Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa
File: 1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa (raw, json)
Hash identifier: SdCtm0KIABLo9mu2DvsxAr4mDWTQ3+Tjn6ovccijnAU=
Subject key identifier: 31:46:C1:84:CA:12:2D:9F:30:CD:E1:AE:80:9E:A2:9E:8A:9B:1B:03
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 48D5B907674E9E9C7A5D7A768EC4A9E3C8252BA2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa
Signing time: Tue 17 Jun 2025 00:40:41 +0000
ROA not before: Tue 17 Jun 2025 00:40:41 +0000
ROA not after: Tue 22 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:d5:b9:07:67:4e:9e:9c:7a:5d:7a:76:8e:c4:a9:e3:c8:25:2b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 17 00:40:41 2025 GMT
Not After : Jul 22 23:59:59 2025 GMT
Subject: serialNumber=3af2d8b68bef44e67f79d0729f743609b0df3f913dbb232c59f4475b1507808c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:df:82:01:4b:c2:90:8f:6f:b4:2c:51:de:
2f:63:b6:04:42:bf:f4:6b:cb:29:d5:94:0b:89:91:
6e:cd:67:8c:18:57:3d:83:84:05:a3:87:d5:73:5a:
2e:15:77:8a:b5:35:5f:65:5b:4f:2d:58:d0:1c:b3:
fe:33:e6:1b:1a:3f:3b:53:8e:e8:5b:6f:c7:6a:47:
b9:b4:ed:2b:40:37:5e:e7:5b:d0:ee:66:b1:ff:03:
a8:94:9a:47:e0:c2:1e:2f:2b:27:01:e8:96:00:90:
10:a3:99:18:e8:13:e8:42:f6:7b:18:2c:01:df:d4:
87:91:5c:98:4a:df:0a:a0:39:0c:f7:18:87:05:29:
cc:9b:bb:6e:33:b4:a2:4a:30:71:da:15:2b:74:34:
ea:87:08:6b:52:31:51:58:43:5c:f2:7b:fd:72:c0:
7e:28:50:07:a5:31:8a:5e:5c:47:44:8a:cf:9b:d1:
22:8d:0c:5c:0c:94:cf:93:5e:8b:45:26:cb:8e:37:
c2:2f:d6:04:f7:e6:ab:92:b6:b3:01:20:82:57:4b:
5b:8f:b1:f4:d7:d1:fe:65:9b:3b:cd:95:0d:79:48:
92:a2:3e:e0:56:e3:a2:dc:89:71:4d:25:32:cc:18:
e6:12:c2:b6:a1:33:7a:4b:01:d0:da:3e:e1:fd:bd:
c3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:46:C1:84:CA:12:2D:9F:30:CD:E1:AE:80:9E:A2:9E:8A:9B:1B:03
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:e000::/40
Signature Algorithm: sha256WithRSAEncryption
04:a6:75:87:67:f7:cf:5f:a1:fc:42:d5:de:e5:e4:cd:08:9f:
9c:15:23:97:08:f3:c7:6c:32:3a:ad:34:73:9e:ee:a9:12:45:
dd:e7:ef:8f:0d:20:24:62:a8:36:41:ff:80:3d:ee:84:a0:9b:
db:1b:e4:05:e9:7a:e7:df:d7:a8:fd:91:fc:1b:b7:81:10:53:
d3:af:5d:9e:58:a9:9b:7d:22:4f:3c:72:17:48:04:56:e7:50:
ac:fa:0d:a5:b5:8b:f6:b3:ca:28:b9:46:64:18:d5:79:5e:c8:
da:0e:ce:2b:6d:34:6b:8e:23:16:0a:a2:b1:71:04:ba:e0:1a:
d1:ef:21:15:44:8b:92:f2:16:4e:cc:c0:1e:c4:2a:02:2c:be:
be:a4:b4:26:4b:20:01:b5:73:87:e2:b4:f5:49:51:68:f1:84:
b9:5f:fb:7c:d9:d5:a9:d6:20:65:37:19:0a:af:1d:aa:0d:fa:
a2:c6:4f:3e:47:31:d8:07:64:0f:0d:ef:03:c2:d3:bc:54:2a:
77:bf:1d:d9:f9:a3:ea:92:14:7a:6a:ef:be:5b:74:ff:f0:78:
c0:dd:94:ed:6f:e4:00:7f:ce:18:ec:77:c9:7d:81:06:54:6f:
23:a2:74:f5:97:f8:d3:52:21:af:e7:db:c7:a3:a0:c3:12:31:
a2:29:24:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:24:51 2025 by rpki-client