Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7eb04123-5564-4d2f-bd3c-2a08a42d7579.roa
File: 7eb04123-5564-4d2f-bd3c-2a08a42d7579.roa (raw, json)
Hash identifier: tvBUhgkjrrLW+Q3SEzz563kwVU9Xmnahbjq5bIxAE2M=
Subject key identifier: 15:BD:A3:F5:38:3F:0A:DA:6E:B1:A5:47:15:ED:A8:E8:6D:0C:91:C0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 022406CC138E665B8400B909C15E7205406D448B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7eb04123-5564-4d2f-bd3c-2a08a42d7579.roa
Signing time: Tue 20 May 2025 19:51:06 +0000
ROA not before: Tue 20 May 2025 19:51:06 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:24:06:cc:13:8e:66:5b:84:00:b9:09:c1:5e:72:05:40:6d:44:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:51:06 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=a286602724376a51bbdc425d99bb087be2913a10dbde6b2d1947e340bb14bb62, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:92:b6:7f:e0:5b:3e:69:a7:49:44:dc:c8:85:
e0:d3:86:c9:49:94:45:82:b9:26:2c:c0:74:4c:bf:
0f:d2:f7:e7:fc:b7:c7:32:4e:41:c2:11:ee:48:41:
ba:61:ad:9e:f8:4f:38:a9:79:21:ff:e8:a0:49:70:
91:9a:99:59:d6:cc:37:73:2e:0e:5b:be:c1:5a:c4:
4b:a3:45:e6:e9:dd:18:59:75:ac:d8:d9:9e:f5:82:
81:d0:db:b6:fd:ed:ed:be:8c:6a:7b:0a:2c:49:0f:
a4:d5:03:6d:6f:d0:54:16:3b:25:0d:db:3f:45:40:
1c:bd:94:64:e0:56:96:b6:9d:7d:a4:4c:8b:ed:a1:
7a:d8:6d:19:b9:0f:85:93:13:12:a0:44:09:66:d0:
76:87:bd:34:b3:d8:7e:f2:f8:db:f0:fe:56:13:de:
ec:5e:75:b2:5d:d3:e3:9a:ef:47:c6:bd:48:cc:d1:
69:12:ce:c8:8d:cf:b3:c3:13:52:0d:cb:8f:8c:65:
69:42:7f:7f:59:3d:0a:80:14:12:18:f3:4e:c0:5a:
df:16:32:0d:e5:bb:0e:02:7f:2b:45:dc:b4:ac:44:
ce:04:54:c7:77:d1:66:eb:ae:9a:bb:c0:a5:3f:c1:
62:7f:63:35:6f:37:b9:72:56:7e:06:42:b4:08:70:
21:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BD:A3:F5:38:3F:0A:DA:6E:B1:A5:47:15:ED:A8:E8:6D:0C:91:C0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7eb04123-5564-4d2f-bd3c-2a08a42d7579.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:8000::/40
Signature Algorithm: sha256WithRSAEncryption
90:15:5c:b5:1c:19:be:f6:00:1c:8b:d8:b3:d3:c3:35:98:e8:
f1:57:2b:1c:42:88:a2:5b:33:12:85:49:7c:43:6c:d3:eb:c2:
fb:b1:63:a7:59:b8:fb:0d:26:5d:32:ba:69:0a:c9:d4:4e:77:
f0:89:74:02:62:30:c0:77:2f:90:d9:cd:5d:50:30:c9:e8:8c:
18:91:13:6f:bc:9f:41:cd:35:90:8f:ce:c1:29:6a:c4:4e:c3:
92:c1:64:76:5c:c1:39:d8:09:aa:39:59:fd:1d:22:6b:c9:d6:
43:f1:b1:37:cc:41:3d:61:f7:76:45:93:a9:9a:b4:a7:38:65:
43:4f:dd:3e:fa:95:36:bd:e2:c1:50:6b:5f:e7:cb:f3:41:9d:
eb:1b:19:78:90:1e:e0:df:35:45:9a:9d:30:c2:51:94:46:bd:
d8:e8:69:92:3c:23:7b:0d:54:e9:14:ab:9d:b3:d9:2a:59:6d:
69:5c:fb:d6:18:73:19:de:aa:c6:2e:62:25:2f:b3:49:de:1a:
d1:e5:e0:00:41:2f:21:a6:e8:4e:48:41:75:b4:8a:bf:6e:d8:
8f:1d:d7:78:91:d6:b9:4f:c4:bb:17:ea:60:91:5a:d5:37:bd:
58:c6:a4:20:97:90:2d:a8:0f:95:01:ea:7c:fa:07:e1:32:c5:
a9:33:fc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:36:54 2025 by rpki-client