Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/995d4f8d-0bcd-4b30-9dbe-42bcdbeb0464.roa
File: 995d4f8d-0bcd-4b30-9dbe-42bcdbeb0464.roa (raw, json)
Hash identifier: fezH7xRnGdAzX4cgFmEHswLaGicUWUJn+xdNfKYq8Vs=
Subject key identifier: DB:D5:4C:0F:B8:C3:22:F1:58:F1:FA:F2:6B:7D:88:94:58:76:4A:4F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 57151F77B4DAB5EFE456813911E0ED0FCAAF8F3A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/995d4f8d-0bcd-4b30-9dbe-42bcdbeb0464.roa
Signing time: Fri 06 Jun 2025 15:00:15 +0000
ROA not before: Fri 06 Jun 2025 15:00:15 +0000
ROA not after: Fri 11 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:15:1f:77:b4:da:b5:ef:e4:56:81:39:11:e0:ed:0f:ca:af:8f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 6 15:00:15 2025 GMT
Not After : Jul 11 23:59:59 2025 GMT
Subject: serialNumber=556400036e442ee12329a7a64c32479cdb6ff082c3779848871e1877148c2a39, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:11:ea:c9:e5:cf:f2:da:6b:8d:97:3b:7f:
e6:fb:ba:a8:cc:8a:42:c1:c3:f0:81:09:6a:7d:44:
7d:74:9b:a1:cf:f4:f9:3d:fe:d5:95:97:b8:81:9f:
c7:3c:dd:9d:72:8d:7a:9a:f3:0e:a2:87:88:97:bc:
8b:99:b7:62:5b:c2:6c:82:2a:1e:60:79:fa:8d:51:
8e:6a:44:bb:77:52:f4:60:5c:f7:fe:4d:e0:71:a0:
e1:28:77:61:dd:21:59:4c:a0:1e:41:7d:1b:10:91:
4f:ac:2b:f2:81:fb:b3:6c:66:2b:67:e1:da:06:d0:
db:42:77:0a:dd:81:78:04:7b:5a:e1:7b:3a:2d:81:
60:5f:6d:59:58:8b:14:cb:91:da:25:2b:7f:9c:9b:
52:9d:83:b7:18:3a:e7:16:38:70:f7:5d:77:cd:6f:
ee:2a:ee:f0:d0:69:fe:84:9a:67:02:d4:d1:18:78:
a9:57:03:7f:17:a4:5f:14:ac:c3:c9:c9:90:2c:69:
c0:27:b8:bf:89:ba:57:4b:ba:52:0e:2a:fd:5e:92:
d1:c2:70:14:d2:c4:00:a2:cb:51:bb:45:e5:d4:f9:
d1:11:28:2c:97:8e:7a:33:09:d6:bf:35:5d:c8:85:
92:78:1b:4c:27:51:d8:96:84:1c:3e:ac:6c:33:d3:
12:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D5:4C:0F:B8:C3:22:F1:58:F1:FA:F2:6B:7D:88:94:58:76:4A:4F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/995d4f8d-0bcd-4b30-9dbe-42bcdbeb0464.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.16.0/22
Signature Algorithm: sha256WithRSAEncryption
04:c0:7d:f0:d6:25:f6:df:5a:25:b6:6a:a9:3c:b8:4a:d8:53:
dd:c5:5b:22:e6:0d:52:77:3d:c3:15:2c:8b:79:b1:fb:97:f1:
f3:09:5f:cf:d7:7a:ca:ee:bd:95:8d:56:89:ba:a2:2d:f8:2b:
80:1b:02:cd:bf:3d:e2:a5:55:ed:83:20:36:53:7c:1b:b6:8f:
e4:23:10:9d:53:7a:40:2e:0c:83:f6:d5:9a:26:2d:a4:db:c1:
bd:c8:56:9e:f7:78:d9:40:44:4b:23:9f:da:62:6e:4a:ae:50:
83:46:00:81:14:c3:7b:d2:67:f6:c8:a8:09:fc:24:45:76:d7:
bc:c5:3b:52:8f:b4:04:88:f9:95:be:23:45:90:92:70:a5:8e:
98:92:27:a0:04:13:cf:63:55:f2:e4:90:3f:ea:36:4b:f8:47:
33:f7:e7:fa:53:8c:47:3e:86:01:32:ed:43:9b:a4:70:57:9f:
b8:b0:d3:e1:28:60:05:8f:95:0d:5d:47:1d:6e:25:e6:67:92:
bb:8b:6b:0b:c3:a6:b0:5a:cd:1e:f0:1d:fd:0b:60:92:a1:b3:
d8:6d:76:bc:83:10:54:d6:6f:d4:78:74:8a:f4:96:be:08:81:
49:86:c0:d6:81:61:33:10:d7:a5:fe:d8:ad:b4:02:26:41:83:
0b:34:39:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:37:49 2025 by rpki-client