Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25b2b0c2-5313-4108-9379-3a551ea46c87.roa
File: 25b2b0c2-5313-4108-9379-3a551ea46c87.roa (raw, json)
Hash identifier: cUwxPt1Foc+Rxpckhb1sEvPseIfTPZy6DLt3YYNjFD0=
Subject key identifier: 44:6A:4D:EB:2C:18:2C:BA:DB:44:6B:C9:E4:0E:D5:A4:F1:1A:13:DC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 77DEF111879F29732E17E2AE3A3DD94FBBFDF616
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25b2b0c2-5313-4108-9379-3a551ea46c87.roa
Signing time: Mon 30 Jun 2025 17:50:51 +0000
ROA not before: Mon 30 Jun 2025 17:50:51 +0000
ROA not after: Mon 04 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:de:f1:11:87:9f:29:73:2e:17:e2:ae:3a:3d:d9:4f:bb:fd:f6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 30 17:50:51 2025 GMT
Not After : Aug 4 23:59:59 2025 GMT
Subject: serialNumber=d533b13a45a85885befc9d30cf8dac33a5dda066cc03ca196297a07dbca33265, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:bc:ad:8c:05:ef:e8:c8:ef:bb:5d:5e:fc:
d6:ec:ac:d5:44:75:18:64:a7:1b:15:e4:9c:76:10:
d1:c2:5d:45:8f:83:5b:b1:01:f4:3a:48:22:61:61:
37:86:64:9a:04:bb:7a:9e:52:41:98:0e:d5:02:b7:
ec:06:cb:8b:72:59:bb:05:e9:82:24:db:47:ff:c9:
21:48:ee:a1:b3:ce:9e:27:11:68:3f:52:1c:f5:f7:
e3:2b:88:b2:9b:ed:a7:6b:7f:c9:3c:77:75:5e:69:
05:a8:91:94:9b:82:60:fb:e5:95:d7:94:4d:2a:68:
6d:59:ae:4f:db:14:b1:7e:f3:0a:92:bb:34:24:80:
61:05:b3:d2:b7:22:fc:33:e4:10:74:35:21:95:6a:
2d:b5:6c:57:7d:c3:32:75:0d:f2:b8:df:fa:68:e0:
64:ed:46:cc:79:f9:2c:f4:23:9e:af:36:ef:aa:ae:
1e:c4:24:e0:fa:5e:de:07:6b:42:60:85:60:9f:5d:
d4:60:f5:37:28:5e:76:31:b2:e5:c1:24:a9:89:e2:
31:3f:40:6d:56:a1:dc:d4:16:51:86:56:54:0e:fb:
a1:00:8e:a8:9f:eb:f3:f7:c7:19:7e:a9:0b:bc:bc:
7b:42:39:62:45:37:2b:3d:4c:a0:f6:f8:59:96:93:
ed:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6A:4D:EB:2C:18:2C:BA:DB:44:6B:C9:E4:0E:D5:A4:F1:1A:13:DC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25b2b0c2-5313-4108-9379-3a551ea46c87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:c000::/40
Signature Algorithm: sha256WithRSAEncryption
46:61:05:6e:42:a7:6a:59:51:1e:eb:cc:52:ba:31:19:fd:65:
1d:b7:51:45:18:51:7b:e4:73:23:92:2a:c8:92:64:fc:fa:b0:
25:7b:0d:93:91:7b:53:2a:bd:50:45:cc:4a:0a:1f:1b:74:2e:
3b:1a:d8:86:b1:9c:86:de:99:16:d5:be:fe:3a:84:03:da:bc:
7e:81:05:c5:8d:6d:af:d9:b3:68:78:f5:d8:ca:a5:2c:f0:48:
64:4d:91:e8:82:b5:1a:4d:b2:88:92:c7:36:a7:f2:ea:ac:d4:
97:29:ee:b6:8e:c5:a5:54:53:1b:65:41:c6:4c:8d:4c:65:a7:
3c:09:83:84:3b:3a:69:fa:99:63:43:16:18:5e:5f:d9:1d:51:
cc:63:d4:1c:36:23:c9:c5:0d:c6:7d:b9:aa:3e:9f:c6:b9:40:
90:6d:86:48:b7:19:f2:a8:8a:73:37:1f:c9:04:51:fb:b2:d3:
b9:00:28:c2:e2:ab:63:85:17:69:59:df:e3:d5:aa:25:3d:e0:
39:cd:55:2b:bf:f7:f9:2d:9a:6c:09:3a:2a:c4:e7:9c:a6:89:
08:31:ff:37:1e:76:0f:48:f3:74:11:b1:75:65:f7:37:b1:89:
3c:a5:c3:d8:eb:6e:bb:ef:f5:d5:d4:10:07:de:0e:62:dc:16:
d9:76:c4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 22:24:14 2025 by rpki-client