Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa
File: 1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa (raw, json)
Hash identifier: z1cYimO/xVvfzo3GHdNyElL+qewEqnB4sW6F7ThXY/k=
Subject key identifier: 0D:8B:B5:C0:4E:15:D1:4F:10:3F:68:EE:0E:37:B8:53:58:75:80:1C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1DAF2E8D7749CB55A3F9BB23AA07052C912AC756
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa
Signing time: Mon 16 Jun 2025 20:21:21 +0000
ROA not before: Mon 16 Jun 2025 20:21:21 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:af:2e:8d:77:49:cb:55:a3:f9:bb:23:aa:07:05:2c:91:2a:c7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:21:21 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=fc16623d25367956c0218f7df2cf69c6c918546e0bd42310f491a92133019a7d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0f:6c:cb:1c:23:f4:f1:9a:c4:2e:cc:a0:51:
5f:12:c1:71:b5:43:e3:12:2c:07:e9:96:13:ad:d5:
60:4a:ba:c2:fc:da:2a:55:98:94:62:44:16:85:50:
39:53:e3:df:97:59:b5:1f:33:d6:f4:04:08:34:e1:
c6:72:0f:0a:68:4e:c9:de:b9:ec:38:3c:36:5b:6a:
bf:88:b7:5c:3b:1d:21:bc:a5:0e:79:27:97:0a:ac:
c4:ed:28:4e:9e:70:ca:f5:03:40:fa:8e:78:8d:b1:
9d:33:2f:4f:e2:27:f1:68:ab:14:66:2e:00:66:14:
49:aa:bc:0f:a5:5d:e3:a5:b6:3a:5d:ee:26:20:16:
9d:e4:44:0e:1c:c1:84:2e:30:bf:0d:52:06:58:ab:
92:f6:c5:af:5c:85:c2:da:21:eb:d9:0d:0d:48:ba:
a9:f1:16:bf:36:26:f5:1d:ce:44:72:40:a6:9f:6d:
57:1d:ba:7e:a9:ac:d1:3a:90:08:2f:9f:8f:a5:18:
a9:a1:90:dc:24:74:8e:60:18:f8:98:66:d8:09:ad:
b0:40:20:b2:c9:3a:20:2a:7e:f5:55:d2:e8:c9:b0:
2f:db:80:c7:50:10:7b:d6:ff:af:ac:c9:37:80:c9:
5f:62:eb:37:24:6a:db:ff:6f:d7:21:3b:b1:f4:56:
88:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8B:B5:C0:4E:15:D1:4F:10:3F:68:EE:0E:37:B8:53:58:75:80:1C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8080::/48
Signature Algorithm: sha256WithRSAEncryption
68:22:7c:92:74:65:94:b5:c8:5b:6a:a3:be:e5:92:ef:54:d5:
a1:28:ed:1e:8b:4d:8d:72:d0:86:c8:02:1b:00:a5:6d:af:9f:
8d:57:21:cd:58:d2:9d:85:c0:4e:12:d3:00:7b:ad:a9:5c:13:
45:19:81:26:88:3a:11:28:aa:9c:20:4d:7b:02:b6:f0:87:5f:
60:ec:42:d9:5c:db:94:72:d3:5a:df:42:53:78:77:9f:8f:83:
92:45:1e:e6:d8:e9:16:0e:89:18:ea:d2:f2:0c:ed:96:e5:53:
32:3c:b7:31:ba:a0:bf:94:e5:67:7a:50:19:91:3f:47:22:c7:
f0:71:f6:6f:44:fd:44:29:00:35:e8:7a:a9:97:20:dd:36:b7:
95:5e:3d:32:3e:0a:13:47:c6:dc:94:10:d3:ca:3e:db:4b:e0:
2b:62:e4:cb:ee:6f:2d:5c:64:6b:f9:ba:d7:fc:97:15:86:d2:
1e:d3:78:bb:8c:20:4d:bf:7c:16:1f:3c:51:66:4c:fd:e0:7b:
16:43:5f:da:29:4a:13:b3:3a:be:b5:02:2f:eb:75:00:36:e4:
a6:2a:0b:56:1b:f8:dd:61:6b:3f:eb:ab:70:8b:4d:2d:12:9d:
46:f1:39:ff:f7:1b:46:6d:40:17:43:ac:1f:43:25:23:4b:9d:
87:31:28:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:48:56 2025 by rpki-client