Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a31701b-6e08-4967-83cb-76ea10ffab6d.roa
File: 1a31701b-6e08-4967-83cb-76ea10ffab6d.roa (raw, json)
Hash identifier: S8TRcbyFnFJN2b26TKHPGNCY0s0tGhGoYZ2weCZNtyA=
Subject key identifier: 19:18:9C:90:8F:EF:AE:32:24:A2:42:45:DE:05:60:E1:E2:86:F7:21
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 337B07518B6A5FDE7EC756B702ADB9662EAF9343
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a31701b-6e08-4967-83cb-76ea10ffab6d.roa
Signing time: Mon 16 Jun 2025 20:41:27 +0000
ROA not before: Mon 16 Jun 2025 20:41:27 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:7b:07:51:8b:6a:5f:de:7e:c7:56:b7:02:ad:b9:66:2e:af:93:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:41:27 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=dd67e445957ebda7f1dc87a6208429beefa98067b962ba8b3de5d15f9fbcab35, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:78:b0:2e:2a:71:73:19:54:6d:6c:94:3c:
56:da:cd:b0:d0:04:d6:c4:3c:a5:ff:71:d1:0b:81:
a4:da:f3:1b:f3:c9:69:b3:af:d8:52:19:5d:f0:60:
be:b5:7a:22:c5:4d:24:73:6d:f0:c6:f1:92:9c:a6:
86:6b:d4:26:e6:1d:c9:db:ab:32:d4:9e:4b:39:16:
2f:9d:09:f7:b0:3c:20:85:db:2f:47:47:7a:7f:c6:
21:b8:65:c3:3b:de:93:31:e6:70:a1:b0:e9:a4:50:
7c:fc:d5:4b:63:26:60:5d:26:82:d1:5b:45:e2:c0:
2e:9d:50:10:2c:b1:56:ea:7a:bd:2a:d5:3c:29:cd:
d4:20:83:d6:6c:a6:f7:66:9d:a0:ce:5a:87:cc:db:
10:9a:06:07:49:c9:2c:12:ee:5e:44:51:34:4d:cd:
35:f8:59:fa:b7:a3:11:bc:49:48:a4:82:a6:b5:fb:
91:03:59:a2:b5:d4:db:4e:1b:fb:4b:53:73:a3:4c:
f5:22:01:ab:0f:0c:10:1f:e2:f3:2a:47:45:35:72:
99:91:2f:c5:ff:a0:2c:a4:bb:ac:17:b2:c4:0d:01:
9e:92:4d:93:db:0a:08:8f:96:e3:00:bc:69:22:6a:
da:a1:2a:8b:20:63:a5:51:b4:69:62:e9:11:e9:be:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:18:9C:90:8F:EF:AE:32:24:A2:42:45:DE:05:60:E1:E2:86:F7:21
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a31701b-6e08-4967-83cb-76ea10ffab6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:a000::/40
Signature Algorithm: sha256WithRSAEncryption
1d:0d:58:92:88:8e:0c:cf:7c:5a:a8:44:72:54:9f:7a:7f:87:
cd:df:6e:a7:23:4a:09:4f:d5:6e:50:d1:06:47:21:39:ff:3f:
3d:94:ab:37:5d:48:4c:73:f1:23:66:a3:b4:14:39:aa:67:7e:
c9:5a:90:03:8d:99:5c:ab:81:6c:d8:34:4a:3f:a5:a9:f7:9a:
6b:2b:54:67:0b:48:69:d8:50:d8:d4:ac:86:07:73:45:c0:37:
26:0e:5d:b8:ea:80:b4:be:52:ba:bf:cb:ca:87:de:8a:fb:ed:
d6:eb:4c:2b:37:ab:ff:9b:60:68:1b:88:57:b4:63:97:f7:ea:
db:06:cf:19:0c:dc:64:c7:ee:6a:68:70:d0:14:d2:4e:cc:b8:
8e:05:c0:ba:d3:24:d2:d9:05:4d:2a:96:cb:83:39:8b:41:35:
54:33:e2:7f:95:a6:67:b6:5d:3c:f3:77:ca:68:39:09:74:9c:
94:07:c1:08:27:84:47:d0:46:9b:6d:1b:fc:99:33:09:25:00:
00:ab:9d:3f:b0:19:d4:5a:30:d9:4e:34:fd:6d:9f:13:b0:d1:
05:1d:d3:bb:b6:63:32:3f:93:6a:b0:52:2d:8c:ac:a6:86:af:
17:97:09:82:be:c1:5e:11:4d:44:10:df:73:74:4e:e3:d7:90:
a6:24:e0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:50:15 2025 by rpki-client