Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a30ed8c-d021-436c-b923-753b22158048.roa
File: 0a30ed8c-d021-436c-b923-753b22158048.roa (raw, json)
Hash identifier: Lzsj2unoZB3Hi08FhijWYAay1kWHR8e61fusT3xYMzo=
Subject key identifier: 1F:71:D1:F0:4C:20:3F:CB:EB:19:1F:3C:87:A7:5D:59:5D:C2:50:D5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 09B2DD5EB64E772DAB6DA18F06D787BB7D1DBA7B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a30ed8c-d021-436c-b923-753b22158048.roa
Signing time: Mon 16 Jun 2025 21:00:56 +0000
ROA not before: Mon 16 Jun 2025 21:00:56 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b2:dd:5e:b6:4e:77:2d:ab:6d:a1:8f:06:d7:87:bb:7d:1d:ba:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:00:56 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=424119a8d147a04b5cb88df6233b1612fb9b6bb4b6738943c67203fc31bf096c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:61:6e:af:2e:dd:7d:7f:31:6d:3c:8a:04:47:
dc:a8:b4:ce:84:f3:55:7f:72:39:8f:e0:6c:8b:8e:
33:11:8c:55:b0:d5:4d:c1:3d:60:60:05:fc:b7:50:
b0:c1:c3:ed:12:b1:81:00:d8:ee:9e:ef:0a:a7:ac:
02:94:78:f7:a9:62:ae:d6:f8:ad:bb:2d:57:2a:38:
8e:96:b6:e3:85:1b:f0:fd:14:a2:c7:2c:b4:29:0d:
20:41:dd:d1:d6:40:1c:c7:68:05:13:59:11:a9:17:
f1:ec:2f:a8:cc:e5:c1:ea:04:7c:c8:6f:69:f8:6b:
79:02:81:45:51:8c:c8:d4:10:c1:e4:f0:1c:09:ee:
c6:8d:1e:89:37:a3:28:01:02:d6:53:24:1d:8d:27:
f0:84:be:eb:27:cd:c3:c0:c1:4b:91:d7:e6:80:d7:
ae:9d:10:fc:1b:1f:9f:8f:40:b5:fe:a6:20:1d:dd:
e5:28:ed:cd:4b:7b:45:db:06:12:7d:05:16:66:21:
0a:20:3f:f7:7b:cc:65:6a:a9:3d:76:c2:80:08:f8:
d4:e4:47:0a:18:25:ba:8d:3f:84:2f:fe:86:37:5f:
be:c4:8b:0c:64:07:6b:c3:76:9a:25:4f:5f:29:19:
4b:18:81:78:1c:7a:10:a7:66:02:a7:8e:9e:88:fd:
88:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:71:D1:F0:4C:20:3F:CB:EB:19:1F:3C:87:A7:5D:59:5D:C2:50:D5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a30ed8c-d021-436c-b923-753b22158048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:e000::/40
Signature Algorithm: sha256WithRSAEncryption
b2:ed:50:26:72:e7:b6:1c:9b:c6:4c:4e:e7:82:51:21:09:4a:
14:0a:02:5d:83:ce:0d:7f:95:0b:2a:50:09:5b:83:83:41:b8:
0f:5f:a1:1d:49:88:56:71:db:74:14:e5:00:35:4e:ef:6c:28:
d6:c6:7a:0c:a9:37:d7:d5:bb:dc:61:eb:b6:f7:74:81:c9:c3:
61:31:75:72:70:5a:63:bc:9a:c3:3f:32:66:85:c2:2e:4b:98:
32:9a:56:9f:a0:57:0d:3c:1a:bd:d4:89:8d:64:8e:3c:37:32:
9b:65:30:ad:aa:45:44:ca:dd:e2:22:92:da:6e:db:b4:e8:c9:
8e:c4:07:20:ea:cd:08:d8:ee:25:26:4d:01:a1:6d:55:c5:16:
52:e0:5e:46:c0:e7:3c:8e:b3:b3:dd:1f:8c:6d:d0:d6:2c:a9:
de:62:e6:9a:9f:64:c6:04:c1:ed:e4:24:0a:0f:0f:8c:a5:53:
ec:50:d4:87:27:5a:3e:2b:8a:c4:1e:22:0c:9b:5f:ca:f6:65:
bc:d4:c8:be:a9:a1:e9:28:f6:af:77:12:ff:d1:a2:ae:bf:15:
06:a3:43:5a:e5:3b:77:e5:2b:1a:4c:5a:5c:3d:21:c3:3b:c5:
05:89:a0:05:7a:aa:80:4c:ab:a8:3e:79:72:43:bc:2c:9a:89:
1c:3e:fa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:54:41 2025 by rpki-client