Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f8d2f8f-3d48-47ce-8524-66406f0de004.roa
File: 3f8d2f8f-3d48-47ce-8524-66406f0de004.roa (raw, json)
Hash identifier: bH5eAZjbcZJyXWi/xxwdeojjHf2sHXTfBnuTi8UTTcQ=
Subject key identifier: CE:BF:45:49:67:88:29:B6:F4:F9:05:8F:EA:5D:D4:EE:F4:4B:90:D2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4CF208E682C15294B22985F9543B68F1F45C205C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f8d2f8f-3d48-47ce-8524-66406f0de004.roa
Signing time: Fri 11 Jul 2025 20:21:53 +0000
ROA not before: Fri 11 Jul 2025 20:21:53 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f2:08:e6:82:c1:52:94:b2:29:85:f9:54:3b:68:f1:f4:5c:20:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:21:53 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=37b511cd30f4ef70ee034b1b443c5df2e3a3ee2d6a19ba95d05125c4eb95283b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:dd:bf:b1:28:1e:8d:28:e7:87:f3:c9:d8:
ed:f3:4f:46:8d:aa:3b:4c:20:dc:88:4a:22:64:c0:
64:46:b3:68:0c:0d:04:84:2b:58:4d:af:51:51:05:
c7:8a:57:f3:e5:ca:05:5c:c4:87:1c:2e:2d:f6:4a:
0d:27:02:d7:42:38:cf:8b:b0:00:f1:bf:ad:57:30:
40:ba:31:af:42:c9:bd:a2:62:db:4f:65:e8:73:90:
58:8d:f9:2a:e8:83:f1:b8:9d:77:49:30:76:7c:cc:
48:b4:45:7e:4d:08:72:c9:34:14:71:b0:04:8f:29:
3a:e8:db:8f:ab:72:fe:20:37:19:00:53:98:17:e6:
38:0e:ec:c7:94:ce:5d:cf:61:c6:44:61:3f:1c:32:
7e:9c:5b:1b:fc:cf:91:12:18:df:6e:fc:fa:0b:77:
c6:20:8e:60:43:86:a3:be:4d:d4:5a:57:df:60:63:
57:39:67:e2:cc:44:12:2d:6b:55:ea:7d:ee:b0:10:
da:5f:9d:83:ca:44:8d:af:85:12:95:bb:a8:f4:c1:
be:43:a9:b2:bf:81:f6:e4:63:53:51:e4:ea:2e:f5:
a2:c9:b6:2a:4c:31:d2:ac:8b:12:78:c5:16:db:a0:
58:c6:86:b9:d9:49:3c:0f:18:d3:ac:50:20:76:1d:
17:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BF:45:49:67:88:29:B6:F4:F9:05:8F:EA:5D:D4:EE:F4:4B:90:D2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f8d2f8f-3d48-47ce-8524-66406f0de004.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:b000::/40
Signature Algorithm: sha256WithRSAEncryption
9f:a2:db:c4:7d:8f:8d:5f:b8:f5:f2:22:80:84:32:0d:c0:23:
99:b7:e0:71:73:58:42:31:0f:3b:42:7d:f8:2b:14:5b:ab:2f:
00:91:81:8b:99:c5:ab:6b:50:f7:88:94:cd:91:83:d6:8f:28:
61:31:6f:15:0c:56:08:9b:cd:d5:2c:3f:ce:2b:83:46:8b:09:
d5:b9:0d:e1:b9:27:60:46:e6:f8:23:c8:98:b6:0b:f1:b6:93:
b6:8b:00:7a:ae:d6:5d:94:39:0f:d3:ef:c0:95:42:d6:8e:5d:
62:36:54:91:16:7f:c6:cb:d1:e5:78:c3:01:ef:c4:de:5a:d2:
37:36:53:c4:6b:fd:30:be:27:a0:dd:9b:54:7a:54:f5:00:a0:
ef:c1:54:c8:36:52:f8:2a:b8:17:0d:0d:37:70:ee:1f:e9:a5:
6e:1b:2a:2a:20:f5:79:22:04:96:2c:77:6a:f2:ab:89:df:14:
e4:6e:b6:12:8c:2e:86:e2:f7:f7:a0:5a:cb:46:61:59:02:e1:
c2:7f:36:b4:62:96:7c:64:45:19:75:ee:c9:78:bf:fb:4f:e5:
5d:eb:ff:f6:fd:e6:27:4e:8a:9c:ef:f9:c5:71:e9:60:15:b7:
34:45:16:ba:45:36:fa:7f:e9:b2:9d:06:d9:cf:b5:98:ed:99:
fb:a3:27:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 00:00:18 2025 by rpki-client