Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/40318891-5508-4eb6-bace-e245fbeb145a.roa
File: 40318891-5508-4eb6-bace-e245fbeb145a.roa (raw, json)
Hash identifier: SfepsMCeSq7SI5JcJeE6rILTZfsFY69ZGcPQMPuJHVc=
Subject key identifier: CA:88:E5:9B:1A:F5:A8:5C:F1:89:E1:2B:7B:3C:7C:03:E6:BE:E6:F7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 01C8EF2FE4240860FA404FEB43E482EB5BCDCD37
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/40318891-5508-4eb6-bace-e245fbeb145a.roa
Signing time: Mon 12 May 2025 16:11:28 +0000
ROA not before: Mon 12 May 2025 16:11:28 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c8:ef:2f:e4:24:08:60:fa:40:4f:eb:43:e4:82:eb:5b:cd:cd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 12 16:11:28 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=8af0972ffd2b6ac6d770ce47799804b6e5e37e838547b855153adb475eb055b7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:a1:84:ba:c0:d2:a8:54:c0:b7:9f:3f:56:
a2:2b:18:af:09:4c:6f:e6:8d:3d:bc:da:c3:3b:52:
59:93:55:72:ea:0a:7d:54:ff:db:f0:96:d5:27:60:
79:fb:8f:0b:8b:d5:b9:1a:a9:08:52:c0:11:1b:84:
62:5d:3b:94:60:70:87:43:a7:3f:ce:7d:04:b9:95:
33:2d:52:1b:95:f8:9e:ba:57:29:f9:6c:6d:53:f0:
de:9e:ff:71:8c:b7:6c:a8:d1:95:fc:8a:61:ad:22:
4b:38:64:30:a6:76:a3:60:bc:45:43:c7:13:e6:f4:
d2:9a:2d:23:ed:35:14:25:51:10:94:e1:f8:9c:b9:
45:1f:35:26:9c:47:93:74:9b:e9:87:26:9b:23:6e:
80:c8:46:0f:a0:7c:f2:64:b3:37:ee:47:87:03:71:
95:1e:61:5c:d5:b7:3a:b7:a3:7c:60:2d:88:99:bd:
8c:03:b9:8f:dd:fe:a8:2b:2c:1a:86:c8:26:fe:44:
d6:07:a9:6f:72:7a:02:25:72:d2:b7:a4:98:df:93:
ef:87:0e:71:02:7d:d5:71:33:b4:b5:fc:04:4d:a7:
85:d6:04:15:13:fc:8f:ae:f2:8f:ee:1c:15:9a:0a:
ad:77:71:86:03:06:e7:1c:04:9b:d1:9a:99:ef:10:
27:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:88:E5:9B:1A:F5:A8:5C:F1:89:E1:2B:7B:3C:7C:03:E6:BE:E6:F7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/40318891-5508-4eb6-bace-e245fbeb145a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.160.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:d5:07:15:44:c6:c6:7e:46:21:b9:80:aa:7e:9e:24:02:9d:
f6:f5:9e:c1:fd:56:0e:a0:9b:90:9b:64:f0:41:e3:73:a1:8a:
0e:8e:25:5a:2e:dd:30:27:74:75:cf:e8:90:a4:e2:cf:9b:77:
9b:ef:30:3a:10:2a:e9:0d:05:fa:5d:f4:a9:78:a3:6f:16:12:
8f:c1:36:3a:1c:a5:c3:95:5e:23:0c:aa:db:37:aa:e4:3b:cf:
8f:50:c8:fd:95:30:ae:09:14:8d:68:06:cf:29:68:8d:3d:b5:
0e:b8:d2:06:d4:11:e8:6f:09:e9:49:f2:79:ff:4d:cf:f4:bc:
15:3b:12:25:40:cb:1e:76:80:d8:df:2f:fe:30:67:fd:61:27:
8a:fb:ad:c5:79:4a:be:9b:3e:6c:95:11:1a:0e:37:0e:39:3f:
fc:7c:e6:8c:fb:fc:70:2d:93:c0:e7:d5:12:ef:91:1d:20:56:
99:d9:ba:53:d9:49:4c:0b:bd:4a:e5:18:81:8e:e3:ab:17:09:
de:53:17:0b:a1:3d:cf:f3:4e:71:e5:34:bb:a5:d6:c4:78:63:
6f:57:92:25:72:29:3a:29:46:2d:6d:78:d7:c2:fc:28:5b:2d:
4c:91:1d:92:16:64:ac:63:c7:42:7d:68:88:40:f3:dd:65:13:
cc:c5:df:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:29:14 2025 by rpki-client