Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b578938-3dca-4d72-8385-f8a93e508377.roa
File: 8b578938-3dca-4d72-8385-f8a93e508377.roa (raw, json)
Hash identifier: A0oYplFNJIixkuE6lksEhlAigHvEqJ0mBzDEJ8Jy+2E=
Subject key identifier: 10:39:D7:1C:95:E6:28:C5:33:3A:6D:76:61:90:9B:EB:ED:B1:01:AB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 38D64A0C8BEBA2F1D4650799224565E8F2340F20
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b578938-3dca-4d72-8385-f8a93e508377.roa
Signing time: Tue 20 May 2025 20:30:52 +0000
ROA not before: Tue 20 May 2025 20:30:52 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d019:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:d6:4a:0c:8b:eb:a2:f1:d4:65:07:99:22:45:65:e8:f2:34:0f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 20:30:52 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=3e3701803b15326bdc4a5337ecbd9740b53a601b32e4fc76cad49f6fbb555811, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a4:39:ea:d2:a2:dd:07:3f:0c:86:93:e5:f1:
60:5d:55:a6:8e:58:bc:7e:19:51:f5:02:8f:6e:f2:
89:e0:5b:b8:75:62:5d:b2:4b:9a:d2:ed:89:7e:25:
8f:69:a7:b4:06:cc:84:48:a7:4f:fe:1c:8d:be:6a:
b6:ab:ab:5f:09:eb:12:c2:22:72:e9:8c:19:88:1e:
39:5e:8b:5d:94:84:1e:70:6b:3d:a6:8a:f5:34:0a:
6e:66:b9:2d:fa:cb:e1:02:4f:02:65:ee:8c:03:26:
d2:e3:ea:4f:58:73:31:3a:21:7f:ca:13:bd:bc:5e:
55:f0:7b:d1:e3:30:a4:94:5b:78:01:71:46:11:b5:
56:6a:cc:12:c5:be:9d:30:54:9a:39:e9:cc:e2:ba:
9e:7c:19:1c:7d:d5:e7:5b:46:c0:c2:17:22:a7:37:
ea:cb:88:bb:25:ab:61:f8:e3:74:81:cf:a0:a4:81:
e0:47:45:91:08:ad:d9:1e:d3:13:3f:3a:0d:40:45:
75:b7:15:ca:eb:0d:09:ae:b0:3e:2f:34:31:60:0c:
e6:97:28:52:1e:7f:2b:1f:51:3e:6a:df:fa:02:6f:
e0:1f:74:51:bf:20:5a:7b:5b:ec:15:48:8d:17:78:
2c:51:9c:73:80:16:65:2b:e8:21:78:21:ce:a0:17:
2d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:39:D7:1C:95:E6:28:C5:33:3A:6D:76:61:90:9B:EB:ED:B1:01:AB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b578938-3dca-4d72-8385-f8a93e508377.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d019:400::/38
Signature Algorithm: sha256WithRSAEncryption
b3:81:56:9b:93:11:ae:3a:62:99:6e:95:ab:70:39:58:4a:13:
2e:12:ff:fe:ee:09:52:d5:1a:0f:32:eb:8b:e4:0c:a9:23:09:
98:c0:85:b3:64:95:12:3f:7b:21:85:99:d3:99:23:7c:97:06:
2d:98:d6:47:1c:95:1b:91:f1:38:23:73:f4:4a:66:e4:17:2c:
a6:4a:2e:03:d2:51:9b:76:74:9c:d0:b5:2f:7c:8e:8d:69:94:
93:78:95:c6:7d:9c:8f:84:c7:65:b6:48:fb:9f:70:cd:59:51:
a7:28:d8:ac:d0:b7:8b:8d:0e:be:b7:78:99:93:c6:26:9c:67:
53:f4:42:e2:5c:e9:06:b5:60:6d:a7:54:03:50:ee:86:80:2c:
1e:20:bc:dc:08:d2:19:bf:ca:5f:45:c5:c0:5b:0f:a1:b1:5c:
08:90:1a:87:ce:69:71:19:fb:a8:bc:5f:8c:7b:d3:04:39:ed:
6c:50:b2:42:26:d9:2b:1b:8b:63:66:e3:c5:c3:a0:fa:7a:08:
a1:b3:1e:9e:5c:d2:1c:eb:c1:4e:7e:57:9e:f0:d8:cd:18:aa:
36:60:dc:c2:5a:f9:27:26:42:92:df:b3:47:49:2f:44:62:16:
48:23:96:07:09:57:fd:02:a9:8f:ec:3a:bc:94:b8:f2:4a:f7:
8c:df:36:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:49:33 2025 by rpki-client