Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e91376d-8b45-49e6-bf21-9f8e5d21208b.roa
File: 4e91376d-8b45-49e6-bf21-9f8e5d21208b.roa (raw, json)
Hash identifier: OxMt3/+3lTWqmLVcrhbKRIhc8LTWcpa27sfYA6fj8uc=
Subject key identifier: 63:F2:6A:07:CA:02:F0:64:24:4A:E3:E8:EF:3E:BE:84:80:64:BB:00
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 760FA1B77AF35DE8BA45BF1362DDEC00FE32C618
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e91376d-8b45-49e6-bf21-9f8e5d21208b.roa
Signing time: Mon 12 May 2025 16:21:11 +0000
ROA not before: Mon 12 May 2025 16:21:11 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:0f:a1:b7:7a:f3:5d:e8:ba:45:bf:13:62:dd:ec:00:fe:32:c6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 12 16:21:11 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=64c132c9b1f2c8fe52f65b975095c4080878c04f75382a062d79e1f1f91ced84, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:cf:68:2d:02:25:6f:19:ad:04:f1:ed:8e:
31:20:65:95:56:3f:73:a4:6a:80:52:f4:c8:a0:27:
40:94:ad:33:18:00:dd:3e:b1:81:c8:48:bd:f6:26:
2d:80:8e:ac:5e:f5:24:67:6a:ea:8d:e7:84:0a:00:
ba:07:a7:f8:c9:00:51:8f:66:70:37:23:7c:87:97:
31:79:b3:d1:37:12:83:39:51:52:65:e3:01:e8:8d:
14:18:3b:ef:db:4c:4d:91:fd:cc:a5:ea:85:16:5d:
c7:f8:a7:0d:f9:1e:29:4e:76:80:b1:60:c0:91:62:
df:45:79:e0:0a:82:f9:0b:0b:b2:9a:86:9a:f2:f7:
5c:9f:ee:e0:71:76:a0:8d:0b:b5:e8:70:2c:70:8b:
e9:d4:ea:d8:59:aa:9a:9f:94:c2:3d:3e:a0:7b:8f:
b4:7e:16:39:ea:ea:b8:d1:f1:15:8c:04:9d:43:6d:
e5:39:15:e9:6f:70:fd:fa:ce:ff:eb:28:9f:08:73:
df:30:f8:aa:27:2d:fb:94:98:bc:30:ba:e9:3b:e7:
0e:5f:ec:8a:27:98:78:a9:4e:49:62:f1:6f:43:c0:
89:ea:6d:e2:29:f3:45:ff:09:23:81:cf:9d:0d:84:
5f:32:44:88:15:8f:33:2d:29:ef:e7:07:fa:d1:6c:
4b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F2:6A:07:CA:02:F0:64:24:4A:E3:E8:EF:3E:BE:84:80:64:BB:00
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e91376d-8b45-49e6-bf21-9f8e5d21208b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:5000::/40
Signature Algorithm: sha256WithRSAEncryption
a6:96:cc:8f:0e:35:86:ef:97:35:5a:9d:f1:03:7e:e1:80:e6:
84:2d:62:ad:6c:62:40:27:95:ee:18:a9:45:a9:4a:fe:32:a6:
c2:fa:89:6a:3f:8a:06:3b:7e:f2:30:c1:bb:24:2a:40:0e:83:
d2:b7:f4:80:49:fa:b7:80:0f:33:37:57:24:b2:c6:f6:5c:e5:
9e:bf:56:d3:db:14:37:d8:2b:58:5e:6e:94:cb:a6:d0:b3:92:
26:06:5a:b7:a0:67:7a:38:bd:29:ae:6b:55:35:e1:92:38:5e:
51:35:7d:99:27:28:c2:ea:ec:64:2c:1c:a5:eb:04:6b:89:14:
0a:73:44:e1:80:cd:91:59:9b:87:ad:a7:c1:a1:19:97:16:37:
7d:e9:8a:f1:3c:8c:fa:53:19:81:62:b0:59:46:a6:c3:77:28:
51:4e:78:9d:d7:ba:a7:59:0b:2a:fb:b3:5e:d2:4a:2a:5a:e2:
f7:84:16:6c:fa:e8:7b:fc:a4:77:97:42:a9:ef:2c:bd:50:1f:
a1:0a:b3:be:10:09:0d:9b:f4:41:60:26:c5:b5:45:64:57:60:
98:96:f1:30:a1:63:7b:d3:0a:44:2f:7e:41:20:20:29:f6:5c:
a4:92:a7:96:a1:de:1a:8d:f2:6b:33:1d:0d:8d:49:34:dd:81:
b4:1c:85:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:26:13 2025 by rpki-client