Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b89b3c5d-e121-4769-9f3e-0d4c4f0780db.roa
File: b89b3c5d-e121-4769-9f3e-0d4c4f0780db.roa (raw, json)
Hash identifier: GLNup2+pMeFUdr9oGX64SgFkITbvzsWwNFTMcoxEVUI=
Subject key identifier: 82:A0:9E:98:D3:B4:EF:6F:3D:4E:B6:3B:8F:11:30:8C:14:B7:74:F2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 42C79F84C7DB1E5733F23742A43D4E4835FC0E2C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b89b3c5d-e121-4769-9f3e-0d4c4f0780db.roa
Signing time: Tue 03 Jun 2025 20:53:38 +0000
ROA not before: Tue 03 Jun 2025 20:53:38 +0000
ROA not after: Tue 08 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:c7:9f:84:c7:db:1e:57:33:f2:37:42:a4:3d:4e:48:35:fc:0e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 3 20:53:38 2025 GMT
Not After : Jul 8 23:59:59 2025 GMT
Subject: serialNumber=ad706fabf05984a5ae3591d21c8df9e2b92e5886508d5a2b93781c3a52dfe54d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:5f:7c:71:45:77:e0:6a:05:d5:76:46:56:
bf:04:fa:1e:42:f0:6c:7d:af:43:9f:a9:58:b6:d0:
ad:d0:92:54:4b:fc:0f:f6:d1:e3:43:b0:85:1b:83:
34:31:bf:40:b2:bc:5d:4f:b5:9d:02:af:f2:d4:81:
ed:aa:6b:46:e8:8d:ae:27:1e:7d:66:78:e4:64:19:
0d:f6:5e:51:f4:11:ee:a2:a6:89:22:bb:c4:c6:7c:
4b:9a:30:f9:87:1c:fa:84:1d:cc:5a:9f:3e:c5:e3:
d7:0d:e6:7a:ee:e7:53:da:14:19:0e:ba:2b:55:43:
7d:d4:03:00:bc:81:8c:c5:3b:b4:36:f0:87:01:7e:
5b:32:ea:f9:ae:7b:12:d1:4b:51:42:c7:05:08:d4:
74:a2:cd:2c:6d:fb:32:11:d9:70:da:1a:94:28:03:
67:0b:c8:ad:1f:ec:fd:f8:77:42:84:01:ec:5a:67:
96:4f:98:b7:45:4f:14:9e:f4:51:5a:13:df:8b:e9:
85:e6:09:49:f9:b1:3e:56:c4:3d:75:78:37:fc:d6:
c0:fb:00:39:b2:05:a7:4b:8c:43:f2:b7:4d:55:6c:
76:3a:0b:aa:d4:23:c0:4a:f4:cd:f1:78:87:f0:c1:
e5:ef:dd:4e:70:eb:0a:95:11:e2:d8:32:f0:1c:17:
3f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A0:9E:98:D3:B4:EF:6F:3D:4E:B6:3B:8F:11:30:8C:14:B7:74:F2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b89b3c5d-e121-4769-9f3e-0d4c4f0780db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:6000::/40
Signature Algorithm: sha256WithRSAEncryption
71:8d:24:21:30:ef:88:7e:80:0e:2b:b5:74:73:92:99:6e:8a:
0e:2c:7f:1b:25:22:92:49:5f:c1:fb:3f:26:1e:04:73:df:b0:
2b:a8:e4:e1:a3:b0:97:45:59:42:60:26:ae:33:ca:26:ab:0b:
1d:ec:38:57:32:07:2f:3d:d3:83:d9:8d:46:eb:78:93:9f:17:
18:60:66:b0:20:fb:bb:a5:e1:91:1c:69:80:a4:ef:2c:86:75:
02:2d:bf:5f:c1:b2:4e:f2:5e:c1:99:8f:70:12:84:91:6a:0e:
b8:e5:d6:c1:19:87:aa:72:da:d6:e7:5b:bd:ba:e7:1f:4c:ad:
d8:42:c5:15:e7:18:25:d2:f6:e7:cb:bb:f7:7f:13:e2:fc:e8:
a9:85:b2:e3:c0:c3:79:28:05:c8:49:dd:2d:cf:7a:13:2e:3a:
e5:57:4e:e7:ea:18:57:f7:d5:c0:5e:7a:0f:be:6f:27:ea:55:
20:5c:46:94:df:49:ef:41:ce:44:eb:14:32:ea:83:a3:de:3c:
d1:4b:8a:9d:6e:46:d6:40:99:ef:2f:a0:da:7f:5e:b3:30:75:
71:e6:0e:6e:0b:0a:b8:a2:35:67:49:60:33:2a:94:2a:e4:4e:
7c:ae:6a:ce:23:22:b8:79:96:c9:78:98:1f:d0:06:3b:56:6d:
b6:fa:9e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:40:26 2025 by rpki-client