Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1cce4de7-2873-45f2-8bca-ceae18748090.roa
File: 1cce4de7-2873-45f2-8bca-ceae18748090.roa (raw, json)
Hash identifier: f8npf8+AqB2Xwf8p7RL6+HTiZH+0wzpPS9YIDlEP5O8=
Subject key identifier: 2D:FD:AF:C4:AA:D7:7B:4A:7D:DF:49:B5:01:78:3C:9C:8D:8E:C4:61
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 48B8B618BE0D27D2C1F9C85DD98E31EAAC65CB6B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1cce4de7-2873-45f2-8bca-ceae18748090.roa
Signing time: Mon 16 Jun 2025 20:50:43 +0000
ROA not before: Mon 16 Jun 2025 20:50:43 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:2040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:b8:b6:18:be:0d:27:d2:c1:f9:c8:5d:d9:8e:31:ea:ac:65:cb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:50:43 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=80f05161559c3375db8f8b017ec60809a5326a1c6dcc3d16673bcd8a956d9cbc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:5c:a8:45:7c:b3:c5:c9:21:58:73:ed:1f:
9a:12:56:f5:c4:3f:a1:d6:3d:54:c3:0b:e1:17:e0:
8d:57:78:6d:c8:2c:08:82:c2:6b:ba:14:03:a1:56:
aa:74:27:0a:4f:88:39:f1:ce:9c:ed:e8:22:d3:b1:
ef:48:d7:cd:42:56:41:64:57:2e:90:4e:11:56:ab:
18:c9:88:7d:ca:6b:17:ec:df:75:02:65:9d:09:13:
9f:f6:9a:ed:52:79:ec:d5:1a:ca:4a:81:fd:44:f5:
78:ca:1d:b6:03:f0:c2:88:73:62:e9:53:31:2e:4a:
92:ad:05:33:86:05:08:8f:a1:5d:05:f2:71:88:0c:
57:f5:1d:a1:15:18:67:56:90:2d:cb:33:56:29:14:
88:07:ae:f3:25:e3:2f:70:62:a7:ac:42:f6:32:16:
1f:5b:23:84:98:c8:2b:e0:43:80:d0:34:a9:d8:c4:
18:6e:2d:89:0d:74:f5:25:2b:fc:cb:33:87:24:eb:
0a:42:5c:15:b3:67:5b:6c:85:73:d2:0b:4d:0c:61:
18:e5:9e:43:c5:33:60:e2:b4:90:f1:60:df:c3:1e:
91:a3:81:95:a0:fc:67:e9:32:98:9d:20:0f:27:5a:
3a:12:65:9e:2a:a3:01:c1:20:39:a9:bb:d9:9d:6f:
a9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FD:AF:C4:AA:D7:7B:4A:7D:DF:49:B5:01:78:3C:9C:8D:8E:C4:61
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1cce4de7-2873-45f2-8bca-ceae18748090.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:2040::/46
Signature Algorithm: sha256WithRSAEncryption
88:8a:b6:26:12:ed:22:b8:90:05:1e:45:04:bf:1f:ba:be:de:
de:57:45:c9:68:20:9e:bc:17:ab:57:fe:ef:01:d8:ad:85:39:
00:2a:25:39:d2:3e:09:f3:ed:c8:71:55:9d:8e:de:b9:d5:3a:
87:6a:7a:9b:0c:f6:00:cf:b9:58:06:8e:1f:6c:1e:06:33:25:
f7:f2:40:5d:f0:50:64:63:a6:1f:a7:5f:00:1c:e0:2e:ce:4f:
2a:14:36:3d:02:84:45:3a:6b:a9:d4:77:e6:f2:98:20:73:56:
aa:59:5f:44:81:25:0c:67:09:12:a6:d4:a8:27:2a:19:1a:5a:
7e:a2:47:75:f3:39:b9:f3:e8:2e:6f:9a:d6:7b:25:c7:ef:09:
29:ac:1f:fb:45:cf:8f:ea:81:a0:36:b8:e5:83:1b:d1:42:45:
2e:11:ae:4b:92:b9:e2:a7:87:10:5c:89:10:5c:61:60:57:0a:
3e:01:ad:7e:3c:92:bc:1b:a7:74:f9:14:2c:f7:6c:af:ea:33:
2c:56:7a:2f:64:8e:55:55:34:15:53:f2:f5:46:fd:95:b7:58:
12:83:74:ff:db:87:1a:29:00:90:8d:8a:c7:1d:9b:2f:7e:65:
43:9b:37:0c:22:8b:48:f8:fe:ff:64:a3:04:68:f8:bf:f3:9f:
75:ce:a6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:42:27 2025 by rpki-client