Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5854e06a-c825-40fe-bf51-5b77d3ba4d02.roa
File: 5854e06a-c825-40fe-bf51-5b77d3ba4d02.roa (raw, json)
Hash identifier: LM/rsoU1+iuRrgI4aTCxjdUFAfxsgRUWQxxirniCoTM=
Subject key identifier: C4:DA:50:52:3F:5B:27:11:08:64:9F:59:87:5C:6B:AA:C9:3F:88:38
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7345790CB67BA689B78769C15C77C0AFB3B03E5E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5854e06a-c825-40fe-bf51-5b77d3ba4d02.roa
Signing time: Tue 20 May 2025 20:21:12 +0000
ROA not before: Tue 20 May 2025 20:21:12 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d016:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:45:79:0c:b6:7b:a6:89:b7:87:69:c1:5c:77:c0:af:b3:b0:3e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 20:21:12 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=5d5d0c24559bc40de89085be11910e9f83fed70f31f575fd28bfd1113e78e713, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:90:bb:4c:39:71:4b:a7:ac:f9:30:54:29:
c1:88:4b:31:da:b1:ce:10:0c:a8:fd:ae:00:a7:a4:
be:d8:d9:f4:07:e6:d5:00:d1:2d:99:10:6c:b4:67:
ae:13:b7:40:62:9f:98:7e:c8:3f:c2:76:6c:6c:fa:
a0:99:5b:2a:c9:63:87:31:c7:ff:03:03:da:e9:3d:
3d:00:b7:a9:94:21:2a:31:82:46:90:47:9f:5d:4e:
84:50:0e:7a:49:d3:08:8b:bb:7e:2f:b2:ae:de:85:
e7:b5:e9:a7:ff:e7:91:6a:70:82:95:39:b2:3a:f2:
d7:1f:3a:70:48:92:42:17:6c:35:83:6c:17:00:68:
c0:39:09:dc:70:9f:d9:07:22:79:c5:42:b1:bb:ca:
8f:1c:a9:7d:dc:f1:8f:fd:de:63:f6:75:3a:50:80:
03:15:66:27:41:e8:d7:e9:01:43:73:ca:0b:fd:e0:
28:83:54:0d:43:db:22:11:56:09:2b:6a:a8:08:05:
7f:59:4d:cc:8e:e1:80:62:c7:f4:1b:43:f3:8d:75:
e7:a7:53:be:6d:c8:1a:c1:c8:22:e9:9f:e1:bf:26:
95:fd:de:4d:71:9f:d1:3e:ed:10:f5:b2:e3:29:05:
94:30:20:34:bc:83:53:42:55:a0:e5:81:33:96:80:
3e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DA:50:52:3F:5B:27:11:08:64:9F:59:87:5C:6B:AA:C9:3F:88:38
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5854e06a-c825-40fe-bf51-5b77d3ba4d02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d016:c00::/38
Signature Algorithm: sha256WithRSAEncryption
9d:10:5d:d8:f9:78:03:8b:d7:cd:ce:f8:1d:2a:2b:44:33:25:
27:3b:87:ef:eb:46:dc:a3:a8:06:e0:49:b2:3b:4d:59:1c:08:
57:d2:32:bf:2e:ba:6b:02:90:b6:f9:5b:4b:c1:e0:f2:d4:c8:
25:74:57:c9:ee:c6:fa:bb:80:67:61:a0:b1:20:1c:72:0c:90:
c8:66:12:22:14:f3:e6:29:c1:18:4b:cd:90:5e:c6:ab:28:fe:
cb:05:8d:88:1e:85:d0:7d:bd:d9:5e:62:ee:87:00:71:95:bf:
5e:90:9f:31:9e:c3:2b:c2:84:e4:a7:23:28:1f:83:79:ca:7c:
5d:fe:3d:02:df:2e:41:03:73:f5:00:d7:33:8a:bb:66:7c:cb:
3b:84:48:98:c3:a8:e9:95:ae:fc:53:5a:8f:a1:63:8d:c1:31:
f1:b9:92:5b:cd:11:7f:05:b6:ca:08:80:2b:9c:ab:df:3c:5d:
ed:66:06:42:1e:45:1e:d7:ee:d3:1e:28:37:c9:2d:bd:34:5a:
40:aa:18:f7:ac:3d:8e:b1:1e:da:64:14:7b:7e:08:a9:28:91:
49:a7:d6:53:d0:6f:a9:44:e5:a6:f5:28:5d:58:bf:19:b1:89:
92:9c:d7:fa:20:ec:53:23:b1:75:3b:23:f4:5a:3a:4e:9d:5f:
39:3b:4c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:36:53 2025 by rpki-client