Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e377775-7db2-4fae-bcbc-22d3b84a24f5.roa
File: 2e377775-7db2-4fae-bcbc-22d3b84a24f5.roa (raw, json)
Hash identifier: uL2VIRpXbD0qzeu3OPNkqpLUuJMyZnQcQUFCikCEPJ0=
Subject key identifier: F4:F9:F6:E7:16:FC:20:66:F4:24:07:8C:90:7D:F1:A8:FB:CE:18:68
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 105307EC77BE670095E61B7026F839A2018F1B0C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e377775-7db2-4fae-bcbc-22d3b84a24f5.roa
Signing time: Mon 16 Jun 2025 20:51:08 +0000
ROA not before: Mon 16 Jun 2025 20:51:08 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:53:07:ec:77:be:67:00:95:e6:1b:70:26:f8:39:a2:01:8f:1b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:51:08 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=b4c3fadb153edd75658e1e4b552e31533db30bde34b0e4e00621f08651e0a043, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:f9:63:3f:55:39:42:d3:83:26:88:89:61:
45:2e:c6:1a:53:92:36:8a:d7:f1:67:60:b4:dc:69:
82:60:bb:ca:38:0a:18:59:1b:9d:13:87:fd:d2:fb:
2d:28:27:c0:80:a2:75:42:9c:80:01:e4:80:95:a4:
23:7e:52:4e:51:eb:e0:f0:22:91:e3:33:ed:d2:36:
4c:18:c7:6f:2a:5b:6d:87:cf:7a:ab:83:6e:27:bb:
5d:17:fb:fd:e8:74:e1:af:c2:23:07:0d:89:7b:95:
99:c3:57:26:73:11:f4:5f:b1:b2:51:7b:8c:fa:b6:
7a:ed:aa:11:87:57:06:9c:41:62:50:b9:5b:b7:6f:
1a:c0:7e:7a:10:f0:ab:5a:21:42:09:39:82:85:ce:
cb:2b:be:34:e7:51:4b:c8:72:79:3d:f8:01:c5:9c:
21:a9:ff:52:5f:71:9f:33:c2:5c:81:88:06:c6:e3:
df:88:8d:bf:5a:3c:a7:ef:98:01:2e:1c:87:f6:4d:
0c:f6:74:b9:cf:9d:c3:ce:b1:ac:23:e7:b7:6c:0e:
97:cf:09:14:1f:ab:fb:6a:57:07:d0:fa:80:b7:19:
34:44:01:0e:44:05:02:fa:7b:13:7e:1b:d1:d2:9d:
04:3f:5b:32:5c:08:3a:21:ba:93:af:80:28:ff:13:
4b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F9:F6:E7:16:FC:20:66:F4:24:07:8C:90:7D:F1:A8:FB:CE:18:68
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e377775-7db2-4fae-bcbc-22d3b84a24f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:b000::/40
Signature Algorithm: sha256WithRSAEncryption
40:76:bf:84:91:b7:31:ac:e5:27:4a:73:36:03:d9:89:9c:24:
3a:a6:a7:e0:38:58:66:d2:06:35:ca:67:ed:ae:a6:e1:56:81:
28:18:b7:98:12:cb:15:b4:7e:93:69:c0:e2:dd:18:2b:cf:23:
fb:34:13:bb:6d:29:d3:3c:76:62:08:50:14:91:5a:ad:dc:74:
e4:9d:51:7c:cc:11:c9:aa:16:0f:61:64:a9:80:e5:71:e2:fd:
aa:bc:bb:65:bf:89:af:18:7e:58:d6:0b:dd:e7:c3:02:cc:a4:
e5:22:21:ed:fd:02:2f:82:cf:d5:8b:9f:33:0b:7d:34:6d:e4:
04:eb:b4:1b:76:b2:f1:3a:28:55:03:18:bb:7a:ee:fc:7b:e8:
0e:fe:d6:2a:4e:a9:d0:17:8f:59:1b:7a:99:a2:50:bd:91:af:
5d:93:b2:dc:cb:ea:f3:d2:d7:6b:13:2a:fa:3d:90:07:d5:32:
60:98:40:1e:25:3b:17:83:42:3f:81:ae:3d:61:4b:16:3b:dd:
90:a1:e9:ca:c7:ed:b4:20:c6:73:75:47:75:67:95:7d:f3:fb:
0c:d6:fe:4c:cb:1b:ba:28:9f:74:02:77:a2:d5:c0:28:4b:df:
58:97:b8:00:50:a4:b3:47:81:7a:af:f9:11:b3:54:a7:fb:fa:
7b:4c:5c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:23:55 2025 by rpki-client