Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/290e67c7-7b75-4b9d-abc6-0c3ec34c1527.roa
File: 290e67c7-7b75-4b9d-abc6-0c3ec34c1527.roa (raw, json)
Hash identifier: A/1Tat1WIaK1RlDpBjBFPoT1PXGcZYZ+0Ih0lKSbwaU=
Subject key identifier: 6A:AF:48:A9:44:3A:E6:D6:6B:A4:75:56:B3:5A:01:89:D2:2F:3F:AF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 63B9F845AC4F20909B5CC0DDE986175E67564BFB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/290e67c7-7b75-4b9d-abc6-0c3ec34c1527.roa
Signing time: Mon 16 Jun 2025 21:40:55 +0000
ROA not before: Mon 16 Jun 2025 21:40:55 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02b::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b9:f8:45:ac:4f:20:90:9b:5c:c0:dd:e9:86:17:5e:67:56:4b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:40:55 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=0ccaf0cfec89008aadde40411470b7abc6d5e30a5b7d1004e7ae04fd00ea3d29, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ab:df:b9:76:9f:f8:bd:1d:9d:ca:98:bd:1d:
86:4f:1c:a3:7d:31:b9:6b:85:95:2a:53:ef:f1:cf:
77:d3:eb:d4:62:fb:70:73:f5:03:53:48:0a:c7:68:
7e:8e:32:97:51:eb:7e:ad:4a:cf:a0:93:aa:37:6e:
de:1a:61:e8:f2:bf:55:99:9e:fb:e9:3f:b1:25:a3:
fe:9c:b7:80:a9:6d:b9:35:ed:e8:cb:ee:8a:58:8a:
9a:1d:c9:c8:5f:b0:a8:85:75:e2:4b:2d:4e:5b:04:
f2:51:0b:e6:a8:29:8e:76:56:3b:1d:bd:5a:97:18:
5f:c3:09:f2:92:d2:0b:f3:4f:d7:c5:a8:2a:b8:f3:
6a:a4:29:d3:0a:da:f8:f9:5d:f2:b2:c4:0a:40:2a:
d1:f0:0c:e0:41:1c:fe:7c:ab:92:82:56:52:1a:0a:
40:1f:e3:c2:98:b0:52:76:41:28:b2:fd:2a:da:b9:
0d:37:2a:f7:6c:82:af:a7:fc:12:1e:68:01:aa:62:
f9:8a:0e:e3:ec:85:13:fa:80:f1:86:a4:9d:c3:96:
23:99:45:c8:bb:34:17:c1:5a:e9:bb:f5:5e:ac:fc:
b7:3e:c4:01:29:52:57:45:1a:b4:8a:fe:49:25:43:
e5:b0:cb:11:92:de:dc:07:1c:9e:5b:e5:7f:22:c6:
b8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AF:48:A9:44:3A:E6:D6:6B:A4:75:56:B3:5A:01:89:D2:2F:3F:AF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/290e67c7-7b75-4b9d-abc6-0c3ec34c1527.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02b::/36
Signature Algorithm: sha256WithRSAEncryption
44:e7:7e:dc:e6:a8:af:a2:d2:50:b6:3c:f7:2d:d0:e1:ef:dd:
91:66:93:85:fc:db:67:a8:a8:e0:f6:7e:60:a7:b2:87:06:de:
bc:d2:f7:c0:a0:fa:77:da:7c:80:aa:1b:2d:a0:2d:e9:ec:b6:
4d:b1:70:9b:47:d8:79:67:dd:8b:5c:ad:95:d1:ca:fc:c1:12:
ac:a1:fa:09:e9:94:ba:55:7f:27:22:28:67:4b:39:01:cd:a1:
a4:b8:bd:13:3f:da:ca:57:08:28:93:4d:9a:41:b3:2c:f8:c2:
06:88:c0:83:21:7b:d1:97:5f:fc:68:5c:af:16:94:cd:98:b8:
90:5e:7b:69:95:8e:ad:72:6e:96:38:46:e7:dd:f0:0e:d7:4d:
51:9c:5c:48:ef:99:a7:d0:af:9c:57:94:be:4b:c4:83:35:06:
45:00:07:10:10:45:d1:7a:c2:c7:8e:7c:11:93:09:1d:7a:c1:
1c:34:68:46:a2:6e:31:c3:6a:a2:45:af:a7:b9:48:f9:93:fa:
13:08:93:ca:3b:6a:b4:0a:bf:09:5b:86:3e:59:dd:42:34:0b:
8f:85:6d:c3:a7:9b:8f:6c:e0:11:43:6e:b5:23:a1:a5:46:ab:
2f:c1:12:c9:de:7b:2e:51:63:20:3b:55:64:17:79:55:e1:64:
42:59:9d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:52:23 2025 by rpki-client