Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94b73df2-00f3-4adc-a2a1-c8b41e531cf2.roa
File: 94b73df2-00f3-4adc-a2a1-c8b41e531cf2.roa (raw, json)
Hash identifier: NosX3ehMT+kjfo7lipT9fa0/yNZ0RPSFS6VJDIL+H/Q=
Subject key identifier: 8D:0D:30:E3:71:BD:73:45:D8:50:D8:8F:BC:70:DE:2B:F2:79:06:A3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2D5EB6CB31E85E36BC0F15D6BF54118FBEFDD9E1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94b73df2-00f3-4adc-a2a1-c8b41e531cf2.roa
Signing time: Tue 20 May 2025 19:31:28 +0000
ROA not before: Tue 20 May 2025 19:31:28 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:a080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:5e:b6:cb:31:e8:5e:36:bc:0f:15:d6:bf:54:11:8f:be:fd:d9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:31:28 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=80cf43055574108e9c298c89e425dabcd3fcb1021cc794c653078996bbe21021, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:34:3f:21:06:4b:09:4c:f5:83:82:01:11:
06:53:7d:1b:31:8b:83:c6:a1:77:39:af:51:47:3b:
ea:31:3a:af:4a:17:88:6a:c6:54:9f:94:d3:10:b8:
0a:ac:d3:36:6b:7b:71:db:b7:40:28:1c:dd:43:a7:
2f:7a:fb:68:1d:e1:30:07:d6:df:d1:a7:7b:e9:e3:
f7:73:01:89:0e:d0:e5:59:d4:99:12:24:98:93:4b:
77:cf:92:ac:fa:e3:a5:8e:26:92:d2:7e:3d:7c:ec:
8c:c3:18:e1:84:24:4e:66:14:04:a5:2e:eb:bb:1c:
9a:d1:4a:50:46:87:2d:8b:2f:0e:c5:ae:ef:02:6e:
2e:7d:25:d2:0f:cd:ce:43:98:52:46:7a:78:30:c0:
cf:7b:b1:e9:fa:4e:89:29:9a:df:a1:0d:6a:33:a2:
ba:d3:39:09:6f:a6:38:91:c2:2c:ac:1c:3d:6d:1e:
93:a9:90:79:02:a8:0c:e3:37:f8:2b:d9:0b:bd:ee:
bf:c5:3f:19:d2:bc:3f:d4:22:de:72:1a:b2:b3:52:
9e:13:d6:95:fc:a1:0a:ff:aa:59:89:86:3d:f8:55:
c3:da:62:87:f0:4f:6d:c9:4d:57:26:86:d2:bf:43:
6e:1f:78:3f:73:fc:95:82:e7:54:16:0f:f1:50:12:
c7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0D:30:E3:71:BD:73:45:D8:50:D8:8F:BC:70:DE:2B:F2:79:06:A3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94b73df2-00f3-4adc-a2a1-c8b41e531cf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:a080::/46
Signature Algorithm: sha256WithRSAEncryption
17:54:9d:c5:10:95:8b:cd:bc:3a:2e:23:bd:d6:2b:a0:b9:5b:
da:f9:5b:f2:20:21:9f:05:be:c7:62:45:c4:b6:56:e0:7d:9d:
d8:ca:c9:f7:bf:c2:ec:40:dd:0a:50:fe:e4:dd:d2:b3:18:2d:
a5:12:9f:74:49:2d:e1:71:2e:70:43:7a:a8:f8:30:01:f3:51:
25:66:42:28:95:e5:ac:3d:09:e7:60:60:16:da:c6:78:c7:08:
bd:0b:e5:cc:91:4d:ec:ba:e2:8f:64:ea:ef:95:cb:ba:e1:4c:
fa:0c:00:ac:68:40:c2:18:c3:ca:5c:d3:df:11:b7:3c:e0:5d:
b1:ec:f0:72:57:39:f2:57:1a:35:28:f0:d5:8c:4a:5a:85:8c:
8c:05:97:1f:b3:1a:e9:1a:e9:fd:51:1e:10:f6:3a:7e:f2:be:
f4:03:a4:1f:0e:db:d6:22:c0:23:94:77:c9:d2:84:72:f4:5a:
7a:9c:09:fa:e4:c2:14:19:32:5c:65:a1:4e:1d:b7:34:a2:11:
8f:1d:e4:eb:c0:4c:64:90:67:c2:19:10:8c:bd:8a:08:d6:dd:
3c:a5:98:32:aa:94:08:2a:fc:a4:d7:17:a5:26:38:4a:90:f5:
1a:9e:18:da:20:ae:ab:a5:9d:b3:ad:62:94:7d:a1:bf:a5:db:
d7:b7:e8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:35:33 2025 by rpki-client