Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76526233-4062-463b-bfd0-bbe1d12891fa.roa
File: 76526233-4062-463b-bfd0-bbe1d12891fa.roa (raw, json)
Hash identifier: jJHgw5MKZ/iGwoO3Tk1AZZld0vLKTibmxONA2oP0yBo=
Subject key identifier: D5:68:63:66:E7:18:A7:65:23:DC:E4:3E:6E:E7:95:48:53:0A:12:73
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6203F4121F366133AF04CA01724557867BBB7325
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76526233-4062-463b-bfd0-bbe1d12891fa.roa
Signing time: Tue 13 May 2025 18:30:29 +0000
ROA not before: Tue 13 May 2025 18:30:29 +0000
ROA not after: Tue 17 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:4010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:03:f4:12:1f:36:61:33:af:04:ca:01:72:45:57:86:7b:bb:73:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 13 18:30:29 2025 GMT
Not After : Jun 17 23:59:59 2025 GMT
Subject: serialNumber=952182072f887bb0f39cdbdaf562307d4d711ea1c221fd27aac4865879bb7eff, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ab:c0:d2:db:1c:52:6e:5e:4e:62:a7:2c:f4:
00:4c:15:83:2b:86:cc:46:11:37:74:13:c9:cb:ee:
40:4e:5c:c5:0e:58:60:19:3d:3e:9c:7e:b2:83:b7:
a5:96:dd:18:20:aa:17:a2:3e:53:51:91:49:fa:94:
e2:11:88:e2:41:f1:f7:08:ae:12:d8:42:47:c8:f0:
0f:92:5e:89:77:db:55:b8:90:a9:50:4a:fa:75:9f:
ba:44:13:14:42:a8:15:52:07:46:7e:43:da:a4:a6:
c9:9f:90:ee:95:53:4c:81:e7:31:fb:b2:5a:ac:62:
69:03:5a:6b:f2:c7:5e:00:26:87:4c:c2:58:f8:44:
6b:c6:10:29:7b:cf:f2:95:3d:25:13:e8:73:b2:fb:
9b:6b:5b:a8:2d:5f:50:da:df:1f:51:24:7a:48:62:
b0:b2:fc:0a:d1:38:39:7c:31:8c:41:db:db:4d:2c:
f8:e4:63:2e:3b:b0:97:18:28:2f:69:78:57:9b:29:
87:8c:92:af:30:f9:20:00:1f:92:ec:dd:be:bb:7f:
ea:ad:6b:21:86:81:ec:0c:5e:46:3e:25:f5:1e:2e:
11:e3:b1:70:5e:cf:30:33:d3:af:46:3a:79:67:52:
bd:9e:ae:24:0b:4a:d8:f9:24:af:f2:58:8a:65:4a:
94:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:68:63:66:E7:18:A7:65:23:DC:E4:3E:6E:E7:95:48:53:0A:12:73
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76526233-4062-463b-bfd0-bbe1d12891fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:4010::/48
Signature Algorithm: sha256WithRSAEncryption
04:4b:79:b7:5c:dc:d2:fa:ed:b2:e2:c5:a1:98:07:3b:dd:7a:
a8:14:7b:b9:4d:0e:dd:83:fa:57:df:f4:a5:bb:d1:ad:23:2b:
e9:49:56:06:6b:2a:87:b4:68:cb:fe:0d:7f:5e:a4:66:e6:85:
97:51:4a:18:06:da:68:fc:fb:97:0b:8f:14:ab:8a:eb:29:17:
3a:65:ab:3e:95:be:2d:67:98:36:d4:c5:73:7f:3c:63:0e:db:
86:be:4b:7f:52:c5:5c:60:14:5e:93:dd:e4:ff:2a:7b:17:5f:
49:36:54:83:05:96:2a:70:a6:8b:ae:30:aa:84:e8:f0:1e:d5:
87:5a:24:58:87:80:69:4d:ad:ff:61:6d:e2:44:14:28:c3:56:
ca:ed:6f:17:cb:b8:85:a3:a1:16:1a:95:c6:44:c2:a5:4c:22:
92:bd:7f:1c:a8:8b:fe:66:e2:a9:d0:4d:f7:c2:0b:36:f1:a9:
ac:6d:c1:2f:3f:44:76:50:05:01:5a:12:57:c5:fd:53:96:bd:
16:73:13:b4:d6:48:69:30:e2:c0:4a:d4:56:cf:db:e7:b0:67:
c3:ca:10:fa:85:8e:42:71:41:00:57:41:4b:ef:fd:93:11:24:
3e:e9:21:5e:47:db:91:c6:2b:ab:31:bb:4f:0e:0e:5c:cd:32:
7d:70:b1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:30:59 2025 by rpki-client