Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e3dd00a-f49d-46a6-b97d-d14ff1197f6d.roa
File: 6e3dd00a-f49d-46a6-b97d-d14ff1197f6d.roa (raw, json)
Hash identifier: XzLCBdQZf+zKf9tU+V9dUfGfT6WTFs8i68X7cp+00is=
Subject key identifier: 7C:7A:FF:64:CD:06:89:9B:ED:6F:B7:59:84:F9:B6:DB:25:AD:82:F6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 37BB1BF7EF5EEF572E835450326683C65E4925FF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e3dd00a-f49d-46a6-b97d-d14ff1197f6d.roa
Signing time: Fri 25 Apr 2025 19:21:29 +0000
ROA not before: Fri 25 Apr 2025 19:21:29 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:bb:1b:f7:ef:5e:ef:57:2e:83:54:50:32:66:83:c6:5e:49:25:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:21:29 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=3dec550b7dd39807fd0d706374f9c0caeb82e8b3d6e65d51ef8f30a63a019255, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:92:de:b1:f4:dc:a8:f5:34:be:ef:8a:98:
20:4f:2f:23:fb:7b:06:ee:92:1a:ff:98:fa:b6:46:
74:6f:b6:28:b3:0e:a6:67:7b:60:16:d2:2d:01:be:
0c:98:ca:7e:c5:2e:0f:ab:b8:6d:26:32:50:59:d3:
ab:86:fc:4e:fc:d6:7b:60:0b:ec:68:e6:bb:e5:4b:
b1:7a:24:17:90:ee:f2:64:c9:64:a7:d1:88:a7:ad:
ec:64:e3:35:02:f6:24:95:64:e4:40:29:f5:34:3a:
26:5f:0d:fd:b7:26:77:6d:20:f9:30:0b:aa:a0:91:
65:e5:79:2f:27:45:10:b8:d0:4d:1b:8b:bd:bd:f3:
bd:22:b5:40:b4:a3:ea:25:77:a0:e9:9a:db:71:21:
ac:00:cd:4c:dd:35:1f:6d:16:6d:4c:fa:54:a0:bd:
03:8e:21:c0:80:83:a7:c8:44:92:cb:c5:e2:72:99:
ca:04:98:1b:c4:7d:fa:72:80:96:17:0c:25:c0:82:
8c:f3:92:1a:c0:6e:6d:d7:91:1a:a3:4c:30:3b:bc:
1c:43:96:93:e5:3d:5b:ac:1e:ee:e1:07:61:91:6f:
0e:d4:93:58:c0:24:48:73:a7:11:6d:2b:6c:2a:5c:
22:83:a8:fb:06:37:b0:99:d5:81:a1:25:bd:10:d8:
33:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7A:FF:64:CD:06:89:9B:ED:6F:B7:59:84:F9:B6:DB:25:AD:82:F6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e3dd00a-f49d-46a6-b97d-d14ff1197f6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:e000::/40
Signature Algorithm: sha256WithRSAEncryption
65:ee:84:e5:c4:85:71:da:d1:cb:fc:17:7e:94:d0:e8:28:9e:
00:e1:0a:5e:1a:34:55:cc:ec:39:ef:99:d6:52:4a:c6:1a:12:
f0:6a:c1:77:53:57:96:b8:09:b9:b4:cb:cd:0c:5c:40:d0:8c:
da:64:d5:03:dc:ca:bf:62:56:cc:fc:16:c7:36:c0:b3:ad:e9:
c2:05:65:7e:a2:96:48:00:eb:63:30:06:0e:25:9c:0e:38:cd:
6c:2b:a5:94:6d:16:48:a5:3d:23:65:95:c9:8d:4d:c8:cb:5b:
26:41:4a:a7:b3:3d:fe:36:b8:81:0d:85:62:e5:02:cf:be:de:
01:b3:21:b7:db:e7:c1:49:d2:6a:60:7a:d1:5c:b0:6b:d1:56:
55:76:8e:f9:08:a1:32:66:4f:48:9e:7b:f7:e3:da:0f:7a:12:
fd:b5:2f:0e:46:e7:3e:6a:1b:2c:80:b6:66:5c:fd:c3:37:15:
a8:1b:c3:9f:bd:e9:58:f9:dd:47:e5:df:9b:d6:11:29:e0:8e:
91:40:21:2b:9f:43:7d:44:0e:25:a9:54:a9:0a:ed:4a:c1:00:
e4:f4:f5:ff:c4:9c:b9:40:5c:49:13:e0:e3:c3:d9:ac:8e:47:
e4:91:c9:2a:d1:0f:16:50:96:24:f0:6a:cb:55:4d:d8:d5:cc:
9f:35:2e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:49 2025 by rpki-client