Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a023ba7-6dbe-46ac-bc6f-621ed6946b6e.roa
File: 5a023ba7-6dbe-46ac-bc6f-621ed6946b6e.roa (raw, json)
Hash identifier: i78vazUqC6YHC/vfuZaIU0Mw0nfBZXVe6iS4wGag624=
Subject key identifier: 2F:B8:7D:E7:0E:2B:1D:E4:F4:2E:2C:BC:A5:40:54:8F:B0:A6:67:52
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6D139A0CD6099EE9DAAC709A426325BB9367C2C6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a023ba7-6dbe-46ac-bc6f-621ed6946b6e.roa
Signing time: Fri 16 May 2025 17:30:26 +0000
ROA not before: Fri 16 May 2025 17:30:26 +0000
ROA not after: Fri 20 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:13:9a:0c:d6:09:9e:e9:da:ac:70:9a:42:63:25:bb:93:67:c2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 16 17:30:26 2025 GMT
Not After : Jun 20 23:59:59 2025 GMT
Subject: serialNumber=6667a8e515eb64d4e0d0798456b4e4fdfab8d8adde2b3877e85c92509532016b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f7:a1:de:a6:9d:93:d8:0e:59:1a:a9:50:fb:
00:9c:c8:ea:bd:e2:04:ea:4f:85:ca:e4:4b:3a:75:
1d:b9:62:43:7a:7b:85:64:36:d5:03:08:9b:ad:64:
aa:f8:a3:26:f9:6b:49:bf:8a:5c:a1:fe:3e:73:d1:
90:a4:c1:be:9b:d6:54:e9:82:36:d7:06:4a:f8:8d:
82:1c:5e:15:7d:11:ad:01:d5:69:7b:69:d2:41:85:
d3:fc:b7:b1:d5:7d:fb:1f:5f:26:d4:37:59:97:9b:
5c:e8:39:23:97:1b:ae:28:12:71:d7:52:db:20:63:
b6:17:b0:19:bd:5a:8d:fb:a7:9e:b7:78:8e:93:cc:
60:30:41:1e:44:8b:ab:d6:81:f6:b3:ad:41:09:8b:
22:a6:e8:b5:07:8d:65:61:a9:a6:ec:fe:4e:03:f6:
10:a4:b3:2a:e8:1c:93:84:7a:01:09:3f:f3:0f:b2:
fb:de:2d:64:2f:a8:50:50:e2:0c:2d:81:9e:7b:4a:
2d:a2:8d:7d:c4:0a:35:97:30:c2:e2:ce:a0:30:dc:
0d:6b:44:d4:20:8b:9e:79:b5:3e:9c:75:08:86:38:
a5:8d:0c:e0:5f:ca:68:99:c6:cd:53:82:29:30:20:
32:cb:fd:3b:10:d3:ca:fd:96:a8:05:2c:3b:eb:69:
ac:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B8:7D:E7:0E:2B:1D:E4:F4:2E:2C:BC:A5:40:54:8F:B0:A6:67:52
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a023ba7-6dbe-46ac-bc6f-621ed6946b6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
89:f3:29:2c:51:d7:6e:87:c5:ad:af:1b:5e:57:8c:e2:e9:e0:
60:99:f5:ed:89:ff:44:b4:3d:31:70:7a:47:eb:7a:05:97:d5:
47:0a:f9:7b:d2:5a:93:f8:ff:7a:26:c6:99:16:b9:2c:c3:f7:
0b:3d:04:4c:50:6e:93:af:e4:d7:b5:e7:63:96:32:cc:5c:5b:
5d:7d:a2:9e:ce:a8:ef:ea:8b:ba:25:7c:66:84:40:bb:33:50:
a2:b6:89:a8:6e:b8:01:d2:ff:32:35:78:4e:5a:95:a4:35:83:
4f:e9:6d:54:19:5a:f7:7d:51:0c:e2:77:07:89:7d:c6:3a:ee:
96:6a:6e:48:2b:62:00:1f:1b:86:04:7e:f2:45:45:ea:db:2e:
b2:64:77:1d:7e:d8:93:c2:e1:fb:1e:a8:f8:2f:60:9d:9c:6d:
84:d6:1c:1c:02:d9:68:23:4a:31:7c:cd:bb:8c:a4:ae:0d:fb:
da:9b:02:84:36:d5:ce:f5:da:45:bf:f4:d7:10:d6:8c:f5:fd:
53:ef:4f:bc:4a:9b:45:e8:0b:96:c7:1b:78:28:56:d9:78:40:
87:9e:07:05:cc:42:b1:53:49:e8:7a:0b:2f:38:33:a7:42:7d:
22:3c:99:14:4b:09:71:8c:78:c4:69:77:df:25:3f:b4:a0:f1:
bb:31:8e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:26:47 2025 by rpki-client