Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d1f04e42-73c1-443a-82e2-623f7a02136a.roa
File: d1f04e42-73c1-443a-82e2-623f7a02136a.roa (raw, json)
Hash identifier: IPcoDfo0LqITWAsTmoDx3xQ2WkZwCytL0xfl+5tDh14=
Subject key identifier: 7F:FE:21:3A:E8:AF:00:C0:B5:54:A7:9C:9E:B4:C2:35:A2:D4:81:77
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 25FFBC32FB3DC3C7A402DB9F9FC460C5DABC9C29
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d1f04e42-73c1-443a-82e2-623f7a02136a.roa
Signing time: Tue 10 Jun 2025 17:21:09 +0000
ROA not before: Tue 10 Jun 2025 17:21:09 +0000
ROA not after: Tue 15 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ff:bc:32:fb:3d:c3:c7:a4:02:db:9f:9f:c4:60:c5:da:bc:9c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 10 17:21:09 2025 GMT
Not After : Jul 15 23:59:59 2025 GMT
Subject: serialNumber=2624b6718bce38984d224782bf2e1c258653886290768af9ef5109670979a6e4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:20:95:2c:ea:58:24:33:9a:44:f0:6a:87:
50:52:ba:92:6c:04:7f:9e:10:3f:da:ba:81:7a:41:
a8:e6:67:46:4e:68:96:88:a2:ba:8d:76:43:d9:ba:
83:9c:af:54:da:7e:21:d8:32:7c:74:2b:c4:cc:52:
c0:6d:fe:b5:61:3c:94:4d:57:62:47:c6:69:7c:74:
d9:ea:09:ab:4d:49:ec:5e:a0:99:78:e1:f4:a7:99:
3d:47:61:38:b2:eb:1e:00:a8:3a:b8:b1:1d:6b:f5:
93:a7:ee:ec:7d:94:6c:a9:1d:b2:5c:62:44:a7:dc:
46:7c:03:07:00:9d:3d:13:40:3b:95:d7:6e:6f:76:
80:f8:8e:2e:71:4b:88:0e:9e:0b:8a:e3:5d:e2:fa:
77:37:a6:c6:0c:96:e7:d7:fa:eb:f6:5d:fc:50:43:
50:c6:12:e2:43:a2:57:db:6d:82:d2:a7:e7:e7:56:
eb:8e:49:9a:7e:20:1f:12:10:e3:2a:27:58:5d:08:
6f:a8:b1:0c:cf:7b:95:93:52:88:cf:cc:e4:e7:5a:
43:54:df:b5:78:6a:4d:c5:35:48:78:e5:b4:7c:76:
cb:17:29:5d:49:61:cc:27:d6:60:83:c2:81:68:4e:
59:fd:7b:ec:36:ab:ab:c5:a0:a6:a2:24:1a:87:20:
d9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FE:21:3A:E8:AF:00:C0:B5:54:A7:9C:9E:B4:C2:35:A2:D4:81:77
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d1f04e42-73c1-443a-82e2-623f7a02136a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:800::/40
Signature Algorithm: sha256WithRSAEncryption
0e:fa:25:f3:3f:08:5b:81:f5:95:9a:14:76:0b:04:5b:7f:10:
9c:9c:6a:b3:7d:9c:54:a2:04:9e:46:56:9d:da:67:93:19:b7:
f2:13:d1:3e:2f:44:90:33:4a:8a:e5:ac:1f:4f:1a:df:fd:9a:
af:dd:a8:43:c0:e3:80:3e:56:3e:ce:00:bf:76:bc:b4:68:da:
a9:96:5f:72:94:cb:df:ac:05:7f:8c:20:a6:9e:77:10:28:b8:
5c:d5:15:34:f8:6e:cb:46:ea:44:05:8b:cb:04:88:6e:c4:fd:
99:fb:b2:17:c9:a7:58:93:50:37:d6:07:f6:b2:d0:59:f0:f3:
46:bf:fe:71:a7:68:4a:53:e6:74:11:be:ca:83:bc:34:f8:90:
07:8f:6e:54:4e:b1:cd:13:57:40:42:0b:3f:42:32:3d:66:51:
3e:fb:3e:4f:68:e4:fc:07:9e:30:05:05:1f:56:59:51:10:d2:
8e:5f:02:0f:92:7f:db:3b:cf:89:d5:33:45:bb:58:12:78:62:
d4:81:a1:37:c6:30:30:64:61:9c:c1:97:34:1b:fa:8e:6b:07:
e1:64:e1:3e:f1:09:50:8f:fb:70:38:59:ac:a7:1f:5f:7f:8c:
d6:7c:3d:1e:fc:4c:88:94:59:0b:31:98:12:43:ea:83:a3:fe:
59:d7:ad:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:42:32 2025 by rpki-client