Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
File: bdd33562-2653-4549-84dc-25f96aa10a83.roa (raw, json)
Hash identifier: C4smpvrR1NgxHdJt4sVKj46OM/y6gnb+Ba7+sVh2W7o=
Subject key identifier: C4:E3:30:96:10:B0:8D:3A:37:3B:46:32:2A:02:60:B0:23:BC:EA:17
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 39D73B59399FEA4C4EA4B805A7442421BF6BA9F6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
Signing time: Tue 20 May 2025 20:30:24 +0000
ROA not before: Tue 20 May 2025 20:30:24 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d021::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:d7:3b:59:39:9f:ea:4c:4e:a4:b8:05:a7:44:24:21:bf:6b:a9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 20:30:24 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=d551ca11b8b727a5ed26a76d09a90162c6a57d64a9a2fe4ab3e19a249c2826f3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:cd:72:83:eb:6e:dc:20:bf:95:36:26:f7:
df:8a:a4:a6:98:67:ca:a0:31:b2:34:27:0b:6c:16:
76:10:49:67:3f:86:a0:89:f1:0f:51:93:00:65:cc:
de:a1:1f:63:87:13:dd:2c:e6:5a:63:0b:47:9b:1c:
62:17:dc:6a:a1:ef:c7:fb:90:8f:f3:03:8c:08:92:
1f:36:2e:bc:da:7c:a3:b8:90:1b:0c:92:1c:a8:ab:
76:de:d6:e4:58:6b:a2:1f:4d:7e:81:42:74:4d:f1:
76:1b:78:39:b5:bc:75:e8:16:5c:6c:af:e4:87:2a:
aa:06:e7:bc:aa:77:3a:f5:a9:17:2c:d6:5d:1a:65:
12:4b:62:12:73:af:04:23:b2:b0:76:f8:57:52:90:
85:ad:f3:7e:5b:f0:75:5e:9c:ed:f6:2c:d1:83:91:
b3:07:54:a2:d6:c5:55:19:3e:67:bf:cb:71:0b:97:
d8:71:d2:35:1d:dd:8c:a7:1c:5a:b6:97:21:c1:36:
42:58:44:3d:c3:97:b8:9d:19:8a:25:60:b6:5f:0d:
04:e9:11:9b:60:17:76:5c:1d:fd:c6:02:73:ac:68:
f4:df:0c:d2:cf:b2:61:3f:fc:59:8b:0d:22:5b:8e:
10:f8:10:28:2a:bd:74:81:9a:33:d6:03:80:7b:68:
37:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E3:30:96:10:B0:8D:3A:37:3B:46:32:2A:02:60:B0:23:BC:EA:17
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d021::/36
Signature Algorithm: sha256WithRSAEncryption
5d:bc:e0:ad:5d:10:41:e6:05:b6:6c:60:52:bb:0d:cd:6a:8a:
e7:1b:7b:1c:54:84:5a:0d:51:63:1c:33:d0:3a:ff:05:ee:26:
c1:7f:0a:39:53:73:cf:e3:6b:b2:ea:78:ac:e7:b5:0e:94:c2:
22:63:3e:57:a4:ca:b7:f6:e6:67:73:54:92:0b:b1:d1:d1:d9:
e8:2b:7f:17:bb:60:16:f3:f2:89:03:9e:a1:d7:f3:1a:21:79:
5b:9d:f7:05:63:c0:df:4e:5a:06:4a:73:79:59:96:a9:30:42:
f4:65:3f:3c:fd:7f:19:5b:3f:a2:6d:3f:81:7e:cc:08:a5:6b:
7d:a8:5a:b6:a5:59:4e:06:57:c0:11:63:c5:69:83:5c:e5:40:
c5:e8:36:e6:ab:35:f3:9f:ea:02:8a:5c:a6:bc:b1:80:45:15:
63:24:fd:9e:d5:e3:d7:85:ac:99:56:01:1e:99:56:67:1f:a7:
b2:e7:fb:a4:87:9d:ed:0d:b8:8f:4e:04:16:7d:3c:fc:d7:02:
7b:c6:88:51:8e:ae:43:ec:48:e0:39:8b:bf:cc:1d:0f:95:91:
4a:b2:a3:d7:99:45:37:b9:2e:f6:06:47:6a:8e:3e:e3:48:d9:
f3:d0:e3:34:80:4d:a6:a4:fa:fb:f8:73:02:dd:78:16:99:19:
f4:eb:ee:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:48:33 2025 by rpki-client