Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf8326d0-ecc0-4939-9939-2ed70f6ea536.roa
File: cf8326d0-ecc0-4939-9939-2ed70f6ea536.roa (raw, json)
Hash identifier: y18OG7bfxjxT2sbXS7K+/gsAHyts+vHPea5vvaTRmRI=
Subject key identifier: 72:16:6E:C8:C9:5E:76:74:3A:56:C1:08:0C:84:D1:38:3D:D9:F6:5B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6F177B50527C06D249F200CB630435D0084F3A23
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf8326d0-ecc0-4939-9939-2ed70f6ea536.roa
Signing time: Tue 20 May 2025 19:10:19 +0000
ROA not before: Tue 20 May 2025 19:10:19 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:1040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:17:7b:50:52:7c:06:d2:49:f2:00:cb:63:04:35:d0:08:4f:3a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:10:19 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=e7d56b1047f4772e5bbefb624e6d9671b1b14791633fa6e4ccf6de7ebaa2271f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:90:be:8d:f5:e0:f6:fe:fc:55:55:53:ce:b3:
81:cd:34:e3:3e:8c:05:13:c3:3f:8a:53:0a:33:13:
9f:5a:34:fc:7f:24:24:60:92:47:49:3f:55:e2:b6:
41:0f:99:e2:34:b1:5c:72:75:47:a6:68:aa:3e:e6:
d4:bd:84:a2:66:e8:3e:9a:cc:de:d3:3d:75:2e:ad:
df:ed:ff:0d:34:8b:49:63:4f:e6:2b:13:db:e6:67:
7b:03:4f:da:e9:88:10:14:f3:fa:21:28:9c:47:de:
d4:74:e6:dd:80:fc:e7:bb:da:73:bc:78:e4:df:c9:
51:fb:2d:19:f7:9b:f7:e4:0b:65:3f:6b:05:7c:90:
bf:bf:75:f6:a0:ff:37:40:b5:27:01:9a:d7:ed:c2:
87:d1:58:59:09:06:41:b1:31:a2:dd:92:5f:54:e6:
31:f0:e0:5c:07:8b:3f:b0:c1:47:aa:a9:98:12:1c:
e6:a6:49:22:bc:3a:fd:7a:5d:1e:73:bd:20:4d:3c:
eb:25:8c:fa:62:09:3f:58:e2:98:ea:a8:72:36:ad:
97:a6:15:d5:9c:b0:7e:bf:6b:af:99:30:a4:21:a1:
0e:94:f3:c1:a2:f5:72:7e:e3:b8:85:b2:5c:6b:a6:
bf:96:64:91:e9:a6:ee:18:4b:99:10:bf:a0:67:35:
59:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:16:6E:C8:C9:5E:76:74:3A:56:C1:08:0C:84:D1:38:3D:D9:F6:5B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf8326d0-ecc0-4939-9939-2ed70f6ea536.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:1040::/48
Signature Algorithm: sha256WithRSAEncryption
89:ea:e4:90:57:9d:3e:19:4d:41:9f:03:4d:dc:a7:df:96:35:
dd:bb:ed:89:44:8d:95:d3:8a:2a:9a:6f:5c:b0:ba:ff:d0:52:
3a:1b:45:3a:12:31:c5:6a:b7:d9:54:b3:2d:5a:ad:1c:6d:c6:
53:f2:db:30:99:07:91:95:f3:ff:3d:9d:b4:61:84:71:1f:99:
35:09:80:d2:62:48:70:ad:28:b2:fc:e5:7c:9f:d0:ce:6b:8f:
09:ef:c7:0b:d7:fd:aa:f6:09:d3:c9:55:46:78:5d:15:5e:99:
7c:45:48:de:6a:16:b7:27:85:bd:c3:00:5f:e8:6b:76:e8:af:
b2:1c:69:71:6f:c0:99:04:ff:0a:e6:44:a4:a2:25:a3:e8:38:
0d:70:4d:c2:06:8a:2b:24:9e:53:a9:27:cf:6e:c6:a7:c8:59:
09:70:c9:f5:57:10:fc:52:11:fb:3c:c8:75:be:0b:5b:c7:c5:
83:49:56:69:f7:75:f3:a5:77:db:8e:0d:5c:23:c6:a5:1d:37:
5e:89:cf:3e:79:eb:fb:9c:bb:8b:b4:9c:ee:14:d5:26:86:a8:
1b:60:bd:41:ea:32:b4:f6:47:94:82:8b:f8:a0:54:e3:55:ec:
bf:d2:3c:64:44:ad:82:43:66:1b:f0:55:b7:9f:14:e5:ab:b2:
b8:45:cc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:41:15 2025 by rpki-client