Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67233a4e-590e-4497-a72c-fe940d42b798.roa
File: 67233a4e-590e-4497-a72c-fe940d42b798.roa (raw, json)
Hash identifier: mU9IR1LXr4b09cKLRcsnoPwyUMqht8jsK6vzKSBjyyI=
Subject key identifier: 80:65:CD:0E:A0:BC:64:C3:7F:19:0B:E2:EC:7D:89:8E:C8:88:F9:0A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1899A7E59BECCAC6675EEAE3E722A55CC32C0E4A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67233a4e-590e-4497-a72c-fe940d42b798.roa
Signing time: Tue 20 May 2025 20:40:10 +0000
ROA not before: Tue 20 May 2025 20:40:10 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07c::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:99:a7:e5:9b:ec:ca:c6:67:5e:ea:e3:e7:22:a5:5c:c3:2c:0e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 20:40:10 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=c7ebf469df551f4c483b76a9a8c001a8ed1b044fcaad42a65076b60b99a4609a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d2:82:96:0d:d0:cb:a7:0b:a0:9c:34:15:7a:
fa:6c:db:e7:b8:50:03:81:d1:74:00:1e:96:08:41:
cf:a0:55:8d:51:a8:c9:be:b0:d3:bd:af:fd:f0:f0:
f6:ce:ff:59:a2:13:1f:bc:41:dd:37:02:75:d1:3c:
9a:b5:f7:55:28:84:e0:ca:77:76:bf:55:40:78:5e:
bd:f5:96:34:4a:cd:a5:e6:12:51:1e:3b:b2:84:bf:
d0:64:a7:5a:50:df:d8:f0:1c:4d:18:d3:00:5e:2b:
03:52:40:20:d5:e3:05:c6:5a:c6:a2:4f:05:39:a0:
d8:f0:3a:c4:ce:99:29:e6:15:41:f2:7d:49:c5:c8:
ea:63:ac:9a:5d:df:ff:d9:fb:10:9d:61:e7:04:20:
33:40:d1:08:ef:f2:d2:38:14:f1:8c:b3:a9:33:a5:
9a:4d:f2:55:4b:0a:24:e7:01:f3:67:f8:07:7b:09:
6f:e5:ac:e9:50:77:71:4d:26:6c:de:4d:3e:d2:fd:
d5:ad:a8:4e:6f:e3:13:de:10:2d:ad:bc:36:3c:b6:
0c:f0:b2:95:42:40:b2:fb:5c:6c:a7:3c:b7:1b:6d:
08:4d:b7:0d:e5:70:15:25:4a:e8:c7:74:59:a1:b7:
8e:65:11:a7:18:c6:d7:35:0d:17:ca:87:f9:8c:05:
1c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:65:CD:0E:A0:BC:64:C3:7F:19:0B:E2:EC:7D:89:8E:C8:88:F9:0A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67233a4e-590e-4497-a72c-fe940d42b798.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07c::/32
Signature Algorithm: sha256WithRSAEncryption
bd:33:f6:70:b2:7e:a9:82:44:92:60:ff:59:48:ac:ba:31:0b:
36:6a:ae:df:fd:9f:af:8f:2e:77:fb:6c:9a:c7:65:03:c7:43:
b1:c7:fc:f7:0e:ed:ff:67:c4:c4:b3:f1:17:d9:0e:cb:2d:51:
03:84:0e:1b:45:8c:1b:92:f2:b0:c8:0f:f0:71:e7:f3:57:95:
d2:ca:2d:ca:06:75:64:91:df:bd:84:34:78:c1:43:f2:f7:92:
a5:df:c7:9f:e6:c7:6f:45:62:8d:42:bb:e2:5a:61:17:6d:82:
c8:12:ca:26:e2:b5:13:2f:37:56:3f:0e:03:0f:34:d7:d6:1d:
9f:5a:43:1d:76:ea:e2:95:02:49:26:41:ce:9e:8e:1b:8d:4f:
60:95:63:d0:05:19:04:38:4d:5c:c9:6e:5c:80:5e:81:17:e0:
47:d6:df:d4:06:1e:ae:2c:05:d6:55:94:6e:af:6d:8a:19:4f:
38:9d:2f:58:07:5f:19:de:b4:91:0f:c4:82:95:9e:54:d8:c8:
c0:e8:d6:9b:3e:0f:3e:ea:56:e7:de:33:1e:af:df:00:23:9d:
8d:af:a3:34:7e:39:5b:d9:d3:8f:42:25:d0:fd:07:af:c1:ea:
9f:8a:ed:69:78:25:83:18:1d:2b:0d:75:96:07:38:c7:06:b9:
88:c0:97:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:42:25 2025 by rpki-client