Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/113e55fd-9531-4700-bcdc-5abe9a806b41.roa
File: 113e55fd-9531-4700-bcdc-5abe9a806b41.roa (raw, json)
Hash identifier: mH8vCr2NNAfywzc2Tow3NK+6PBoLTYm8fsOxWf4notA=
Subject key identifier: D7:10:20:DE:43:D7:2D:65:8D:1A:90:7D:07:65:AC:57:C2:C8:D8:FC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6AFD2B335A02C0BEEA6853098F3F7C29FB176621
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/113e55fd-9531-4700-bcdc-5abe9a806b41.roa
Signing time: Fri 16 May 2025 17:40:11 +0000
ROA not before: Fri 16 May 2025 17:40:11 +0000
ROA not after: Fri 20 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:fd:2b:33:5a:02:c0:be:ea:68:53:09:8f:3f:7c:29:fb:17:66:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 16 17:40:11 2025 GMT
Not After : Jun 20 23:59:59 2025 GMT
Subject: serialNumber=74ce086c99f8b3f306e88b8bc7dd9785731f9a9c400d48cf49124c10e6865057, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:77:fb:70:9f:33:c2:31:11:38:91:d8:38:42:
e1:ea:ae:93:18:6a:67:71:3b:01:10:45:7b:84:35:
e4:f6:2c:28:93:78:9a:1f:16:a4:4e:da:3f:be:c8:
d2:90:a3:47:2d:f1:74:ad:fa:ba:64:e6:78:07:e8:
c1:5a:2c:d9:4d:6f:82:29:57:b6:7f:f2:a5:c2:99:
cb:7a:16:38:da:3f:e4:db:37:32:a3:cf:e0:76:49:
12:bd:10:76:41:d7:c0:f9:c4:c7:b7:8c:60:a1:86:
74:38:0a:35:d8:cf:c9:2e:ca:9d:bd:6e:31:e6:25:
d8:49:58:5b:df:66:fa:da:d8:3e:44:24:8e:a3:3d:
42:43:7a:bd:a0:2b:89:52:7f:9b:b8:60:40:44:91:
9e:28:2b:6b:13:3d:42:79:7a:1d:c9:bf:f9:e2:82:
8c:d4:ab:6a:83:81:2f:31:f6:52:19:7d:99:43:45:
7a:f4:cf:e6:28:2c:07:a0:b0:cf:3c:5d:58:af:1b:
d4:2b:0f:a1:3a:02:87:dd:1d:ac:60:ed:e3:f8:48:
a9:a7:55:5f:2a:18:e4:11:94:51:3f:09:70:04:a4:
fd:23:f3:07:1e:d9:3b:a3:87:1b:e6:7f:d9:41:2e:
b7:a4:64:89:b0:4a:51:d9:23:d9:a1:4b:ce:f9:ef:
43:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:10:20:DE:43:D7:2D:65:8D:1A:90:7D:07:65:AC:57:C2:C8:D8:FC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/113e55fd-9531-4700-bcdc-5abe9a806b41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:800::/40
Signature Algorithm: sha256WithRSAEncryption
15:bd:3b:10:2f:ef:44:14:63:03:0f:c0:06:f9:a4:62:e0:4c:
61:ea:cf:fd:fa:83:4b:50:18:69:80:50:0d:2c:55:46:c0:8c:
d0:1e:b5:06:86:49:fe:0b:70:c9:e3:78:61:bb:bd:49:9e:04:
20:0f:a8:a6:5f:82:17:8e:b9:35:b5:74:38:c9:a9:ab:fc:c9:
1e:2d:34:de:c3:63:d2:0d:1b:5b:a2:db:66:84:75:d4:41:01:
f0:81:71:df:19:7c:93:ff:52:55:0d:6f:fa:a2:ef:de:ec:09:
c7:ae:24:2b:8b:d4:a5:4d:a5:13:0c:74:af:13:b7:b4:20:0b:
08:22:9f:bb:d3:21:27:79:85:33:6f:c2:b3:55:ef:cc:cd:ed:
b4:75:cb:35:97:b7:0d:f5:9d:16:b5:ee:7c:c2:e3:ce:8b:90:
4a:ad:2a:c1:47:d1:a2:ed:39:53:59:ee:10:3c:16:19:3f:54:
a0:5e:38:51:fb:43:37:66:fd:b8:31:6d:0d:56:5a:54:93:3d:
ce:0a:e4:56:7c:dc:54:9d:3c:bb:96:a1:13:f8:d6:7f:6a:18:
6e:84:42:f3:7b:32:04:bc:5d:2a:98:86:08:41:80:53:1d:3f:
82:72:21:96:25:40:1e:d5:04:6b:57:e1:39:d3:ea:e1:0a:88:
95:44:d1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:29:17 2025 by rpki-client