Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2331f846-3447-4dea-ac7a-63323853ebb9.roa
File: 2331f846-3447-4dea-ac7a-63323853ebb9.roa (raw, json)
Hash identifier: AbGi1FOP34sbCATNZ1xtY0Ww9N8aRjET4nrpZvmwf6E=
Subject key identifier: 06:50:5F:AA:11:27:AC:43:06:9E:91:55:37:1C:CA:8F:DF:19:56:D6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 603B1C0D28D6ED499B5221A042CCFCF4DCC3825A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2331f846-3447-4dea-ac7a-63323853ebb9.roa
Signing time: Tue 17 Jun 2025 00:41:13 +0000
ROA not before: Tue 17 Jun 2025 00:41:13 +0000
ROA not after: Tue 22 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:3b:1c:0d:28:d6:ed:49:9b:52:21:a0:42:cc:fc:f4:dc:c3:82:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 17 00:41:13 2025 GMT
Not After : Jul 22 23:59:59 2025 GMT
Subject: serialNumber=3d5dc21a81d54d90881231cca5c3feb787c8a120f6e1da3160d5b9de30cbfa4d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:89:80:bb:1d:d4:a0:49:c2:9a:79:7f:e4:
a6:6b:e3:28:60:d7:94:8f:d9:9d:9d:b0:54:dc:8a:
bf:da:26:6f:9a:6b:b4:7e:32:08:50:d8:a4:cf:b0:
1b:1d:2c:f6:b1:ed:ba:8a:6b:e2:7e:66:22:c6:45:
59:46:e7:b0:59:41:66:a2:23:75:88:a3:01:86:38:
5b:50:0c:6c:91:1b:e1:2f:2f:84:a4:03:8a:57:fe:
5a:c0:91:4d:c8:72:97:20:fe:05:e0:2b:f0:de:ea:
13:19:11:1c:5f:15:78:35:b0:22:50:13:75:30:e8:
ed:bc:0e:19:43:fa:73:b5:57:92:ca:c4:87:ce:50:
b6:df:f2:5d:71:30:d2:ed:e6:8c:a3:d6:44:2b:5e:
6e:00:b6:93:09:5b:c8:4b:0f:02:7b:25:11:be:2b:
ec:ea:8e:4e:85:44:db:42:40:63:7a:0d:07:7c:ee:
13:15:08:5d:ed:06:2c:b3:7b:5d:7f:e2:26:65:54:
5e:e3:d0:60:fc:46:33:89:a3:33:cb:ae:fb:26:77:
d2:91:01:0d:de:13:8f:72:80:bf:f8:89:72:50:90:
78:06:8e:3b:48:8c:8f:1a:1b:d6:f8:d4:a2:96:dd:
5c:52:ec:a8:38:6a:ff:65:70:8b:41:a6:e6:41:6c:
bc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:50:5F:AA:11:27:AC:43:06:9E:91:55:37:1C:CA:8F:DF:19:56:D6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2331f846-3447-4dea-ac7a-63323853ebb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:2000::/40
Signature Algorithm: sha256WithRSAEncryption
2c:92:43:3d:a6:cf:39:9d:8e:d9:55:a1:15:a7:a9:03:e3:e9:
19:93:02:ab:e4:cb:91:43:18:fd:02:05:35:8d:03:f8:1a:ca:
ad:f4:18:c1:61:4a:51:54:ab:d9:65:c6:f0:ae:c8:84:de:f5:
ab:aa:48:51:72:8d:c6:7c:4c:03:69:88:dc:30:e0:cc:b4:bd:
11:c8:8e:44:f7:5c:ba:80:c6:c9:08:1f:0c:a4:1d:32:e8:5d:
55:f3:17:1e:1b:40:60:ae:38:16:e5:73:f9:da:58:bf:c4:7c:
df:fe:b8:c0:2c:c4:1d:53:6f:b7:0e:99:3b:9d:49:dc:22:59:
22:d6:a8:94:9d:1b:35:de:f2:40:ba:6e:ed:28:17:95:d4:37:
2a:43:ad:28:f9:39:8d:c9:95:f0:8a:a9:14:7d:82:a7:47:6e:
1f:47:a9:7d:86:b1:12:a5:87:8b:4d:6b:a6:86:d5:24:a2:81:
14:ac:de:e3:c0:59:7f:ec:4d:87:e3:9e:50:6b:5a:19:ec:df:
49:c7:a3:09:7c:6c:0f:9e:30:f9:b5:98:4f:e2:de:e4:3b:02:
f8:44:61:81:4a:12:fc:2c:29:9e:e0:42:9d:6a:dc:63:af:56:
d3:70:2b:1f:f5:20:bd:5c:55:4a:01:ae:38:6e:05:53:2c:97:
4a:d5:30:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:18:18 2025 by rpki-client