Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa
File: 83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa (raw, json)
Hash identifier: euCRNeYbQeNDkYXYDvxnHcTA5l4E5be9VevzsYHStjg=
Subject key identifier: 45:83:E9:C1:91:E2:5F:FF:F4:92:8D:E2:81:F2:42:8C:3F:1F:29:79
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 292E9AFC8C36BA426D97B807AEFE065EAF1ABD28
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa
Signing time: Mon 14 Jul 2025 15:30:18 +0000
ROA not before: Mon 14 Jul 2025 15:30:18 +0000
ROA not after: Mon 18 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:2e:9a:fc:8c:36:ba:42:6d:97:b8:07:ae:fe:06:5e:af:1a:bd:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 14 15:30:18 2025 GMT
Not After : Aug 18 23:59:59 2025 GMT
Subject: serialNumber=1a656e6fd5691f34c208806499f7d8b6876393979a5b85d29129e3201909effe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:e6:ac:76:91:e6:90:5d:93:f9:d3:53:97:
a2:65:e5:89:d3:ba:d8:40:a1:28:83:32:c9:be:8d:
97:66:69:e8:5b:59:70:a8:fa:6d:88:5e:15:a0:c2:
a6:29:f1:4b:5b:dc:10:64:a2:9f:e5:a9:fd:89:a2:
a0:64:a2:f6:9e:99:07:b3:dd:67:25:74:21:00:79:
b2:79:29:b2:a6:16:e7:0c:85:dd:ee:ad:22:0b:b0:
f7:f1:3a:70:0c:b2:ee:2d:53:4e:25:49:c2:26:9b:
9b:91:69:64:43:bd:38:94:db:18:b8:c2:2d:d5:35:
03:80:09:70:a5:72:51:1c:a5:05:7a:e2:d9:e4:d1:
6e:83:42:6e:35:48:42:c0:2b:7c:93:eb:67:3b:49:
d5:86:e0:c5:58:cf:6a:f0:97:e8:f9:d7:65:6d:a4:
44:88:1d:63:ce:94:78:e8:9e:77:43:97:d0:08:7e:
83:9c:bd:a2:41:83:8c:0e:6f:83:17:1d:4a:7c:5a:
c7:df:98:0c:9a:b9:90:d8:91:f8:3f:41:82:54:85:
92:0d:30:86:b9:de:9b:b6:19:53:78:b8:77:34:e1:
ad:3b:08:01:57:d8:1c:e9:12:d7:71:88:10:79:c6:
cd:1b:de:5e:b2:57:fe:2e:92:15:fe:63:e8:b1:85:
4b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:83:E9:C1:91:E2:5F:FF:F4:92:8D:E2:81:F2:42:8C:3F:1F:29:79
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.0.0/18
Signature Algorithm: sha256WithRSAEncryption
19:3b:ef:24:b9:b0:ca:2a:4a:e0:ee:90:87:68:23:e6:6c:0c:
99:0b:02:47:29:11:cf:78:75:c3:22:df:d2:55:16:4a:fb:94:
37:79:9b:f7:36:33:66:96:3d:2f:ab:70:3a:d1:e6:46:b5:54:
58:65:b9:cd:a6:8a:32:83:23:be:d3:1d:cb:9f:da:74:b9:60:
83:76:1d:35:67:c2:15:e3:34:02:df:40:ad:98:15:cb:02:42:
66:04:16:b0:9e:88:74:d7:63:e2:85:d6:96:c1:17:6b:d2:f4:
85:fc:4d:31:a8:71:f3:62:f5:44:01:87:d5:68:e7:30:eb:ca:
42:31:81:c9:af:2b:9a:3a:f2:70:ee:94:33:4f:5f:54:8a:0f:
d8:6b:cf:90:3e:7b:ce:db:80:e5:4e:60:4d:46:e9:08:ca:d6:
65:08:f3:44:86:b1:f1:11:9d:56:80:c7:d4:9f:4b:18:00:0d:
46:72:7e:90:23:c1:2b:cb:e2:15:89:f5:d3:5e:d4:98:c3:90:
e7:fe:df:09:89:52:e6:f2:b9:58:8e:ab:2f:32:c0:4b:b0:69:
8e:b0:4a:63:b4:8f:14:c3:ab:d3:ed:ae:e8:29:64:f2:22:7f:
7b:84:ed:f2:d1:cb:14:43:5f:54:d9:c1:62:ca:a0:b8:83:af:
99:7c:bc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:51:46 2025 by rpki-client