Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ad4b1d5-173e-4c13-8032-ab2dd1fafee4.roa
File: 4ad4b1d5-173e-4c13-8032-ab2dd1fafee4.roa (raw, json)
Hash identifier: 3NUff3AI4D1JfMJgk4T/AQrddmdg0U49VwOrpJgUV2s=
Subject key identifier: B4:94:86:29:BA:7F:B1:99:6C:05:B8:0A:4C:EF:90:EE:72:57:87:3E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5CAC0FFDD56236FC696EFC2A3693C1EB2ADA13B0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ad4b1d5-173e-4c13-8032-ab2dd1fafee4.roa
Signing time: Tue 20 May 2025 20:11:39 +0000
ROA not before: Tue 20 May 2025 20:11:39 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:ac:0f:fd:d5:62:36:fc:69:6e:fc:2a:36:93:c1:eb:2a:da:13:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 20:11:39 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=0b516a9c7ffb576ebc9811dd8d05f555f4be25f73c464e1f3e20fe16ef915c47, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:38:59:fd:22:b1:ff:05:91:b6:df:a1:ac:
41:ea:12:d7:50:60:1b:f9:f5:1b:c2:2e:50:a5:68:
ef:93:61:49:0e:6b:fd:34:17:75:f4:00:ee:cd:4a:
87:b8:4c:10:b3:29:90:c9:3a:72:ac:19:45:64:d8:
15:01:c5:ca:76:d1:06:3f:e9:01:f5:a2:2b:34:8e:
54:72:e0:f3:b1:0d:e5:3b:6c:5d:ca:45:35:de:cd:
ca:16:e1:5d:2c:21:d6:76:0d:35:38:1f:95:b2:d5:
02:00:ae:75:77:8f:4c:d8:cb:78:b0:c5:cc:e6:75:
fd:5f:91:a0:78:96:8f:df:be:b3:39:45:94:fe:9b:
91:b8:02:b8:cb:52:e9:c1:c8:86:2b:e7:27:e2:4d:
61:c3:f3:73:9d:30:90:ba:97:74:3b:2d:bf:9a:11:
78:a1:f8:0a:2b:5f:0b:ff:ad:c9:e1:61:09:b6:c4:
4f:40:a8:d7:ac:81:65:d6:6a:0b:a7:ce:45:d6:bb:
0c:e9:40:13:01:89:5a:74:86:9d:19:42:e3:9c:af:
2e:fe:59:bf:c2:55:2a:a7:80:04:77:b0:5e:d3:cc:
88:5f:00:f2:9d:61:66:a0:ec:4d:0a:53:3d:ab:ee:
2c:40:f8:8b:02:22:c1:41:62:72:05:84:17:79:0f:
1f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:94:86:29:BA:7F:B1:99:6C:05:B8:0A:4C:EF:90:EE:72:57:87:3E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ad4b1d5-173e-4c13-8032-ab2dd1fafee4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:c000::/40
Signature Algorithm: sha256WithRSAEncryption
83:4f:8f:d5:9a:9c:63:86:08:91:4e:6f:4d:6e:0f:02:84:39:
48:7e:f3:d2:8e:0a:36:a4:e2:a7:b6:dc:35:04:64:58:f9:c2:
54:2e:13:66:03:e1:05:de:04:8b:9b:cd:8e:e1:85:de:3e:2c:
6f:a8:08:5f:98:d8:35:ab:2b:00:96:6c:08:fb:81:97:cc:1c:
3d:d2:39:42:2d:27:e5:a5:3a:20:61:45:5a:31:35:17:a9:f9:
c6:60:ee:2d:34:83:7c:db:a6:f1:03:0f:f2:4e:e1:47:42:a0:
4a:52:33:f2:37:3e:44:b6:3e:a5:9d:99:94:d4:16:f9:ca:4a:
98:d8:0c:2a:53:5a:cd:21:cd:18:c8:bf:93:a9:ab:ee:3f:c3:
27:d5:ef:c9:17:4d:35:5a:97:7b:2c:4b:77:8a:3e:5c:03:a5:
15:9c:1e:f6:2f:0d:2e:94:69:0a:b3:e6:70:5c:71:1b:f7:2b:
10:13:6f:00:97:cc:11:63:2c:da:16:fb:99:55:a5:51:2a:e3:
68:67:50:d2:da:44:46:9d:d7:1d:35:21:88:57:ff:d1:a7:d3:
97:e4:d2:84:90:0e:31:fe:be:3c:1a:fa:14:aa:af:94:a2:03:
6d:20:5d:ca:a5:50:5d:ee:54:c2:e6:48:f9:e4:13:99:c0:62:
06:80:ce:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:37:41 2025 by rpki-client