Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc59e421-ba1d-4f6a-aeba-9d5c673a7026.roa
File: bc59e421-ba1d-4f6a-aeba-9d5c673a7026.roa (raw, json)
Hash identifier: EqwYY6U4MjepxGDqG2eTkpkmW2X1+2+K9/KhTexVxzs=
Subject key identifier: 2E:1A:CE:10:E8:0A:B6:39:2B:77:3C:6E:CD:34:4E:AF:95:CE:C9:B9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 51BC0D250CF71D06FF2EF67BA510CFDBCAE3F452
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc59e421-ba1d-4f6a-aeba-9d5c673a7026.roa
Signing time: Tue 01 Jul 2025 15:11:04 +0000
ROA not before: Tue 01 Jul 2025 15:11:04 +0000
ROA not after: Tue 05 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:bc:0d:25:0c:f7:1d:06:ff:2e:f6:7b:a5:10:cf:db:ca:e3:f4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 1 15:11:04 2025 GMT
Not After : Aug 5 23:59:59 2025 GMT
Subject: serialNumber=d87e4ae4615e8fb5d50e8de9f78be27b69b24e887a226bb51eb92ece36650508, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:18:9d:73:69:cc:cb:a0:a6:28:38:26:32:
7e:c0:ed:fb:c1:e1:fd:7d:c6:9e:7e:a1:e5:5a:cf:
2c:f5:41:fd:59:3a:45:13:1d:cb:f5:f3:26:a0:50:
55:c9:43:57:ec:58:4b:1a:a7:74:5e:52:9c:98:cc:
ec:59:d1:d8:6b:7b:4b:35:cf:21:f7:a0:16:09:cd:
f8:b0:7f:36:ff:d8:c5:fd:51:43:d2:ae:9e:b9:2d:
fc:4a:d2:88:ba:fb:4a:76:db:13:83:11:96:9f:87:
11:da:06:a3:26:e6:d7:ab:d2:03:1f:78:d2:96:1c:
37:cc:eb:6d:67:49:02:3c:e3:9f:fb:26:d5:1a:c5:
f4:e4:c7:c0:e6:16:ce:6b:20:08:15:a4:4f:84:4b:
39:65:cf:66:6d:b9:d7:80:31:08:73:5f:13:a6:e0:
79:e9:11:0f:81:c5:5a:84:84:b7:16:72:76:54:d9:
bd:9c:a8:6a:65:f2:c8:ed:f2:c4:b0:5a:24:8b:1c:
3b:c3:6d:9b:f8:98:e4:95:5c:cf:5a:c3:3f:ce:68:
24:db:88:00:96:31:c8:c4:4b:76:38:73:42:ba:8f:
30:f6:c7:08:69:e8:cb:99:de:d1:b9:93:5f:39:1d:
38:4c:d8:13:f7:d4:1e:81:44:14:59:86:fd:48:68:
ff:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1A:CE:10:E8:0A:B6:39:2B:77:3C:6E:CD:34:4E:AF:95:CE:C9:B9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc59e421-ba1d-4f6a-aeba-9d5c673a7026.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:2000::/40
Signature Algorithm: sha256WithRSAEncryption
c3:f6:0e:f5:3a:6a:cc:4e:a5:02:2a:03:c9:04:9c:46:c8:be:
df:f8:03:bd:4e:bc:81:a8:92:63:0a:be:8f:a4:82:6b:60:f0:
37:06:4d:d2:92:aa:e7:6c:04:93:bc:4e:d1:2f:6c:2e:a1:70:
69:f3:f5:76:5a:4e:a5:6a:a3:74:31:f8:89:4b:41:2f:04:bd:
38:6f:fb:a7:18:4b:ef:6e:7f:95:8b:66:c1:ae:f1:d8:86:19:
87:ab:23:0e:da:04:10:61:72:08:4b:33:15:fa:c7:25:4f:2b:
ec:f8:8f:3a:bb:fe:be:8b:2a:2f:f0:8a:16:2b:73:e4:82:9c:
86:0f:a5:e6:56:34:f7:47:3e:df:f2:7a:da:24:05:3d:d5:e8:
81:3e:5e:34:d6:95:6b:20:43:04:5f:8e:2e:27:7a:12:ca:4c:
c4:68:d5:67:7c:10:62:40:3b:18:8f:5a:f6:b3:f0:72:88:95:
58:6d:11:eb:de:3e:d3:8d:8a:9f:48:60:da:07:e6:6e:2d:49:
62:d2:47:e5:09:9b:77:66:88:da:8f:65:be:54:e0:2d:5b:6a:
51:51:b1:4c:68:d2:61:e2:08:62:c3:97:24:62:9f:21:d8:bd:
98:2e:44:8f:b6:ec:a5:30:d7:68:ce:c1:08:72:86:c1:b1:53:
12:1b:dc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 22:24:16 2025 by rpki-client