Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67a91910-a57c-4a04-8d7b-404bcd5fecf2.roa
File: 67a91910-a57c-4a04-8d7b-404bcd5fecf2.roa (raw, json)
Hash identifier: CPsCqkrmXWwnPG3C5w7PfiM0azhXV3+jqCbfuiQgmLg=
Subject key identifier: 65:A9:8A:B5:B3:45:E2:42:2B:EC:D8:E9:FD:96:9A:AA:21:D3:E1:EA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1374F553799C8938EC1E3F5559352DC6EC65121D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67a91910-a57c-4a04-8d7b-404bcd5fecf2.roa
Signing time: Mon 12 May 2025 16:11:04 +0000
ROA not before: Mon 12 May 2025 16:11:04 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:74:f5:53:79:9c:89:38:ec:1e:3f:55:59:35:2d:c6:ec:65:12:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 12 16:11:04 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=f6734c2e0d6c38d4dc7abff558b280d070363af0b9f75932732817c867545b97, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:e6:2d:29:b0:56:c3:ce:38:ea:3b:41:51:
f1:de:9b:26:40:5b:41:ed:cf:1a:6a:3e:26:1c:1e:
0b:3d:6b:c4:06:4d:95:2c:c8:eb:fb:e8:6d:c1:bb:
10:25:d9:3e:ae:bb:ed:b8:0e:d7:6a:9e:61:76:60:
d2:29:49:f1:a0:68:34:dd:26:66:e2:f9:d9:b5:58:
32:17:5c:b5:20:82:3e:b8:b5:3c:6c:d4:2f:0b:5d:
72:83:af:de:e7:5c:a7:e0:71:db:89:2c:f2:06:b8:
a0:c0:f8:20:ce:4f:d1:a9:55:49:ec:20:8e:6c:78:
85:12:9e:13:09:3f:5b:bd:6c:a0:56:1f:e4:c7:0f:
87:e7:4f:ad:5b:3a:4b:a2:96:a5:47:65:8b:0e:65:
88:43:c2:68:39:ea:5d:3e:9e:c0:b2:ea:09:46:a7:
ea:7c:f1:11:7d:ab:c0:7c:b1:30:81:13:21:f2:03:
b9:02:d1:f7:4f:87:81:19:9c:59:29:da:84:75:82:
eb:14:3c:5c:89:d6:b2:92:a1:69:36:8b:a1:7f:71:
86:ae:7c:0d:03:ce:0d:47:ad:aa:25:a4:05:16:be:
4f:63:39:f1:c8:2b:c5:ce:83:9e:7d:09:d6:ff:7a:
e7:7c:47:2d:6b:e8:a6:a5:dd:c4:da:30:5b:5e:13:
99:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A9:8A:B5:B3:45:E2:42:2B:EC:D8:E9:FD:96:9A:AA:21:D3:E1:EA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67a91910-a57c-4a04-8d7b-404bcd5fecf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:6000::/40
Signature Algorithm: sha256WithRSAEncryption
09:ae:c1:07:89:33:85:1b:60:4b:b0:cd:68:24:1e:ac:e2:e9:
58:aa:ca:92:6d:af:dd:5d:d6:d0:0d:d6:b1:c1:bd:a5:23:14:
6b:89:b6:36:02:e0:21:95:2a:91:f2:f8:66:17:1b:ab:88:5d:
8b:82:44:01:0f:e8:f8:67:66:f2:66:a3:87:c1:47:45:32:d0:
3e:07:95:78:e3:92:aa:10:22:12:81:df:7a:00:1f:c9:03:a4:
6b:80:a8:e4:21:8c:af:aa:49:b3:dd:ea:57:36:41:31:24:90:
77:25:09:4d:1a:e6:f0:5d:96:fc:ba:8c:8f:19:d9:b9:e9:8f:
ed:80:00:9a:db:9a:67:ee:e6:24:b2:c4:3d:ac:e7:0f:e3:23:
8d:14:8b:e6:af:f7:3c:bf:7a:f1:f6:16:f3:8c:70:d1:ad:7e:
73:74:81:fd:d4:d6:2c:86:42:9f:ac:fd:26:dd:b1:8f:7a:bf:
51:3f:c2:3d:f1:e4:cd:e8:12:07:06:8f:3e:a0:16:b1:57:22:
44:8f:d2:f4:ce:8b:34:08:8f:5e:a5:71:01:82:e0:48:76:6e:
20:c7:99:cc:c3:c9:a0:f4:6a:ac:c2:cd:65:31:a6:97:12:dd:
a3:f9:6b:13:56:35:ff:cd:50:15:69:c1:ac:b3:ad:3b:8b:5a:
71:19:ef:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:25:35 2025 by rpki-client