Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0141b806-c012-49b3-a8da-73590b0cd2b5.roa
File: 0141b806-c012-49b3-a8da-73590b0cd2b5.roa (raw, json)
Hash identifier: xNTt/1OQLW11IRs1oNZCmfQyi/ebB8X5JvYfhIXpm7A=
Subject key identifier: 1D:D6:5A:50:72:05:40:CB:C6:02:CE:1C:E9:2B:8A:4C:88:5F:0A:CF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 40B4FEB042AC9BA45521A5D986EA700688C2CC73
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0141b806-c012-49b3-a8da-73590b0cd2b5.roa
Signing time: Mon 16 Jun 2025 20:00:14 +0000
ROA not before: Mon 16 Jun 2025 20:00:14 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b4:fe:b0:42:ac:9b:a4:55:21:a5:d9:86:ea:70:06:88:c2:cc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:00:14 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=af2abaf909bea9362ba665efd100dd752654d445a537061822058f77edd64102, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:fa:46:76:48:96:87:fa:84:bd:19:3f:14:
bf:dc:fd:3a:c0:34:bf:b8:f6:8f:c8:48:6c:d3:95:
f4:a4:74:64:bc:4e:fa:b3:33:e0:73:71:34:de:be:
27:d1:c7:9d:47:d5:39:a9:aa:aa:03:14:71:b3:0b:
ad:4b:e0:07:f1:e2:dd:84:0a:28:de:a0:7f:e9:2c:
40:8a:24:cd:1b:96:7a:05:08:17:c4:d9:69:cc:8a:
76:6a:49:9c:55:57:5e:12:2b:d0:18:f6:dc:1a:a9:
9e:b4:35:c0:ff:4f:2d:d7:51:ae:c4:7a:37:9e:70:
79:e4:cd:dd:71:29:86:fc:73:d2:7a:0f:ba:72:7d:
29:58:35:54:71:14:8c:3b:06:ab:4f:36:b3:c1:0c:
a8:33:7b:a9:f7:b0:f1:5b:00:dd:8e:49:89:9b:4c:
cd:e9:99:a9:f2:23:dd:ae:7f:e7:34:81:5e:5c:2c:
59:25:16:69:72:41:2f:f1:4c:39:5e:d7:62:83:46:
48:53:4f:e2:94:c9:49:8e:6b:c7:4e:5e:12:a6:21:
d5:28:9f:c0:46:06:71:b5:28:49:0d:20:c2:91:22:
de:c4:75:31:a5:f6:bb:3b:c0:d2:22:13:c7:7a:30:
be:d8:75:3a:69:0b:5f:c5:64:f4:94:e0:57:cd:06:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D6:5A:50:72:05:40:CB:C6:02:CE:1C:E9:2B:8A:4C:88:5F:0A:CF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0141b806-c012-49b3-a8da-73590b0cd2b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
12:1e:28:27:7c:92:91:73:43:de:f7:e3:a6:9e:95:f9:a5:cb:
6f:e9:a7:63:3e:64:0b:72:ce:83:7f:c8:f6:d0:21:bb:90:8d:
d3:30:c9:0c:9f:2b:76:4a:99:96:1e:a4:fa:67:46:66:ee:c8:
b5:a9:32:3c:5b:12:4e:53:ef:98:ee:3a:59:b0:a1:c2:90:ed:
17:8f:08:88:44:df:8a:93:a3:8e:f3:c9:22:2c:c8:2b:9b:5f:
b2:44:3a:e7:ce:c9:01:07:3a:db:72:0c:3c:45:22:2a:a1:ad:
20:74:83:97:3c:4e:70:d2:13:f0:b7:cc:4a:f0:e8:c4:ea:f5:
bd:0f:c2:22:b2:87:41:de:80:d2:04:d0:a9:00:bb:17:b4:48:
09:3c:89:e3:61:97:4f:89:d4:99:7f:a3:04:c5:d6:c3:fa:de:
43:8d:b7:89:21:9b:12:12:a6:07:9e:e5:a8:c0:59:62:ae:66:
75:4e:51:5e:49:93:6c:47:f7:f8:c1:9f:33:f1:9f:59:84:83:
b3:7b:53:ac:b6:11:b0:c5:05:d7:cf:7a:37:01:fb:b3:8c:47:
28:a3:6a:08:5d:40:bb:b4:2d:38:d5:f6:53:34:53:70:a1:83:
8c:5c:8c:ba:99:86:34:c4:1b:4a:02:77:d2:20:75:b4:08:e5:
eb:4c:73:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:52:25 2025 by rpki-client