Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3c943d5-fc37-4c49-9dba-128c8e280c32.roa
File: c3c943d5-fc37-4c49-9dba-128c8e280c32.roa (raw, json)
Hash identifier: v23xfldxK/p2ASD6A3fhcn/qoDqHOOmzbDPk4HyBXrI=
Subject key identifier: 3D:8C:49:DC:A5:FD:BB:09:C5:7A:E2:72:28:4A:73:E9:D2:28:C2:7E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1DA3D97DD79EFE0ADFADA79C74BC7ACD2ED754DE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3c943d5-fc37-4c49-9dba-128c8e280c32.roa
Signing time: Tue 20 May 2025 19:51:07 +0000
ROA not before: Tue 20 May 2025 19:51:07 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:5040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a3:d9:7d:d7:9e:fe:0a:df:ad:a7:9c:74:bc:7a:cd:2e:d7:54:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:51:07 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=0e8c814454527a24f94add0d5f6ee6da9f2cf4d2c53abe64c605131b3e5fd7e6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:47:18:1f:39:11:93:68:b7:08:68:f0:f6:
1d:b0:8c:df:a9:49:87:ae:0a:c4:ed:10:60:4d:ae:
85:d1:5f:66:d0:de:c4:e6:96:5f:ec:94:25:f0:b4:
6a:23:59:40:10:88:d0:47:a3:1d:35:a2:84:ba:55:
12:3e:03:67:f9:00:0d:4a:1a:f2:82:0c:38:07:3a:
ae:95:66:5f:68:19:06:d3:89:aa:b4:b5:3c:11:33:
d7:4f:6b:5d:fe:74:25:fb:65:03:71:74:67:d6:d0:
e9:7c:f0:f3:62:c9:13:da:1c:ef:28:15:cd:f0:3d:
05:38:d8:6f:81:bc:e9:e9:ed:0f:47:24:40:12:7d:
71:46:f2:a4:6b:63:dc:fa:f4:d0:0d:fb:c0:0b:1c:
7e:9a:88:ec:a9:dc:ab:dd:80:a3:d8:8e:8c:12:45:
19:78:93:04:0e:a5:f6:9b:87:5f:92:cb:e8:d9:33:
73:0d:53:bd:91:d7:5d:25:c7:12:df:90:be:1c:b4:
16:08:69:12:92:2c:8f:f7:9f:93:9a:24:c2:d5:2b:
24:bd:d3:67:01:3d:32:73:24:28:d1:be:cb:6f:65:
4e:94:48:4a:d0:f3:3d:b5:7b:17:9b:07:42:36:6b:
d8:f2:32:23:ef:a3:1e:40:48:4d:1f:62:5d:d2:d7:
ec:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8C:49:DC:A5:FD:BB:09:C5:7A:E2:72:28:4A:73:E9:D2:28:C2:7E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3c943d5-fc37-4c49-9dba-128c8e280c32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:5040::/46
Signature Algorithm: sha256WithRSAEncryption
bb:da:d7:15:b1:1e:d9:28:55:b6:70:58:4d:85:21:01:31:ad:
49:13:04:2c:46:2b:2c:35:35:56:6f:19:4a:de:00:a1:19:f4:
27:e4:c3:90:8b:67:b4:6c:6a:53:cd:cf:08:fc:a3:60:33:07:
c0:81:ae:38:20:19:f2:90:63:87:33:69:95:98:47:ac:1d:84:
77:58:93:e1:b1:d5:17:62:70:b3:0d:c0:1d:e8:61:8f:14:86:
1a:72:35:db:7c:d9:38:be:c4:65:05:1f:34:63:3c:89:ed:ed:
9a:24:dd:0b:2c:b7:7d:1d:44:96:5d:e4:56:b9:d8:81:b4:f8:
3a:8e:bf:ba:49:f9:4e:ca:60:a6:c2:59:04:b6:5d:24:df:5f:
c1:84:2c:c7:c5:0a:e1:c2:6a:94:47:e4:9c:a7:3c:c7:dc:d8:
87:ab:7a:e8:68:e5:a5:74:d8:20:96:ef:9a:23:a7:1c:98:45:
96:5b:a4:90:20:26:2b:76:0d:8f:ac:07:fb:b5:e6:fc:80:ce:
9b:ba:b8:33:a0:3b:13:11:cb:21:7d:a6:14:32:e0:07:8d:b3:
21:79:15:19:c7:f9:18:29:43:2b:dd:bd:9b:9e:55:c8:97:6e:
83:18:08:d2:53:f2:f4:a0:3e:73:99:84:14:3b:96:b9:9f:4f:
07:b0:f9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:35:30 2025 by rpki-client