Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edf7f775-4d15-46aa-a77e-d8dd11f7f3e2.roa
File: edf7f775-4d15-46aa-a77e-d8dd11f7f3e2.roa (raw, json)
Hash identifier: dI6uaUCyAiylBsFHKMXyh17xwOqyPEDdZd2m69YmFko=
Subject key identifier: 63:00:54:3B:BD:1E:65:51:84:9F:FF:E1:F9:7D:0D:B0:E3:CC:80:FE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2E7B98B5C917D23206D20DB5BBD9C2D8104FEADB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edf7f775-4d15-46aa-a77e-d8dd11f7f3e2.roa
Signing time: Fri 16 May 2025 17:30:14 +0000
ROA not before: Fri 16 May 2025 17:30:14 +0000
ROA not after: Fri 20 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:7b:98:b5:c9:17:d2:32:06:d2:0d:b5:bb:d9:c2:d8:10:4f:ea:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 16 17:30:14 2025 GMT
Not After : Jun 20 23:59:59 2025 GMT
Subject: serialNumber=661c4095e71a9b25cfe848e613ebaf8b84547ed1700a70cd612eb3325836eebe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a6:3d:8c:7a:08:e6:48:b9:5f:3d:50:95:d4:
4a:94:52:48:7e:6c:11:3a:4c:62:de:76:84:6e:3d:
fa:c3:5d:30:41:64:46:33:3e:ad:6a:f3:01:d9:da:
09:ba:77:32:18:10:ca:fd:20:90:98:03:7c:16:72:
85:40:05:80:70:40:00:46:95:cc:2f:7d:51:c6:e8:
48:1d:72:13:4a:a2:4e:63:cb:5c:10:b8:ca:6b:78:
5f:ae:3d:02:82:07:2d:38:aa:65:b5:ff:15:db:15:
77:fe:81:41:cf:51:ad:d4:73:1b:5f:68:25:b7:99:
0f:a0:11:59:c5:18:80:a8:b9:30:c8:46:61:00:6d:
68:3d:86:c5:37:11:1c:10:66:b6:74:0f:4f:5d:80:
f7:a6:ac:e4:2b:d1:a7:15:71:16:0e:65:46:08:6d:
6e:cd:be:50:09:99:f1:41:eb:4b:01:b2:d1:59:3e:
33:5b:91:62:a2:fb:8c:aa:52:6f:17:0b:4e:34:5a:
b5:7d:80:6a:2f:55:40:b6:20:05:fc:84:f1:2d:58:
ae:0d:13:46:29:3c:e7:29:05:6d:55:fb:02:90:57:
a2:8f:97:53:88:48:df:09:2e:e3:10:7c:b7:dc:16:
1e:68:f3:f4:34:53:6b:ba:2f:6a:7b:53:a8:db:12:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:00:54:3B:BD:1E:65:51:84:9F:FF:E1:F9:7D:0D:B0:E3:CC:80:FE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edf7f775-4d15-46aa-a77e-d8dd11f7f3e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:880::/48
Signature Algorithm: sha256WithRSAEncryption
80:1b:2d:04:32:bd:45:48:9a:e7:f4:dd:56:7e:9b:eb:32:1f:
4d:a2:09:21:28:db:c1:81:d9:95:76:f6:4e:e9:66:e7:4b:65:
eb:a7:99:a6:95:29:0e:f2:05:28:b0:3c:fb:ed:d9:6b:15:ea:
b6:ad:e3:71:1d:ea:96:82:81:5d:d8:7e:44:fd:cd:72:e2:66:
3a:02:c4:eb:6a:64:1a:1b:1f:21:a6:8b:88:6f:e3:f6:bd:ff:
9e:4a:5d:d9:f9:bc:e7:90:88:b1:1a:fe:b2:7c:52:8d:fa:16:
bf:eb:29:64:1f:44:d7:a1:81:c0:dc:13:11:7b:7b:e4:d5:c1:
8b:1b:e4:66:81:51:65:d1:47:85:3b:1e:46:e8:46:bd:a6:47:
bf:1a:4f:55:d9:f4:36:4b:85:79:36:64:85:02:e6:5b:b7:9b:
37:d2:4c:13:2a:2e:b0:d3:cb:d2:4a:8b:46:d0:f0:12:f8:c7:
7d:32:7e:c7:6a:36:90:48:a2:73:8c:df:10:c1:7f:ee:ed:c3:
33:fb:86:c3:50:08:5e:9b:c1:1e:41:d2:d5:e2:ff:52:ce:ca:
7a:83:35:c5:24:f3:2b:7e:ca:80:b6:c3:e5:a6:22:2f:12:79:
10:04:ff:4c:d4:5a:b6:89:9a:08:cb:cc:fd:e8:b4:ca:14:ff:
75:47:6b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:26:01 2025 by rpki-client