Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f757d966-a37e-4dd4-896c-8caa86d1e20d.roa
File: f757d966-a37e-4dd4-896c-8caa86d1e20d.roa (raw, json)
Hash identifier: RxzDcz5LNuHJGVJ0Y6doiAtiXdJPfctRI+cfGolfiqo=
Subject key identifier: B1:9B:F4:CA:FF:81:8D:9E:58:A2:50:E4:07:D5:55:9E:33:F3:4D:A1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3E835BE906E1AA24E5DF359B594B6CE91D5610E7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f757d966-a37e-4dd4-896c-8caa86d1e20d.roa
Signing time: Tue 20 May 2025 19:40:38 +0000
ROA not before: Tue 20 May 2025 19:40:38 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:2040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:83:5b:e9:06:e1:aa:24:e5:df:35:9b:59:4b:6c:e9:1d:56:10:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:40:38 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=3288c2d96dd5fbef85a057c25e13a53e634b92d103a6c8e3606771319519f096, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ca:2e:e9:2e:8e:96:98:7b:f3:34:9d:98:06:
53:e1:f7:fd:87:7c:09:0b:ab:85:94:53:9b:16:30:
0f:83:29:d0:63:ad:15:3b:37:7e:76:66:7d:be:13:
14:73:00:fc:4a:79:6b:96:2a:4c:7f:b7:33:9c:20:
c8:9e:bd:7d:7e:ce:4b:7c:5e:f5:93:23:7c:87:80:
b3:cd:15:6a:aa:6c:05:b1:c5:a7:f4:30:ad:65:ce:
0a:6c:b1:52:33:29:4c:a8:1f:c6:fe:94:5f:79:33:
d9:f1:3b:f3:73:8f:b6:ea:7e:42:df:d5:6e:ed:5f:
1e:d5:8c:36:01:2c:91:2a:38:60:f0:ee:e0:45:8a:
2e:3a:ce:fa:fd:58:27:25:68:f9:e3:cb:a7:15:07:
2c:b6:e3:c7:2a:0b:fb:56:f2:84:eb:2a:4f:2f:c8:
84:2e:91:7e:50:d0:1a:67:e2:26:fb:81:f2:09:5c:
fa:42:ab:e3:55:1f:e9:7c:3a:66:5a:51:f0:45:92:
46:03:da:47:df:39:c2:38:d3:91:f6:ca:0d:6b:e8:
ed:40:55:c8:f4:99:06:a4:ea:e7:7b:16:10:2c:8a:
4f:2b:82:61:51:e2:10:cd:50:96:1a:7e:ab:2e:ae:
48:96:85:64:1e:16:60:52:e7:ee:19:32:a7:07:7a:
31:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9B:F4:CA:FF:81:8D:9E:58:A2:50:E4:07:D5:55:9E:33:F3:4D:A1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f757d966-a37e-4dd4-896c-8caa86d1e20d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:2040::/46
Signature Algorithm: sha256WithRSAEncryption
1f:ce:b4:58:53:45:9a:66:ec:6d:2e:76:21:b9:7b:2c:3f:c1:
f1:3c:55:e4:8a:e0:c3:03:f8:10:c7:22:f0:93:d2:79:df:75:
e6:76:23:28:8d:85:44:84:3f:a3:13:41:77:db:11:da:35:79:
82:70:50:1b:06:f9:17:5c:69:e7:d7:52:e7:fe:44:22:b6:78:
84:ba:f8:52:10:a0:f7:f5:ca:72:cb:7b:11:c3:1e:7c:da:70:
ba:9a:c0:09:e3:3b:52:43:fb:6c:12:37:b5:f4:05:40:eb:77:
73:96:e5:76:25:69:3d:32:69:71:99:be:8e:a8:ff:85:04:31:
a2:65:6c:ec:60:11:1b:5d:72:d9:ac:dd:87:03:7b:e3:bd:bb:
cf:f0:7d:98:f2:6b:fc:56:79:43:ed:2c:e3:0b:0f:94:ef:14:
39:f9:35:d2:e8:be:e1:7a:f7:1b:e6:03:d2:39:f0:18:82:c9:
2a:db:3b:a5:07:26:c7:f2:5e:3c:0a:71:47:2b:b6:a8:46:8b:
fa:ba:84:7a:bf:4f:f1:4e:e4:f2:9c:99:35:7a:e9:79:c5:e8:
7d:29:b4:08:5c:83:94:5f:b9:78:00:cc:7a:f6:38:08:52:3f:
42:c6:a6:ec:40:27:35:bc:c2:63:9e:ad:b0:f1:ef:2b:a3:e3:
44:53:ae:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:35:36 2025 by rpki-client