Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb21710a-a37a-4476-ab6b-3d079e9d1cc9.roa
File: bb21710a-a37a-4476-ab6b-3d079e9d1cc9.roa (raw, json)
Hash identifier: A/SoSxW4pR+rFur6BVV9LEBItdV/Oqi6HXyKAoQrQfs=
Subject key identifier: 53:DF:8F:FC:5B:1B:E3:3F:FB:66:5C:3B:23:E6:EE:00:50:F1:0D:79
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5E2E68FE4E553ADF92A01A966BB622729C80DDAC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb21710a-a37a-4476-ab6b-3d079e9d1cc9.roa
Signing time: Fri 11 Jul 2025 20:21:12 +0000
ROA not before: Fri 11 Jul 2025 20:21:12 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:2e:68:fe:4e:55:3a:df:92:a0:1a:96:6b:b6:22:72:9c:80:dd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:21:12 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=f8bdd365bede0ed8d45b881bdd8d132595075aba7edb3d0679813a3da7518e8a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:14:54:f2:1f:52:ce:c6:71:ac:7a:8a:12:e6:
52:f0:d3:19:47:d9:37:63:1a:d1:23:53:38:74:de:
58:55:a7:43:b9:72:c0:e1:25:f3:3f:5b:83:d1:65:
29:65:f9:d4:c4:5f:8e:72:8b:e5:a8:a5:71:42:8c:
88:c0:3f:d5:7b:5d:29:c8:68:70:d5:9b:9e:1a:8e:
8c:f0:8c:3a:f9:a7:80:d3:2b:05:77:ac:55:b1:3c:
cc:c2:97:6b:bf:c4:fe:04:59:06:63:18:15:93:44:
c3:17:61:24:d5:7a:dd:43:81:7b:34:8f:e4:df:33:
f7:f6:72:3c:fb:52:3f:0d:4a:23:f8:8a:7d:5f:3a:
c2:c3:cb:e5:94:2e:6c:93:5d:75:a8:96:95:1c:e2:
b8:8b:2b:40:e8:af:13:a9:7e:2f:f5:07:dc:61:d2:
06:49:99:c5:fd:37:0e:70:de:db:01:e8:c2:cd:28:
4e:2c:f0:f0:46:bc:0d:e5:c0:96:a2:63:3e:44:2a:
e7:de:d6:45:2a:b4:4b:ad:03:c3:7a:20:62:fe:b6:
b1:76:90:b4:b3:9b:cc:cc:58:5a:79:d7:59:be:94:
c0:d3:ab:d0:8d:ea:61:9e:11:a6:12:91:2a:30:40:
08:46:53:76:cc:a2:7f:1c:f6:06:e7:dc:33:86:fe:
dc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DF:8F:FC:5B:1B:E3:3F:FB:66:5C:3B:23:E6:EE:00:50:F1:0D:79
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb21710a-a37a-4476-ab6b-3d079e9d1cc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:4000::/40
Signature Algorithm: sha256WithRSAEncryption
2a:92:7a:a3:18:8f:ef:af:36:4b:a9:d6:9d:ba:88:94:35:6d:
55:50:92:c2:85:e3:91:db:56:75:f9:8b:35:d9:30:19:e4:2e:
fc:0b:f8:19:b4:c8:8b:71:40:84:52:a6:ae:9d:05:5c:09:1c:
fe:7e:05:24:fc:3b:7f:db:30:fd:48:a8:b7:27:7e:03:55:90:
c1:0c:49:55:6c:a8:53:79:cd:19:3d:4f:0c:7b:e5:26:90:04:
a9:31:20:04:ca:94:af:1a:dd:46:8e:93:6e:e6:aa:92:83:2a:
5f:6e:05:ef:7d:c8:d8:8d:61:49:d1:ee:ad:6c:53:1f:b2:1a:
ee:4c:8e:13:5b:58:a5:52:37:b8:6c:6a:cd:1f:22:d6:d5:99:
14:d0:58:b7:11:71:96:2d:75:73:13:4e:f2:d4:86:2e:da:a9:
d8:32:a1:dc:fc:c2:d0:bf:31:e6:f1:db:13:8f:ca:35:20:fa:
3d:b6:58:00:1e:7c:c5:35:44:28:77:63:fe:bb:93:14:b2:4a:
ed:52:76:1d:17:98:7e:5f:75:77:0a:93:b3:4a:e9:a4:f0:fc:
17:df:ad:7b:a7:39:56:ad:c8:8b:e2:69:03:35:ea:ab:49:91:
e1:bf:69:a4:7b:ed:97:9c:dc:45:93:9f:02:11:d0:b7:71:7a:
fc:1c:32:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:35:21 2025 by rpki-client