Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94b69c02-a117-42df-89a0-b463fa809f2d.roa
File: 94b69c02-a117-42df-89a0-b463fa809f2d.roa (raw, json)
Hash identifier: GY3ZfiPcaMkom0vvDXI0tDTJJtHgv74WUn4wRleFhqE=
Subject key identifier: 02:F3:6F:08:55:7E:2F:0F:75:1B:EA:A1:54:5D:20:0D:A9:1A:67:FF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6374C2E3BC4BEF9F92674D94F84FFF764630F6EA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94b69c02-a117-42df-89a0-b463fa809f2d.roa
Signing time: Fri 11 Jul 2025 20:21:01 +0000
ROA not before: Fri 11 Jul 2025 20:21:01 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:74:c2:e3:bc:4b:ef:9f:92:67:4d:94:f8:4f:ff:76:46:30:f6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:21:01 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=3993bd4835ad2c0e218d609e17df2a83b64a3e21a8ff7abb55794f151b237c05, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2c:4d:8f:97:67:35:20:28:8e:ba:96:b9:78:
2c:e8:d5:ce:60:f7:51:78:ed:4a:f7:18:3d:81:27:
7b:18:a9:20:a3:29:c5:d1:8d:ea:49:bc:fe:72:d5:
f8:cf:df:b7:8f:17:91:a0:d3:0b:fd:e4:e6:01:6c:
94:6c:8a:22:df:a8:fc:d2:36:4f:d4:89:90:d4:53:
02:90:30:0a:95:ef:6b:a6:02:10:07:16:0e:18:e0:
6f:61:c0:ae:7b:1c:64:28:82:44:6b:66:c6:7f:28:
c7:b8:85:68:19:c7:7a:eb:64:66:e5:36:89:45:a0:
b1:eb:56:d4:d0:95:83:e7:2b:80:2f:17:a6:92:b3:
00:e0:6c:2c:a1:fe:8c:f1:41:f0:b2:3a:95:58:19:
17:57:7d:ae:e3:58:b8:60:c3:bb:03:76:54:45:aa:
8a:be:82:49:94:ce:bb:55:dd:07:0f:a2:12:7a:a8:
a9:07:a2:fa:82:ed:1b:99:e8:a5:41:6f:e9:f3:7c:
4e:52:d3:a5:aa:c1:d6:5e:94:24:1e:88:74:24:62:
48:91:d2:16:30:e5:25:69:04:70:1b:1c:16:f4:fc:
fc:e2:02:18:04:9b:e6:bb:87:6b:46:ce:da:45:9b:
8b:65:48:36:d4:b8:a6:e4:78:dc:63:03:ac:29:dc:
91:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F3:6F:08:55:7E:2F:0F:75:1B:EA:A1:54:5D:20:0D:A9:1A:67:FF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94b69c02-a117-42df-89a0-b463fa809f2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:2000::/40
Signature Algorithm: sha256WithRSAEncryption
67:54:78:99:c4:08:75:2c:b5:74:ab:28:f2:2d:ba:07:34:b4:
f8:3c:9c:93:21:f8:ba:87:1a:a3:2b:af:ae:d8:10:34:0c:61:
f6:1a:28:df:94:46:b7:11:68:bd:26:02:21:79:fe:60:77:a3:
fb:ec:2e:fd:b7:d3:8f:cc:df:06:25:40:31:1b:dc:fd:ff:16:
c9:78:65:82:85:58:58:ba:64:5d:de:7d:7d:8e:45:56:94:50:
5f:f5:5d:cb:c2:72:58:9c:ef:1f:5c:af:ce:63:fe:92:8a:c6:
06:b7:85:8f:ae:ab:52:68:17:b8:e9:47:99:ee:fa:88:d8:5d:
3f:d4:e7:da:c6:ee:61:b9:c9:64:93:b3:08:1f:6b:83:5d:61:
4e:a1:00:0c:d2:2c:a8:d2:a1:b2:b4:48:85:da:0d:03:de:6d:
59:0a:9c:0e:ea:66:82:5e:95:61:d5:0d:e3:44:34:92:2d:4b:
86:9e:bb:7c:5e:b0:11:ed:06:e5:bf:23:ca:81:34:92:b8:13:
86:2c:5a:cc:b0:58:cf:9d:14:d3:9e:2b:ab:05:5e:ce:4c:de:
37:15:80:5f:24:6d:d1:35:58:2c:1c:4e:a4:85:95:b4:90:3c:
79:07:5c:f2:68:37:9f:f8:f5:3c:7f:d1:a3:5a:f7:c8:be:e1:
ad:bc:5a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:34:10 2025 by rpki-client