Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/513c0075-edb1-461e-a07d-4eb5874bd9ce.roa
File: 513c0075-edb1-461e-a07d-4eb5874bd9ce.roa (raw, json)
Hash identifier: 9KvVZbfGkruSACA/DK1FmuT8mBIrXkd7Lmt7Z7vB8sU=
Subject key identifier: 6D:98:DD:DA:99:17:AF:DC:F6:80:5A:1F:45:82:8D:8B:73:AC:2E:C0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 33405363F4CB340063AE1E9BA901C15877337C3A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/513c0075-edb1-461e-a07d-4eb5874bd9ce.roa
Signing time: Mon 12 May 2025 16:11:26 +0000
ROA not before: Mon 12 May 2025 16:11:26 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:40:53:63:f4:cb:34:00:63:ae:1e:9b:a9:01:c1:58:77:33:7c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 12 16:11:26 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=8fcc79596f21674c9ab9a7e7b45784d35e94046fd04f5553d87639639f39ad97, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7b:50:ff:7c:25:97:39:28:78:95:e8:17:c8:
39:53:02:95:15:dd:84:79:2f:5a:c9:1c:4d:b0:9c:
8f:1a:13:ea:78:43:57:f1:e2:a9:ec:47:f8:38:53:
2d:da:9e:d0:de:ee:5c:17:c0:84:87:60:a1:aa:2f:
4c:67:9c:28:5c:2f:17:e6:94:4e:97:69:97:49:bf:
18:d6:b7:e6:4a:21:d3:c3:84:bb:fe:83:8a:e8:a6:
82:f1:63:44:8d:c9:e3:27:30:13:a9:67:b7:bd:6a:
d6:3f:02:49:9a:35:d9:49:5e:ee:29:ea:c5:c4:c0:
14:ca:a5:d9:04:26:e7:6a:fa:69:5a:ea:19:12:e9:
0d:e2:2a:3a:b4:b8:3b:0a:85:f6:de:5d:91:be:d6:
de:75:51:d9:38:bd:35:f0:a4:1e:e8:52:60:31:6e:
42:19:03:24:1f:fa:be:98:88:10:fd:21:7a:69:5f:
32:95:e9:07:93:b1:e8:3b:6c:d2:96:44:20:c4:2e:
eb:fb:f6:4b:33:50:79:10:d1:8d:e2:15:94:49:46:
29:37:f6:2c:a0:a6:58:e5:1b:10:23:68:5f:ea:c6:
3f:51:99:c3:b9:24:ae:c9:dd:6d:3d:18:08:de:1e:
9f:dc:5a:e8:ec:91:9c:ce:2d:2e:fe:23:91:c2:18:
1e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:98:DD:DA:99:17:AF:DC:F6:80:5A:1F:45:82:8D:8B:73:AC:2E:C0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/513c0075-edb1-461e-a07d-4eb5874bd9ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.160.0/20
Signature Algorithm: sha256WithRSAEncryption
b2:bd:91:ac:10:7a:4d:54:da:33:bc:9c:28:bf:04:f2:49:a7:
28:22:16:94:a9:79:56:1c:26:11:77:9e:7e:21:3f:f0:47:47:
ee:d7:59:f0:3f:d9:cf:8d:a0:3f:0c:e5:33:1e:4f:61:2c:b0:
89:3e:30:c9:fb:47:16:f2:d5:5d:24:dc:37:65:d2:a6:29:12:
a5:a3:fa:89:ab:b1:9e:08:5e:ee:30:e0:e0:83:e4:4e:fe:2b:
55:b2:9c:f9:70:c9:a8:bd:42:1b:7f:ba:c5:0f:4d:4f:c1:95:
44:a6:aa:fa:a2:e6:c2:a0:57:72:0c:e8:4a:7b:74:1b:cf:79:
bd:34:05:e0:22:bf:bf:fd:5d:3b:7d:33:62:61:3f:2b:c9:74:
e7:f2:26:23:48:74:33:92:59:17:b3:77:81:cf:67:47:e0:0b:
66:e9:5e:cb:56:76:39:31:04:42:6b:3f:4e:f3:7d:22:1f:59:
e2:f5:1f:e1:d1:f4:ea:9c:07:80:30:40:ed:e1:e8:1d:67:b7:
e9:72:53:eb:9c:11:98:91:44:43:7e:c3:a2:9b:8f:63:8a:f2:
89:45:c4:fb:1d:48:d3:5f:ec:dc:71:fb:94:ff:c5:f8:b9:47:
e6:52:bb:11:ba:9d:a1:c8:f5:8b:9e:5d:e5:15:33:cf:90:da:
b0:cc:7a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:26:18 2025 by rpki-client