Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e236a15-c957-4409-8a2a-3a19150d1b43.roa
File: 6e236a15-c957-4409-8a2a-3a19150d1b43.roa (raw, json)
Hash identifier: wtWvjeKd9/oNxZsxgcPffX2fu5VINhFmmT8A2ajGPPY=
Subject key identifier: 5F:A9:DB:6C:1C:07:63:6C:20:2A:C5:C2:1B:8F:28:C1:81:C7:DF:09
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 32BF0804111F1DBDA565CC0660D54258C5F940D7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e236a15-c957-4409-8a2a-3a19150d1b43.roa
Signing time: Mon 12 May 2025 16:11:01 +0000
ROA not before: Mon 12 May 2025 16:11:01 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d030:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:bf:08:04:11:1f:1d:bd:a5:65:cc:06:60:d5:42:58:c5:f9:40:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 12 16:11:01 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=1ebb479e1c49c4d7943205050d376448d466442d43e51aadf4e593c29d152634, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3a:5e:cf:67:fd:3c:4f:a2:e0:d3:5b:4c:87:
46:f3:07:1c:93:1d:18:48:01:96:6b:94:36:3f:70:
e5:01:b6:1e:f4:7d:66:27:55:d8:05:86:b4:f8:9e:
2b:38:10:a4:e1:bb:fe:54:3e:fe:40:65:a9:9d:e2:
2c:30:bf:5f:53:b5:76:c3:ea:79:ac:65:63:4d:ba:
8a:3b:78:56:11:d2:b3:a4:85:16:18:91:b4:b3:3b:
35:55:86:57:98:ed:2a:17:1a:49:9a:15:7b:ab:c9:
7d:a2:69:dd:4d:2a:30:65:d1:54:f8:54:a2:0f:f8:
70:b8:60:7a:c1:88:16:52:db:62:68:1c:66:85:92:
5f:7d:83:28:c8:65:bf:ab:06:9c:c1:32:87:c7:96:
dd:9f:88:0a:ba:f5:b7:90:85:0e:3c:57:4b:2e:74:
ac:91:12:15:60:a0:60:ce:d3:16:c2:8f:0a:ec:e0:
2f:58:fb:51:95:e3:6a:b3:da:35:82:d2:87:34:c3:
7c:d8:39:44:16:8b:33:70:1f:89:09:94:ec:5c:41:
b2:1f:3b:ee:91:3e:c0:81:2f:af:76:98:5f:44:d2:
fc:c7:47:12:78:19:c8:3a:7c:4a:2b:2f:18:ec:1a:
bb:21:2f:07:dd:97:b2:79:a0:c2:1b:14:da:6a:fb:
f9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A9:DB:6C:1C:07:63:6C:20:2A:C5:C2:1B:8F:28:C1:81:C7:DF:09
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e236a15-c957-4409-8a2a-3a19150d1b43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:9000::/40
Signature Algorithm: sha256WithRSAEncryption
8a:5e:b6:de:9f:99:75:2f:96:27:d3:e0:d4:8e:3b:e8:74:b6:
70:bb:bd:d8:75:4c:df:3c:4a:c1:50:a8:92:93:4a:a3:80:97:
19:6f:de:b8:04:ce:7c:26:9d:f4:05:66:cd:1c:14:26:a7:8c:
a4:b6:96:d2:94:69:5d:c4:6b:ed:19:cd:e8:87:f3:a4:0e:d7:
28:ea:b7:40:f8:b7:6a:a7:23:eb:95:1d:5a:ce:58:5e:a8:84:
4d:35:32:26:7b:c5:27:eb:0e:ad:d5:6a:35:91:92:86:df:7e:
b1:60:59:c3:a7:c0:b4:30:b8:93:7d:ad:23:7c:c9:3b:bf:af:
2e:1b:21:9a:20:23:c8:23:65:80:50:6c:f9:02:26:c6:ca:dd:
20:c1:67:ea:e3:c7:14:79:0e:34:a6:5d:20:0f:95:43:e9:3f:
3f:fb:43:e5:c1:a1:81:21:5b:33:5f:1d:67:7b:b8:17:ba:75:
e5:ea:94:2c:cf:c3:d4:79:74:18:18:38:a9:f0:df:aa:1f:63:
a2:1f:c0:b1:8f:6a:c6:60:e4:6c:65:61:be:0c:82:31:a8:55:
89:a3:46:f5:da:3b:39:6c:24:80:f1:a8:55:51:f6:77:de:f1:
4b:c0:20:a8:48:77:30:25:a7:17:b2:e1:d9:bb:95:11:64:5d:
f3:7e:7c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:26:08 2025 by rpki-client