Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07c3de07-a359-4dee-93cb-30a6dab1215d.roa
File: 07c3de07-a359-4dee-93cb-30a6dab1215d.roa (raw, json)
Hash identifier: 2vWXjvyCSbiAWQm3evX6yqCnEVFX741uS4TLX8CutDs=
Subject key identifier: 66:AD:C8:CD:01:B1:B7:5F:24:F8:24:BE:76:37:7D:0E:B4:FD:4B:B3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 743E0E1EDF9FB1F796B95D2604A015043D85B0BA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07c3de07-a359-4dee-93cb-30a6dab1215d.roa
Signing time: Thu 26 Jun 2025 19:38:47 +0000
ROA not before: Thu 26 Jun 2025 19:38:47 +0000
ROA not after: Thu 31 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:8c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:3e:0e:1e:df:9f:b1:f7:96:b9:5d:26:04:a0:15:04:3d:85:b0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 26 19:38:47 2025 GMT
Not After : Jul 31 23:59:59 2025 GMT
Subject: serialNumber=db94c5ad3400b2fd7e4a2359d6f259c1b22d2b78e691fea503761ae3b4138d9c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b9:be:01:37:9a:d7:82:46:15:1c:7e:47:5d:
74:d8:28:59:0c:be:cf:ef:e9:c3:62:27:cf:e1:ae:
7d:a8:88:97:64:e1:62:d2:26:b8:7b:20:1e:4c:6a:
ee:24:eb:6f:03:2a:6a:82:9d:26:e4:08:30:1a:d8:
1f:8e:b6:45:4b:2c:5e:36:00:99:84:3a:12:1c:b8:
15:3a:0a:eb:c3:23:7c:13:d7:8d:f3:75:05:79:8c:
0c:dd:ed:ba:12:55:39:33:47:8b:56:07:34:35:05:
04:c2:46:99:75:b1:47:47:7a:41:84:ed:7a:16:e8:
ab:83:76:e6:60:50:8f:c2:dd:03:c3:b9:d3:97:5d:
85:89:34:2f:1b:1f:33:dc:f6:f2:3f:c7:17:ab:0c:
e6:a8:c7:30:6f:07:68:4f:0b:d9:56:5c:c8:5b:22:
9e:b3:7d:60:1c:6f:76:48:7c:44:85:55:ac:a9:b4:
bc:df:f4:0e:47:0c:c7:8a:9c:78:e5:dd:b0:af:d9:
e3:ea:df:b6:bc:75:f3:86:db:da:43:c2:f4:2a:30:
ca:40:24:7f:90:0c:a2:1a:f3:d3:f6:f8:c5:a7:88:
78:db:c5:f6:7a:64:a5:04:71:68:ca:9a:ad:6e:41:
ac:60:53:a7:cb:4d:f2:2a:6c:54:22:fa:4a:04:bf:
5f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AD:C8:CD:01:B1:B7:5F:24:F8:24:BE:76:37:7D:0E:B4:FD:4B:B3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07c3de07-a359-4dee-93cb-30a6dab1215d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:8c0::/46
Signature Algorithm: sha256WithRSAEncryption
4f:a4:8a:b1:d3:55:c9:7e:d9:36:1f:3d:6f:b2:da:fa:42:49:
7d:34:88:d6:98:b9:38:01:ed:0a:fa:dd:be:21:5c:68:6b:db:
f8:af:57:23:be:e3:7e:c6:4a:7d:9d:b2:9e:b3:1a:db:9d:da:
44:2e:08:89:a9:05:e3:12:14:99:c2:d2:1f:7d:0d:2d:b8:ed:
98:2f:d1:0f:9c:b7:0e:1d:69:31:6b:d9:33:7d:62:ef:b1:04:
df:f7:1f:08:f1:bd:b4:9d:ac:ac:56:e3:70:9e:22:f2:16:2d:
60:49:ca:49:55:cf:e2:9d:c3:09:05:36:06:f0:93:85:42:9d:
82:7e:c5:26:52:ba:ca:5f:c5:e0:35:08:f5:fb:93:2a:d9:e6:
31:e9:37:e3:e9:0f:6f:9a:96:64:21:e2:65:43:03:f8:34:d5:
c0:4d:2f:af:77:f5:18:dd:d2:d8:42:06:9e:8e:ef:ac:c4:1e:
bc:18:6b:af:2d:48:01:60:c6:53:61:9c:65:74:05:e1:44:ba:
c3:30:cb:10:c7:bc:b2:02:90:f4:f3:63:a5:48:2b:1f:ea:14:
8f:17:9f:d8:5e:c0:d5:f1:53:e9:fa:17:67:f1:22:56:86:2b:
fd:0e:e1:72:92:94:6a:2b:e6:a9:c3:87:08:94:21:97:69:9b:
a0:30:84:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:25:16 2025 by rpki-client