Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36851825-b64c-4907-b152-006b17b6b7d7.roa
File: 36851825-b64c-4907-b152-006b17b6b7d7.roa (raw, json)
Hash identifier: sa5BgN7cFp0lvyN1FlSCvqTOCMCKobx8m6dAbOjbQY4=
Subject key identifier: 36:08:31:6E:BB:2C:51:7C:7A:1B:BE:9A:C4:7A:1A:0B:40:2A:C7:77
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0C91DCD163E8683038EE8C875C3DCB466B7A3D2A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36851825-b64c-4907-b152-006b17b6b7d7.roa
Signing time: Mon 16 Jun 2025 19:40:37 +0000
ROA not before: Mon 16 Jun 2025 19:40:37 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:91:dc:d1:63:e8:68:30:38:ee:8c:87:5c:3d:cb:46:6b:7a:3d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 19:40:37 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=166cae6416eb647901723327a82af1f000e7d6896befe3772bbaf3d06a328214, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:89:7a:48:70:6c:ab:15:09:47:a0:91:0a:61:
f4:61:4c:3c:f3:8b:08:56:94:36:09:43:98:6b:89:
4d:0b:3b:b3:cc:5a:f1:e2:e1:47:a5:14:f0:cd:a6:
d7:df:a2:c7:7f:0e:ca:4b:5b:6c:d0:50:46:d0:63:
74:b7:13:5e:58:2d:fe:24:f3:3a:9b:65:d0:07:ef:
b2:3f:f4:a0:68:e3:6d:f7:d3:1d:06:07:10:5b:80:
14:a8:e3:54:17:41:d8:60:39:f9:6e:1b:7d:20:43:
fd:f4:c7:df:42:8f:fb:b8:55:68:78:cf:19:c4:9d:
e1:16:86:73:7d:8f:79:4f:e0:af:e9:18:7a:8b:46:
99:54:12:df:8e:97:2d:f1:59:98:cd:f0:b6:05:8d:
d7:1e:8d:cb:93:ea:d8:54:b6:d4:14:8c:59:9d:31:
aa:84:49:32:f4:72:00:7a:14:8b:ae:50:b0:57:1c:
7e:10:e6:f1:d2:f3:ae:46:2d:97:2d:8b:54:14:41:
75:22:c3:ec:99:8f:0d:3b:fa:16:55:25:d8:50:d9:
ea:a5:1a:35:8c:c4:29:1c:ca:a5:98:75:03:62:54:
9a:3e:16:3f:ff:c4:83:37:90:d7:4c:f3:cb:58:90:
e2:ff:9b:8e:67:3a:68:32:d2:8e:08:ad:af:bd:87:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:08:31:6E:BB:2C:51:7C:7A:1B:BE:9A:C4:7A:1A:0B:40:2A:C7:77
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36851825-b64c-4907-b152-006b17b6b7d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:b000::/40
Signature Algorithm: sha256WithRSAEncryption
b0:d4:f7:6d:a0:4c:93:3d:ab:49:93:c2:e5:28:f4:57:bc:b0:
1a:f3:94:93:66:52:2f:1c:55:03:cd:9e:e4:76:bb:9d:09:c2:
e3:59:0a:d2:c6:ab:64:15:60:7e:c9:11:d1:0e:a1:16:40:20:
3e:01:f3:aa:9e:84:d1:4b:5b:61:85:c7:80:34:da:7c:7f:ff:
3a:7a:84:f8:b1:fe:c6:82:f6:17:81:7f:fa:71:60:a0:e0:99:
db:cd:a9:48:48:8b:5f:d4:d4:34:bb:a6:39:db:07:b4:c6:02:
24:5b:60:36:04:ae:6f:29:21:79:b6:72:bd:b7:59:61:a0:ef:
2b:6c:58:70:cc:0f:84:bf:30:94:89:2e:0d:2d:46:33:ab:c0:
ce:cf:7c:c2:24:75:f2:d9:11:c5:fa:99:96:03:27:66:b6:4b:
d6:b5:92:5e:ff:1b:98:96:6b:6c:fc:ae:06:91:90:4c:a0:8a:
f9:48:be:98:36:bf:98:ff:08:72:f5:aa:e6:e5:b5:52:5d:00:
09:00:31:7d:2a:d3:d3:cf:4a:68:38:05:49:78:3a:69:ea:1e:
c0:00:37:11:59:77:4d:a7:f4:7b:5b:6d:3c:0b:5c:c8:4a:d2:
9c:e1:c9:11:7c:c4:93:91:00:38:d2:83:e8:12:ab:41:2d:6f:
41:1b:51:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:53:48 2025 by rpki-client