Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b176a187-5863-4413-a001-74ccc0321be5.roa
File: b176a187-5863-4413-a001-74ccc0321be5.roa (raw, json)
Hash identifier: m9F30OyekMRPPsbLD67+oYF5AJ17D5ZNBstZEuo4RQE=
Subject key identifier: 5A:99:17:AC:FE:9B:65:7A:D1:2F:29:C8:04:C6:42:1C:95:C8:C8:43
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1860833B3F128C18F125841D0A5260E92C27374F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b176a187-5863-4413-a001-74ccc0321be5.roa
Signing time: Tue 20 May 2025 20:30:19 +0000
ROA not before: Tue 20 May 2025 20:30:19 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02c::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:60:83:3b:3f:12:8c:18:f1:25:84:1d:0a:52:60:e9:2c:27:37:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 20:30:19 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=27816a213aebdb2696236c6a9160f70f1d1788f3256e78ab8b82b4b6ad7d63bf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:33:c2:65:14:09:1c:e2:f7:b3:46:61:60:a4:
df:47:b0:78:6a:11:4a:fa:43:11:05:64:cb:83:75:
e8:c8:c9:7a:87:57:ac:f2:2c:60:2d:42:85:1f:24:
1d:1a:6a:3e:db:6a:3b:57:b2:80:c4:ac:a7:56:eb:
4e:8e:8c:74:8b:c1:6f:dc:32:7f:30:fc:f4:b3:d9:
6b:ea:52:eb:6f:a2:be:dc:bc:ac:58:8a:f3:04:78:
2b:56:40:64:6e:13:f2:4f:90:31:e3:83:3c:0e:f9:
b0:36:1d:d9:5f:78:72:05:d2:f9:69:22:28:7f:47:
69:5b:13:7c:7c:ce:48:ab:6c:dd:04:74:9f:bf:e9:
ad:f6:01:e9:59:e5:7f:22:ab:20:0e:f2:cc:78:7a:
32:98:8c:d7:3c:24:da:df:4f:92:8f:67:ae:24:21:
0b:bb:28:80:5f:ee:14:dd:10:30:62:90:f5:42:50:
bf:c7:a8:49:b0:07:f8:97:c3:3a:fa:ca:e0:5c:98:
2f:89:10:19:ad:24:a8:10:bc:9d:55:c2:df:83:c7:
e9:20:df:ce:e6:c7:30:1e:64:a3:60:8f:13:b2:3d:
1d:bc:13:6b:26:a2:6e:63:2f:fa:64:83:8c:43:90:
50:f6:c5:3b:5b:41:c1:85:39:34:3f:a8:ba:da:13:
3d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:99:17:AC:FE:9B:65:7A:D1:2F:29:C8:04:C6:42:1C:95:C8:C8:43
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b176a187-5863-4413-a001-74ccc0321be5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02c::/36
Signature Algorithm: sha256WithRSAEncryption
13:0b:48:01:f2:70:cd:f8:15:cf:45:2f:4d:ec:48:30:61:4f:
81:2c:35:51:c5:fd:df:7b:de:f3:5b:a2:a2:fd:18:0c:25:c8:
f2:ef:12:9e:12:5e:b0:e9:c1:b6:83:46:7e:0c:14:05:76:5f:
f2:d0:93:e6:c4:fe:8f:7b:4c:17:e7:1c:64:84:2c:f8:7b:03:
a8:05:46:d2:4e:a7:88:bf:5e:e7:61:36:49:82:10:bf:cd:b8:
ba:17:46:6f:67:dd:c4:fc:68:64:fb:b3:be:19:7f:0e:c0:f8:
2f:4e:77:bc:15:88:34:c1:0a:4f:93:d7:88:dc:15:c5:08:31:
9d:53:9d:6a:f7:67:fc:18:dd:06:0c:7c:54:04:73:e3:75:08:
43:97:85:e8:32:ae:33:f2:92:1f:b3:7c:4e:74:fb:e7:36:9c:
6f:32:8c:b4:97:c6:ee:d6:42:23:65:e7:f1:44:e7:c5:c5:0d:
42:17:67:94:b9:d7:f5:5d:f5:6c:08:a3:f8:83:fc:70:4b:ed:
b8:76:fc:9b:ce:99:3a:ba:8a:84:50:fc:06:a6:c4:3f:2b:9b:
62:2b:70:d3:17:ed:06:70:16:af:d5:e1:38:f4:c6:f2:c0:17:
5a:e7:d9:42:fd:4a:c3:6f:85:88:ef:41:3b:a6:29:d4:6f:5e:
01:4c:f3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:48:28 2025 by rpki-client