Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/54957543-b22c-43fb-b523-8f40c64fe15d.roa
File: 54957543-b22c-43fb-b523-8f40c64fe15d.roa (raw, json)
Hash identifier: XxNZzz5uukoFT9A8kWuPgNNsxHzHOwF3bP+riJ+L5kI=
Subject key identifier: 69:E3:66:C0:5A:60:3D:22:48:54:4B:B5:D3:67:0C:4F:19:BF:38:A0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 711C372CC1E5B16F449CD3E1B533B28AA66200B7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/54957543-b22c-43fb-b523-8f40c64fe15d.roa
Signing time: Tue 01 Jul 2025 15:01:01 +0000
ROA not before: Tue 01 Jul 2025 15:01:01 +0000
ROA not after: Tue 05 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:1c:37:2c:c1:e5:b1:6f:44:9c:d3:e1:b5:33:b2:8a:a6:62:00:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 1 15:01:01 2025 GMT
Not After : Aug 5 23:59:59 2025 GMT
Subject: serialNumber=b550465de6ab5321245f80bc987814959a4708425926a22bd3405d926512bf18, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:58:72:3c:d3:a6:19:74:ac:70:71:21:af:
4c:2a:31:86:20:3f:57:7f:e8:32:89:98:70:76:b1:
13:09:bd:fd:42:39:e3:87:2e:51:ca:8e:6b:91:4e:
72:d8:88:25:40:7b:7e:75:87:f4:8a:d6:a2:94:93:
34:ab:5a:b8:35:11:f5:b8:f3:65:68:26:c4:2b:5d:
61:ae:c1:97:b9:b9:60:6f:02:a7:f5:26:3a:9f:e9:
18:2f:3a:49:aa:8f:fc:b8:48:33:b5:1e:e5:fd:d1:
61:8d:d2:82:bf:7d:c1:96:76:49:5e:2c:6e:f8:21:
e0:b9:be:47:5f:d3:6b:f5:17:de:11:eb:6c:91:b9:
7f:d5:c4:85:b1:29:e7:aa:0e:bd:42:68:84:59:b6:
c3:ab:c2:e5:94:41:03:b6:ad:6d:d6:bf:f5:9e:ee:
11:84:28:0a:d4:50:ba:f0:9f:f0:1f:39:37:34:b9:
bd:a9:47:91:0f:c6:14:27:5e:bf:57:bd:9f:20:f7:
4c:ef:5c:5a:91:25:af:8d:b1:23:df:38:9f:e8:fd:
34:5d:b0:7a:5d:e7:a0:89:4f:c8:d8:f3:b3:b1:4f:
45:64:8d:71:6c:8d:7c:fe:89:78:c2:ff:77:28:e5:
34:ad:d1:9c:3f:71:fe:22:bf:ea:63:20:b4:28:02:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E3:66:C0:5A:60:3D:22:48:54:4B:B5:D3:67:0C:4F:19:BF:38:A0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/54957543-b22c-43fb-b523-8f40c64fe15d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.192.0/19
Signature Algorithm: sha256WithRSAEncryption
bb:a8:af:f2:5f:3a:5f:2d:5e:99:b4:4d:c4:c0:96:e3:f3:d3:
48:41:db:d6:40:75:d3:b6:13:53:bb:0c:e3:83:34:ed:76:d3:
7d:4a:c8:05:94:a9:22:50:04:fa:2d:db:f5:ad:f4:36:f2:4f:
d7:53:74:d6:b9:40:dd:aa:9b:85:81:94:26:e0:7d:7d:cf:d5:
21:34:6e:51:1b:98:29:4c:43:82:8e:3c:7b:b5:fe:87:d6:b1:
58:55:4b:5f:ff:8c:98:1e:d0:f5:26:cc:87:6d:e1:01:dd:63:
2b:20:b8:37:65:f7:4c:a3:bc:fd:ca:d1:e8:43:a2:99:e9:f7:
79:f8:27:94:07:65:aa:85:ea:16:53:3d:4e:6d:bf:ea:80:1d:
7a:fe:23:2a:c9:15:32:e4:55:a5:40:51:34:41:a4:b8:bb:60:
e8:fb:52:7f:5b:58:93:83:52:86:b9:50:fa:99:cb:41:2c:02:
d9:8e:4d:05:70:a1:91:53:e3:b4:30:ca:a5:37:ed:1f:0a:46:
b1:ad:b0:f1:ec:ae:40:84:37:57:93:7b:35:e5:5e:f7:31:ab:
50:7d:30:50:ef:eb:dd:de:93:f3:7b:45:a7:11:65:28:ec:c6:
67:d2:31:4f:b2:39:9b:0d:0f:2d:bb:f2:b5:0f:a8:96:e3:ec:
d3:ed:82:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:34:13 2025 by rpki-client