Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92652652-28d6-49c1-8ea6-f5079f374345.roa
File: 92652652-28d6-49c1-8ea6-f5079f374345.roa (raw, json)
Hash identifier: AbFhVGCaJh8OMwpSxufqkc7r+Gh7PneXPSBIKPRLw10=
Subject key identifier: B7:2E:16:37:CD:50:64:90:C7:9C:67:36:42:3D:5F:9F:FB:2F:61:BE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7F5C31AA7B32BACDB5C06695C462E006BE02B8B9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92652652-28d6-49c1-8ea6-f5079f374345.roa
Signing time: Tue 20 May 2025 19:01:23 +0000
ROA not before: Tue 20 May 2025 19:01:23 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:4060::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:5c:31:aa:7b:32:ba:cd:b5:c0:66:95:c4:62:e0:06:be:02:b8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:01:23 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=9654954efa03d8bd90b54c238031daecfced844167bff23ac7edeec7f67ae311, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:f4:87:73:06:27:58:3d:ff:af:ff:22:0c:
e0:d4:1c:c7:d6:5c:24:e4:fc:da:11:76:6a:32:5a:
12:ed:ea:55:a3:40:4f:3e:cd:68:cd:20:b5:8f:07:
8b:be:09:dd:7d:e5:78:15:99:5c:ae:59:0a:d3:e4:
86:59:ed:d9:2f:d9:58:86:db:94:fd:70:7b:fd:89:
90:27:43:76:5c:21:49:e3:7c:11:a9:3a:b9:3b:1a:
69:50:58:01:9d:40:88:69:91:89:04:2a:62:34:24:
84:53:5a:ef:ad:14:76:d8:aa:e2:61:0c:99:43:0c:
6d:52:c2:1c:f2:c8:15:6e:b2:ff:92:02:74:47:ad:
cc:45:af:50:a3:64:ea:71:68:2b:31:7e:66:3a:6a:
d0:42:e9:6c:32:1c:22:d9:32:25:01:fe:c8:5d:eb:
06:6f:f1:b4:84:d0:96:09:a3:26:61:5a:6d:2f:13:
47:44:1f:c9:b3:fd:77:a7:04:c8:89:01:cc:42:00:
11:ca:98:74:91:dd:57:20:f6:72:6b:b8:41:24:f3:
7a:c1:bb:15:02:81:f4:3d:b4:a4:3c:75:49:1f:dc:
c6:d3:b6:ca:bf:01:7c:b0:39:45:88:ff:47:e7:52:
07:98:ca:c5:07:6c:65:60:00:8e:09:77:11:8a:fe:
6f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2E:16:37:CD:50:64:90:C7:9C:67:36:42:3D:5F:9F:FB:2F:61:BE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92652652-28d6-49c1-8ea6-f5079f374345.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:4060::/48
Signature Algorithm: sha256WithRSAEncryption
01:d2:8a:6b:c9:49:69:29:07:02:91:15:ce:fb:80:0a:99:4c:
7b:09:55:c2:da:ac:35:70:d0:41:f1:56:86:b1:22:f1:77:56:
ba:8b:cb:66:49:22:74:a1:fa:b8:d0:25:50:e5:56:76:06:f7:
62:ac:25:50:ae:4a:a7:72:67:8e:bb:34:48:7e:ad:5f:90:b0:
29:b8:ff:9f:d6:2c:bd:6d:c7:11:84:c5:63:7b:24:5b:c9:61:
6b:86:59:49:e3:4f:39:44:50:cc:95:cf:8c:a3:09:1b:8d:f6:
85:7e:6f:06:96:54:5b:b0:e7:f0:1d:7f:4a:dd:60:06:90:17:
56:1b:26:a4:88:5d:47:aa:c8:cf:4d:49:25:30:64:75:e1:40:
b5:50:6d:f9:96:2f:fb:c9:b7:3d:4d:d6:2c:eb:81:1a:13:d0:
aa:76:3d:87:13:21:26:01:9b:05:cd:3a:1a:a3:76:29:d7:f5:
de:f7:67:ea:a7:81:dd:b8:08:ff:ec:d2:80:70:fd:61:40:d3:
69:fb:c9:42:af:59:04:a6:73:97:1c:0a:28:8d:aa:6d:5f:46:
0a:a0:16:46:14:8f:57:cf:dd:e9:a6:7b:f7:11:55:7b:93:28:
7e:76:13:d5:9b:b1:8e:3b:16:cb:fd:79:11:fe:84:4b:19:72:
35:c7:8f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:47:34 2025 by rpki-client