Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28181159-5695-4944-b901-f84b836b4d8f.roa
File: 28181159-5695-4944-b901-f84b836b4d8f.roa (raw, json)
Hash identifier: DoRCqIW7rq6e1owBoAJMbFdZDbPohlDw1J/k/++cb5o=
Subject key identifier: 60:F6:16:1B:A8:45:BB:A1:31:6D:5E:60:E4:0D:52:99:D5:AD:34:9E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1C77E2C650D61DFC8D20DEF3199786B891E62AF2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28181159-5695-4944-b901-f84b836b4d8f.roa
Signing time: Mon 09 Jun 2025 19:20:07 +0000
ROA not before: Mon 09 Jun 2025 19:20:07 +0000
ROA not after: Mon 14 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:77:e2:c6:50:d6:1d:fc:8d:20:de:f3:19:97:86:b8:91:e6:2a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 9 19:20:07 2025 GMT
Not After : Jul 14 23:59:59 2025 GMT
Subject: serialNumber=31399926b666a87f709867e1fadfd9872469ccbe58b56ef01a26c3261e717e9b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f2:9b:77:cd:35:dc:8a:df:6d:d4:64:1f:90:
75:5e:6e:7b:68:cb:03:41:b5:95:c3:d7:54:81:74:
e6:02:02:95:c8:c2:15:58:5e:6e:4e:00:39:cf:52:
bf:3d:a2:9d:cd:b2:9d:c5:06:b0:d6:34:2c:75:70:
72:0b:26:5a:1b:3c:42:c8:b4:67:5b:02:9b:7d:4b:
f1:37:5a:02:d8:3d:8e:1d:6e:26:ab:c4:7f:56:6e:
99:0f:74:58:80:ed:56:70:c7:6b:12:96:da:66:a9:
49:75:b4:0d:cd:f6:f4:4e:f2:df:83:86:b7:1a:81:
92:04:75:9c:2d:b1:77:fb:23:ac:6d:32:e1:cc:23:
b1:39:c5:dd:e5:5c:16:09:a3:64:04:6e:a5:df:73:
e7:ac:2a:01:67:51:66:78:4d:dd:29:37:96:8c:dd:
99:14:2d:74:ad:7e:97:3a:d9:91:3b:37:3b:70:06:
1f:3b:6c:05:d8:26:26:84:1b:39:48:97:85:4e:11:
3d:e6:c8:4d:f9:84:5a:e1:48:34:22:00:0a:86:4c:
2c:a4:6f:d2:f5:ce:69:e0:dd:c6:87:f2:d8:84:19:
bd:7b:55:d1:a3:34:cf:c0:ed:27:43:18:6a:b0:d2:
37:19:c0:f5:4d:26:32:ba:e3:83:17:c9:e4:06:92:
f8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F6:16:1B:A8:45:BB:A1:31:6D:5E:60:E4:0D:52:99:D5:AD:34:9E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28181159-5695-4944-b901-f84b836b4d8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:9000::/40
Signature Algorithm: sha256WithRSAEncryption
98:10:b3:42:9e:1b:88:e3:51:b5:38:2f:97:9d:6f:c3:85:75:
d5:ab:7e:40:2e:23:28:d4:4b:82:9d:0c:70:56:9b:e9:ef:13:
a1:53:75:ca:31:f2:e6:a3:3a:83:c5:2b:78:bd:09:7f:02:7f:
8c:84:c6:ff:96:1e:db:83:f8:53:2d:4b:b0:8c:a3:ec:8e:89:
36:f4:15:10:10:94:85:87:3e:6b:6f:a2:d3:47:27:d9:da:e3:
68:4b:e7:fc:c5:cd:be:9e:1b:72:57:71:36:c0:1c:ad:45:98:
69:e9:78:93:c8:7f:17:95:f0:2b:f5:36:73:ef:dd:ac:ea:0f:
e1:7f:55:b5:08:7a:bf:ef:bc:a7:64:a5:dc:6b:84:90:55:37:
c3:5e:78:d2:62:1d:d9:bc:d9:30:4c:5b:55:43:ff:b0:8a:33:
66:64:d4:5f:48:b3:18:63:81:25:f4:68:23:2a:a0:c1:10:d9:
2d:fd:64:63:a1:c0:9b:bb:84:bc:c0:4d:0f:8e:75:48:35:db:
27:f6:77:c3:28:ec:18:4e:95:3a:90:3f:d6:b2:30:f4:16:48:
04:b8:62:d4:8d:68:60:71:d0:bc:5f:dd:67:b0:1d:3f:2b:68:
18:7b:97:88:81:b7:46:84:63:e1:8b:7b:53:e1:2e:51:85:c7:
bd:9f:9c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:03:05 2025 by rpki-client