Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5b25b08-ec24-4e18-84c9-05ac035b15a8.roa
File: f5b25b08-ec24-4e18-84c9-05ac035b15a8.roa (raw, json)
Hash identifier: JWR5jYKA9V1pfThZCjAWDy9+cT2M+BXTSlL32KuVT2s=
Subject key identifier: D4:9F:F9:F1:60:F5:8D:30:E3:1F:E4:9D:FB:C4:36:41:6C:BC:D8:12
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0199B516DD85D7C7CE2B217D1605A4A10D4C9984
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5b25b08-ec24-4e18-84c9-05ac035b15a8.roa
Signing time: Fri 23 May 2025 00:40:06 +0000
ROA not before: Fri 23 May 2025 00:40:06 +0000
ROA not after: Fri 27 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d010:8000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b5:16:dd:85:d7:c7:ce:2b:21:7d:16:05:a4:a1:0d:4c:99:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 23 00:40:06 2025 GMT
Not After : Jun 27 23:59:59 2025 GMT
Subject: serialNumber=a46ac857cb22c83cf25cb1d31eba5b73c62968c5fa3c153dcc0accca25be719a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1d:75:9e:41:48:67:c1:de:79:43:9a:99:61:
ab:2b:b2:ae:42:56:4d:f7:62:38:a1:5e:90:5a:99:
d6:dd:0a:c6:b5:12:83:7a:01:91:cc:5f:42:b6:c0:
d0:a9:c9:c6:42:c1:34:c3:33:8d:f4:0c:6b:d3:de:
c6:b3:90:52:54:32:b5:86:5d:32:0e:ae:8f:d4:b0:
fd:a0:2b:0d:b7:a6:0a:71:aa:13:00:50:ca:37:f9:
20:cd:4e:13:93:60:93:00:19:1f:f8:76:26:9d:c2:
39:6a:b1:75:22:44:38:61:4f:06:7e:bd:83:01:cb:
fb:6b:d2:9e:01:a1:7a:9d:30:a9:3c:81:47:c2:b9:
08:85:07:1c:2f:08:6b:58:9e:af:13:6d:02:c8:b6:
48:0a:2c:36:7e:ff:db:03:0d:e7:12:90:6c:e6:91:
a6:24:94:b2:29:c7:b8:a8:33:3f:59:38:06:0c:b6:
21:31:46:02:d7:8b:f1:bf:ab:80:53:14:b5:eb:d0:
27:b4:f6:96:0b:58:e1:ee:2d:38:80:a0:b5:b6:84:
d7:d0:14:af:f0:16:1f:fa:c9:ad:55:33:7e:c5:00:
f1:b3:40:e4:f2:64:41:53:44:25:a9:7d:8e:d1:55:
90:b4:9e:35:32:68:fa:f1:73:6d:4e:1b:15:03:89:
1a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9F:F9:F1:60:F5:8D:30:E3:1F:E4:9D:FB:C4:36:41:6C:BC:D8:12
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5b25b08-ec24-4e18-84c9-05ac035b15a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d010:8000::/38
Signature Algorithm: sha256WithRSAEncryption
b0:5c:0c:3c:51:72:d1:ff:f9:8f:3b:47:78:0c:18:88:be:32:
3f:e8:6d:86:8d:77:2b:05:79:22:80:a8:93:64:7b:3c:21:5e:
10:72:77:8b:ba:0f:49:54:4b:4b:7e:4e:7d:b5:81:b0:e7:77:
0a:cb:a8:a0:ff:93:9f:7d:47:4a:20:c2:60:4c:7f:34:a0:5f:
15:ca:5c:ad:3c:bb:46:45:26:4a:c7:ef:82:e4:b6:e1:97:cb:
83:a6:b2:84:23:e0:ab:ad:83:28:ec:c5:ce:f0:d8:ca:82:55:
f5:2e:bf:38:9d:57:0e:2b:13:73:e2:36:3f:0a:d2:e0:a8:5b:
38:d8:97:6f:7d:f6:03:e6:38:4b:b8:a9:57:64:11:03:81:72:
58:15:d5:61:64:75:a8:46:3e:38:20:37:d9:33:91:aa:44:92:
4b:d2:e9:e8:1c:eb:0f:c4:f4:1e:ad:e7:be:6c:27:b3:05:ad:
f0:7c:bf:30:f1:be:48:68:c8:b4:2e:41:bb:bc:47:c5:b0:60:
ef:2e:32:01:75:60:ba:a3:1a:55:3d:ff:0b:89:ae:79:e4:6f:
3f:00:0f:a3:bd:50:dc:cf:ac:fa:75:ce:25:87:66:22:73:60:
b6:42:b1:93:e2:65:60:7f:11:45:13:90:d0:d4:85:d6:5c:8e:
e1:0f:a1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:37:51 2025 by rpki-client