Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a1ea1f2-685a-4073-b22a-0a37f133b9dc.roa
File: 7a1ea1f2-685a-4073-b22a-0a37f133b9dc.roa (raw, json)
Hash identifier: oS8CiKcwRxuukHr7V++qcmCloD7sTXNWyhHB9TNVFz0=
Subject key identifier: 50:1D:6C:3F:15:07:4F:12:5C:EC:4E:2A:BD:86:AE:13:B1:F9:08:A2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3D661C2871B05C8B72340C4B94BD7BDAAB9EEF88
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a1ea1f2-685a-4073-b22a-0a37f133b9dc.roa
Signing time: Tue 01 Jul 2025 15:10:16 +0000
ROA not before: Tue 01 Jul 2025 15:10:16 +0000
ROA not after: Tue 05 Aug 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d030:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:66:1c:28:71:b0:5c:8b:72:34:0c:4b:94:bd:7b:da:ab:9e:ef:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 1 15:10:16 2025 GMT
Not After : Aug 5 23:59:59 2025 GMT
Subject: serialNumber=54ac7f447fd997a31ed814f055c28563f1b7f1ac185ec5ddbc21ebde9e686dcf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4d:89:28:ed:b4:a1:64:e4:0c:63:ec:1c:12:
2c:5f:4c:79:c5:d4:02:d6:15:68:4f:1c:83:04:cf:
48:b6:5f:59:97:a5:f2:3c:a8:c4:86:00:c2:89:40:
87:c9:11:65:e4:c9:89:ab:40:ab:06:3b:d7:8f:d5:
d0:7c:d5:d2:8a:4a:94:ca:1e:4b:6c:e7:b9:c0:20:
95:4e:17:e9:3e:24:0b:7b:db:f5:2a:39:32:24:49:
8f:b9:3b:fe:78:13:9e:fe:9b:e9:6c:d5:99:3b:6b:
ec:6b:47:a6:f0:67:53:46:0a:58:4a:33:f9:d8:27:
c9:ba:e4:37:e6:85:e4:8a:e0:7c:b3:27:f6:2b:df:
40:02:0b:16:43:8f:69:d9:76:78:2f:4d:3f:a9:e4:
a8:1b:d5:70:e4:60:44:9d:ca:49:69:cc:7f:2d:a2:
03:87:70:f8:56:72:9b:1b:2d:ea:42:69:9a:cc:d1:
ed:b0:25:4c:50:96:d4:73:77:f4:cd:35:3e:dd:7a:
b5:30:80:23:d0:58:20:50:3f:0d:d3:db:1b:41:22:
29:7c:a4:a8:1e:51:20:63:0c:26:c2:a9:c0:99:ef:
ce:d7:c9:d1:dd:95:a9:ff:50:b0:8e:8d:65:43:ba:
d3:17:0b:99:13:4b:38:67:ef:01:9d:f6:c6:63:33:
5c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1D:6C:3F:15:07:4F:12:5C:EC:4E:2A:BD:86:AE:13:B1:F9:08:A2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a1ea1f2-685a-4073-b22a-0a37f133b9dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:5000::/40
Signature Algorithm: sha256WithRSAEncryption
32:8e:43:35:75:e5:79:8a:77:aa:55:c3:66:65:21:36:e6:5b:
b9:38:cb:e0:27:99:16:d3:4b:10:47:ef:dc:61:b9:e9:0a:64:
3d:79:39:de:e7:dc:8f:5b:59:c1:c8:fb:bd:bb:be:b8:d1:ff:
aa:c8:a3:db:d2:88:27:19:40:a0:b1:41:1b:31:e9:5d:23:54:
6c:60:85:0a:49:26:08:70:95:8f:00:82:42:9a:23:f9:86:33:
70:6b:89:5b:93:78:63:2b:f3:2a:c3:82:10:62:18:ba:f9:7d:
84:be:fb:2d:37:4a:aa:33:ec:f0:78:1f:8d:e1:37:51:6c:10:
62:a3:5d:ee:50:7e:f7:43:cb:bf:23:89:5a:86:86:4c:7c:80:
71:a0:0e:67:75:6c:d8:9c:f6:7c:80:aa:4d:6f:33:ce:66:68:
12:7b:23:21:46:df:bd:04:2a:3c:b9:58:a4:49:e4:e9:c1:d3:
88:92:21:7f:c9:96:15:e0:59:91:cf:d2:92:d3:2e:2e:c5:6a:
a4:45:24:28:ae:b4:27:80:79:cd:37:ad:4f:1d:b8:9a:f0:c1:
be:13:94:99:df:a2:21:a3:c0:10:e3:fa:2c:be:67:f4:cc:81:
5a:48:fb:ec:c4:9e:cc:18:6a:41:e3:91:fc:1f:82:44:a6:55:
72:0a:7c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 03:49:35 2025 by rpki-client