Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53380a08-b071-4729-9c41-f9a83d36f4c0.roa
File: 53380a08-b071-4729-9c41-f9a83d36f4c0.roa (raw, json)
Hash identifier: FYEUMjZ59zFf/2w03FMDg4yq6cNaH60yRWbpY7NFFWA=
Subject key identifier: 2B:2A:F4:8C:1B:0A:B0:AC:43:A2:48:69:87:09:C2:DC:50:4D:51:D0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3C92DFC1668A86AE04EC5735143D7835C1847C88
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53380a08-b071-4729-9c41-f9a83d36f4c0.roa
Signing time: Mon 12 May 2025 16:10:07 +0000
ROA not before: Mon 12 May 2025 16:10:07 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:92:df:c1:66:8a:86:ae:04:ec:57:35:14:3d:78:35:c1:84:7c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 12 16:10:07 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=fccdf85117a49bf87b1634cf77c5bedb7e310e0d0e2a53bc652b5af43c142ea4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:69:4e:2f:e4:5a:d5:3c:37:cd:fb:c6:2a:
86:97:4f:b5:f2:4d:5d:5d:55:f1:af:66:2f:0d:97:
b5:44:cc:01:48:e9:fb:f1:c4:eb:5f:2b:ee:11:b0:
1b:a9:00:8b:29:c2:ac:f5:9f:76:de:f4:87:a7:62:
fb:dd:6e:22:d4:68:59:58:d2:58:0f:9f:93:5e:00:
34:3e:f5:31:9f:84:e8:9d:9d:ca:4f:a9:90:f3:0a:
68:b8:d8:df:e7:20:26:80:05:61:bd:57:a2:e0:13:
00:a0:44:9f:7f:2a:60:7a:ec:e0:4e:bc:e4:7a:23:
77:f0:12:71:25:04:f7:9c:e0:af:56:9b:f3:bf:c8:
14:4a:1d:a8:47:eb:11:71:4f:5a:f0:72:aa:da:6e:
fc:c5:07:5a:89:09:49:a9:5c:57:bc:0f:93:0c:77:
3d:8d:19:67:f7:2e:90:ab:6a:f1:61:7d:df:02:47:
b6:fc:ba:b3:c8:01:1c:14:e3:9d:81:1e:9d:fa:74:
29:86:b9:e9:57:27:42:cd:80:b6:bf:32:2b:50:b7:
fc:f9:79:f1:9c:43:aa:08:4b:a2:48:be:b5:cb:76:
cc:d1:49:68:e7:39:13:2f:31:b6:ff:85:d4:5e:0f:
19:74:f0:6a:84:ac:a8:43:6a:10:b8:29:84:fc:03:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2A:F4:8C:1B:0A:B0:AC:43:A2:48:69:87:09:C2:DC:50:4D:51:D0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53380a08-b071-4729-9c41-f9a83d36f4c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.80.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:03:13:dd:38:6d:7d:90:30:e3:26:69:80:93:b6:06:c9:03:
ec:26:cd:fc:a2:e6:34:9e:d1:60:82:3d:28:db:1c:ce:1f:1d:
1e:4f:41:46:c0:bb:ce:26:50:c1:67:12:7b:f3:a7:64:2f:29:
79:e1:37:28:c3:11:8f:85:e9:d9:6f:94:47:15:45:64:32:a6:
59:d9:6f:eb:63:74:77:ae:ad:83:3a:b5:73:48:fa:90:f5:e5:
1b:4f:e1:fb:32:40:68:47:79:40:4a:1f:b5:b8:3d:09:fd:d2:
7f:8a:9e:a6:11:ba:5e:5a:c1:5f:27:5a:27:29:24:b5:00:88:
d4:2f:f9:25:eb:c8:65:15:e1:ce:cc:e2:b7:7c:52:fd:fd:c9:
57:25:e5:3f:af:75:7a:03:ed:8d:d3:0f:54:ca:60:b5:14:11:
5a:b7:40:80:ab:f4:21:b5:0d:8b:32:dc:18:9c:d3:0d:60:54:
61:d7:e0:ad:c2:0c:50:19:0d:1f:70:68:58:66:64:d4:2e:40:
d2:32:5d:78:c1:6d:7b:d5:9b:4d:fa:70:c0:29:ea:2c:f4:e1:
08:14:45:09:82:f9:7e:ff:6f:cb:81:cf:b1:7a:96:27:6c:b7:
e7:71:86:81:e8:12:79:b7:e8:8a:74:2d:d9:6a:06:98:e9:44:
20:2e:39:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:26:51 2025 by rpki-client