Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8a7076-0c78-4aa6-9c1e-dfeb947189f4.roa
File: 1a8a7076-0c78-4aa6-9c1e-dfeb947189f4.roa (raw, json)
Hash identifier: ijaqvMYaePkxf1TShaiRudjVmnNGfFPoF2C0CLjuYSI=
Subject key identifier: 9A:0E:73:12:5C:BD:28:12:9F:17:DF:64:1A:72:27:2F:BD:FD:FA:A0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7168A5F7920199E9117D1208A207BF1A358D26EA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8a7076-0c78-4aa6-9c1e-dfeb947189f4.roa
Signing time: Mon 12 May 2025 16:10:04 +0000
ROA not before: Mon 12 May 2025 16:10:04 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:68:a5:f7:92:01:99:e9:11:7d:12:08:a2:07:bf:1a:35:8d:26:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 12 16:10:04 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=fc7465b3c7afac09bc29d232fdd686163a3d1e6e9f5a396a23eb8778c8d96f86, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:a2:c8:59:90:76:87:c0:4a:30:67:25:a6:
e6:0a:b2:6f:7a:a5:fd:af:66:f5:36:be:ee:2a:32:
2a:aa:02:ee:de:b3:be:2b:15:e0:ad:bb:47:00:ed:
75:11:87:5a:2b:d0:94:91:bd:1e:87:17:17:10:2f:
77:a0:64:bc:e9:e3:5f:f6:d6:53:1d:73:29:77:e4:
dc:7d:3f:83:23:5c:fa:11:91:84:a7:c1:79:53:c5:
bc:c6:51:80:c2:b3:06:1f:89:5f:c8:15:33:35:38:
4d:0b:9e:f2:b4:c3:12:e0:c0:dc:37:c5:a9:87:ad:
59:c6:9d:3f:5e:6d:0c:d5:cb:60:de:25:ae:8c:d9:
48:97:74:93:db:93:40:e9:49:10:53:d3:f8:04:e7:
ae:75:e5:94:fb:e1:58:aa:b0:b8:76:dc:9a:06:81:
6f:c4:46:72:bf:0c:4f:37:3a:d0:00:df:ee:a4:0b:
f2:01:10:a0:97:ad:a1:3d:30:a9:1c:8f:5e:2c:7f:
85:8d:b4:df:2f:cc:60:da:19:a6:fa:4b:57:c1:22:
91:c2:a0:2d:b2:60:90:ae:65:a8:50:af:ac:75:c2:
62:ae:ac:d0:9b:72:82:8d:bb:88:99:67:ab:d7:9d:
31:d0:0d:49:47:fe:08:f6:d3:c0:a3:7f:0a:6d:43:
6f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0E:73:12:5C:BD:28:12:9F:17:DF:64:1A:72:27:2F:BD:FD:FA:A0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8a7076-0c78-4aa6-9c1e-dfeb947189f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.124.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:e8:20:53:ae:a9:a3:e4:5b:f5:da:3e:04:72:8f:e4:62:a5:
3f:ec:44:4f:7b:a1:e2:d8:2d:98:81:63:d2:51:29:f0:51:60:
8c:69:70:39:31:bc:7d:59:87:59:c3:b6:98:9c:f5:8f:1f:24:
f0:af:50:6f:20:9b:87:e0:a8:7a:31:80:e3:aa:b8:18:f6:32:
35:bd:e6:50:1a:24:93:9e:99:76:d0:9b:73:00:7c:b0:69:e1:
e0:7c:07:2b:bb:0e:e6:9b:9a:f5:ca:c7:93:2a:ce:9c:a8:c6:
63:0e:3a:f1:59:f4:a4:f4:35:6a:8e:29:d4:e3:b8:82:88:ad:
a3:46:2b:ce:ca:18:27:88:dd:eb:27:35:76:a7:ef:27:c2:34:
af:83:2f:16:d7:09:51:ca:d9:ad:8d:5f:17:c5:40:2f:d1:73:
72:04:d7:01:cd:fc:88:9b:da:5f:80:8f:65:1f:58:75:1c:eb:
7a:47:30:3d:e5:5a:8f:55:6c:06:a5:6d:fa:01:07:31:4d:89:
f3:da:77:a9:ea:45:eb:82:ba:e7:35:bb:21:fa:bf:44:76:f8:
f0:95:c4:22:d9:14:d2:1c:87:ef:ca:c6:09:87:e8:2c:cd:60:
a2:06:93:d4:d6:82:77:33:6e:7d:76:36:53:b5:68:59:ff:e0:
95:f8:2a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:25:32 2025 by rpki-client