Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/232e4c5b-5853-4200-81cf-438555b951ff.roa
File: 232e4c5b-5853-4200-81cf-438555b951ff.roa (raw, json)
Hash identifier: fifjfPunKTVViTOVVvDFlgqd9xYb1QMvDvOE91isyto=
Subject key identifier: ED:AB:C9:1A:8D:5B:08:32:CD:A3:0C:C5:B5:D6:F7:91:28:11:B4:0A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 39571058DA49A658EAD19CD89906AB38F2FABEB1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/232e4c5b-5853-4200-81cf-438555b951ff.roa
Signing time: Mon 16 Jun 2025 21:31:39 +0000
ROA not before: Mon 16 Jun 2025 21:31:39 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:57:10:58:da:49:a6:58:ea:d1:9c:d8:99:06:ab:38:f2:fa:be:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:31:39 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=70be8b2e898744848d0640bf7ac3858c02ace6c5d762c9d3a107784257569ea6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d8:f8:9a:e8:1f:6f:3e:c9:82:5b:52:48:9f:
f8:7d:c0:71:fa:ac:a0:e8:78:8b:27:85:04:33:a9:
9f:9b:ed:0d:27:13:e7:1d:b4:83:bf:95:89:ab:0b:
fb:95:f5:f2:ed:7b:63:b5:f9:75:92:ac:5d:6b:82:
93:f6:cc:55:e5:39:42:02:4f:b7:f3:f7:47:bf:44:
6b:df:c6:b8:dd:2f:9e:e4:51:a9:21:7d:24:59:66:
29:eb:57:18:2b:7c:f2:ed:1f:7c:2d:9d:76:38:45:
6a:6c:9d:69:e5:16:9d:0d:ec:ec:2d:72:d2:3c:ae:
58:da:9c:e7:cd:1f:a2:cb:3f:6b:55:04:85:5b:80:
4c:b2:69:05:20:25:72:77:2f:a6:56:d6:e5:d9:16:
9f:f9:63:9a:f1:b5:72:9e:db:18:42:bc:56:a5:fc:
36:95:40:64:f3:69:90:b6:3b:b9:08:d2:9e:89:8e:
1b:74:bc:ec:4e:7b:38:49:17:1a:ec:f0:9a:4d:db:
a9:37:e3:7d:29:37:7f:f0:18:08:97:79:77:55:04:
c3:83:6d:e9:fa:ed:47:76:e2:5b:bc:cf:36:49:6b:
7f:d6:24:e9:4e:61:fe:dc:48:43:ba:f4:dd:9a:03:
eb:e3:88:9b:c7:59:27:80:af:99:b7:39:53:88:20:
4b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AB:C9:1A:8D:5B:08:32:CD:A3:0C:C5:B5:D6:F7:91:28:11:B4:0A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/232e4c5b-5853-4200-81cf-438555b951ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:8000::/40
Signature Algorithm: sha256WithRSAEncryption
94:26:93:20:09:69:40:de:aa:20:62:21:ff:61:2c:e0:be:f7:
80:0d:19:a5:d4:16:69:96:10:8b:89:4a:42:78:6c:5f:5e:c8:
32:de:09:c7:c7:50:45:27:20:6a:2e:35:7d:bf:49:25:e1:90:
aa:16:92:fd:a1:28:23:04:da:56:9e:26:d7:32:c2:72:04:26:
c7:8e:92:d7:f5:ca:4d:ea:d0:ad:71:94:24:3a:38:f4:05:72:
96:f1:9e:a7:7e:3f:94:fa:09:2f:64:30:a7:a0:29:54:a6:b0:
d9:49:30:a1:3b:22:0d:bf:17:7d:29:54:55:e0:11:66:52:83:
bc:26:a9:de:3a:72:e5:63:c5:d6:6b:6f:1e:d4:59:35:c1:56:
34:48:dc:d0:c9:e8:6b:c5:58:6b:78:49:49:6d:af:ad:4f:36:
1c:4a:f2:81:40:21:6d:2f:b4:7e:97:b4:32:f8:5c:69:95:ab:
4d:27:07:51:13:61:df:6a:0b:35:0b:03:0f:6c:e3:84:e7:5e:
a6:3f:36:ff:21:a2:48:a6:e2:5b:09:86:2d:99:5d:78:d3:7f:
3b:27:8d:6a:52:86:0e:81:68:b1:e5:0f:a1:34:17:b5:d3:b4:
90:03:fe:85:fd:d4:4a:87:8b:0b:73:ea:7a:85:cb:74:2c:18:
3b:5d:ed:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:57:50 2025 by rpki-client