40:75:64:e6:51:ed:27:41:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 18:21:30 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=877b2841e081af7eb00fdae18c9724eedfd80ff31c9bb38aecf2b185eee0fd89, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:42:4a:74:90:3c:f1:18:66:ba:1d:9d:86:
e8:59:f8:36:86:82:57:80:0b:48:95:b7:09:22:c5:
75:b6:4f:db:e8:9e:3d:ce:6a:bb:5e:ee:38:52:60:
7f:f7:6f:08:f6:05:ea:cb:3a:09:38:fd:f6:5f:81:
05:8a:4c:06:df:ea:af:fc:38:72:3b:19:32:a0:e6:
13:3e:4c:48:77:7e:0d:97:85:9f:03:6f:72:4f:bf:
cd:df:ea:8d:c6:79:74:12:e0:c3:3e:64:a3:df:75:
fc:1d:e7:58:ab:84:12:ab:f1:7c:b8:73:1e:e8:88:
70:4f:d1:6c:be:40:e3:c2:58:bf:61:0d:09:35:45:
40:9c:61:a5:fb:54:25:92:b7:3b:04:bc:59:2b:62:
35:4b:7f:57:1a:01:ff:65:95:49:3c:b6:db:43:96:
96:10:8e:eb:9c:3d:d7:1e:a3:73:ec:94:1b:25:95:
37:24:5a:eb:a1:79:47:80:83:57:b7:d5:5b:ac:c4:
6c:88:28:bb:0f:0f:cd:ec:e4:1b:cb:12:e1:4a:89:
05:a6:cd:4e:fb:8f:5e:98:b0:b5:17:ad:46:75:5a:
b4:bb:d7:5e:e9:bf:db:c4:fa:14:15:2c:c6:6b:7a:
0e:ed:24:ea:ca:e5:79:19:b1:2b:8c:47:44:a1:53:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:50:8E:9C:83:43:99:E2:48:36:19:89:D6:A7:D9:B2:5C:91:BF:7E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4408cd10-0fa6-407f-adbc-3a7a668523d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:1040::/48
Signature Algorithm: sha256WithRSAEncryption
86:db:28:15:66:cb:63:8e:5d:84:c0:d0:bd:6e:8b:75:c2:d0:
70:56:cc:38:db:31:64:5f:fc:8b:60:5a:d0:f6:da:5d:b3:98:
1a:92:93:8d:ae:19:79:a4:55:4a:ab:c3:24:66:cf:2b:3d:9f:
6e:99:33:b0:57:61:db:1f:de:21:e9:50:49:de:8e:4d:8a:9b:
61:cf:d8:6d:15:25:8b:2a:a1:ca:39:fd:ce:d7:0f:8a:bf:c2:
7e:52:2b:56:74:da:bb:eb:22:1b:62:5e:73:62:34:e9:c8:fd:
fe:5a:b1:ad:0c:29:87:8c:2f:30:55:5e:64:6e:9c:9b:b7:9c:
40:db:70:86:92:4f:f8:26:e6:5e:8b:f5:4f:ec:a7:8b:da:bf:
b8:84:f7:61:9b:6c:1e:1d:b2:70:5c:40:c7:4f:c2:d6:02:5f:
1f:03:ca:1f:6c:f8:85:b0:ba:88:57:d6:57:07:32:b1:0b:99:
6c:72:27:33:b5:bf:97:39:b7:b1:93:05:67:4f:23:f0:40:1d:
0f:3b:54:e8:47:c3:45:25:23:c2:3b:a4:56:91:08:a1:7d:da:
c2:c4:54:09:77:95:aa:00:51:3f:b9:de:e5:36:2d:39:33:bb:
22:05:6d:1b:28:64:59:27:e3:2a:6e:37:5b:3a:12:6f:6a:82:
6a:78:7b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:44:32 2025 by rpki-client