Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c2cd4ddf-9a38-425a-8021-c45ed96c50ea.roa
File: c2cd4ddf-9a38-425a-8021-c45ed96c50ea.roa (raw, json)
Hash identifier: v4c8AKQXufw1/ZLVRDvti0yhqSn9riesEwN5QbLLoX8=
Subject key identifier: D1:77:51:1A:30:DD:D6:F9:C0:BD:17:E2:0F:B8:49:A8:C9:92:1D:1C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 61C22A772CEB7074037CD13B511645912ADEB884
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c2cd4ddf-9a38-425a-8021-c45ed96c50ea.roa
Signing time: Tue 01 Jul 2025 15:00:21 +0000
ROA not before: Tue 01 Jul 2025 15:00:21 +0000
ROA not after: Tue 05 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:c2:2a:77:2c:eb:70:74:03:7c:d1:3b:51:16:45:91:2a:de:b8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 1 15:00:21 2025 GMT
Not After : Aug 5 23:59:59 2025 GMT
Subject: serialNumber=a8553b279a345b7f1b0b7794ee4e7c06851393af0d8613c7da8c9d3d3f45ec78, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:81:f6:d6:59:00:8b:70:2a:49:cc:73:b1:
fc:04:54:7e:96:2a:4c:80:6f:5c:91:20:41:ae:0b:
ba:8f:5a:b2:7f:d9:ea:01:ed:6e:c2:51:49:13:56:
c9:5c:a8:d8:35:00:28:91:76:0f:ee:0e:50:bc:d0:
7b:5d:1a:f7:0d:f9:8d:80:68:f8:ed:ed:01:68:0a:
38:00:74:24:08:c4:7e:f8:c6:e5:1f:fd:96:f0:21:
b8:74:25:7c:7c:26:59:01:86:65:97:c1:31:f7:c5:
e9:3a:b3:7c:51:8d:84:d4:57:35:0d:3b:3b:35:30:
2d:23:e3:bd:b2:38:3f:a1:8c:a8:f2:b1:6b:76:a1:
e8:3a:a6:af:9f:75:a3:d4:13:33:74:4f:84:0c:c9:
d5:68:7f:d5:85:8a:38:87:9d:75:5d:2a:68:eb:e7:
b6:d1:62:e8:19:05:fd:46:cc:1d:b0:d7:4c:c0:1e:
40:b6:e1:94:e0:9a:db:61:d8:fe:cd:2e:be:41:b4:
37:a2:13:6a:2c:b8:38:90:4e:07:49:f6:39:08:9c:
23:31:ae:9d:70:34:8f:2e:6c:7d:70:8d:e4:b7:81:
36:ed:4a:21:52:6c:a8:fb:ce:9d:6b:48:30:fb:97:
4d:80:b3:c2:37:24:cc:27:f3:b7:b1:03:c5:3e:df:
8d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:77:51:1A:30:DD:D6:F9:C0:BD:17:E2:0F:B8:49:A8:C9:92:1D:1C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c2cd4ddf-9a38-425a-8021-c45ed96c50ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:35:9f:74:71:f8:a1:df:1b:04:ad:9d:fa:ee:75:9d:55:59:
5a:f0:51:23:2e:dd:2e:1f:97:7f:81:1e:24:92:41:20:01:73:
01:5d:2a:54:94:7e:b6:8c:3f:4d:38:46:ca:cb:b5:b7:58:3e:
66:75:12:70:83:f8:39:0c:6e:6b:1d:65:0c:06:57:77:f0:39:
c4:ad:ec:2c:08:1a:9e:d2:d4:29:92:bb:cc:9b:23:4b:f6:f8:
b3:97:57:e7:2c:a0:78:69:85:79:94:0a:32:83:ae:0a:3e:ee:
68:79:37:2d:91:ac:b4:86:2a:3a:b5:31:0d:79:c0:ad:c2:2a:
15:5a:ee:a1:90:f3:37:04:4b:77:05:6c:bb:1c:09:7a:54:27:
3c:78:c3:af:52:de:8d:f9:67:0b:68:f9:e4:13:6b:1c:04:fa:
59:81:21:03:5d:23:7f:ae:24:81:42:a3:9d:9d:b2:d2:32:15:
9f:d6:1d:98:e7:91:e4:50:61:fe:ac:c1:1c:15:ba:a9:fa:5c:
3b:dd:e7:32:b1:da:f6:bf:10:27:16:14:b6:9a:d8:9d:13:0e:
c0:83:9a:4f:43:d1:73:66:a2:a1:1b:51:87:03:0b:94:54:91:
8b:f7:10:15:94:a8:fe:cc:11:91:4e:d3:ca:2d:46:08:4d:a4:
08:f1:d8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:42:24 2025 by rpki-client