Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa20760-fb28-4393-bec8-9ffb467f03e4.roa
File: 4aa20760-fb28-4393-bec8-9ffb467f03e4.roa (raw, json)
Hash identifier: ZOBcAVBWasKhVehGugQVRpkAnh0YI/Yb4sabTrn7l/M=
Subject key identifier: 92:20:60:D2:54:27:34:F3:33:FA:C8:4D:9D:2A:65:BF:BE:A0:C3:58
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 418405CE6D2D00BA1EAC004001EFEA5773EF9796
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa20760-fb28-4393-bec8-9ffb467f03e4.roa
Signing time: Mon 16 Jun 2025 21:11:25 +0000
ROA not before: Mon 16 Jun 2025 21:11:25 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07a:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:84:05:ce:6d:2d:00:ba:1e:ac:00:40:01:ef:ea:57:73:ef:97:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:11:25 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=4b68e48313d04f53e3720116d156dd4943c02fd686c4e31d10d8b61222139c90, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:7f:bb:79:9f:07:24:05:ee:de:17:3f:ad:
e1:de:c2:8c:8e:1c:60:e1:17:c3:2b:3d:9a:0d:95:
10:26:44:c2:d2:f1:d0:62:50:d4:b1:61:9b:22:43:
29:ad:88:0d:ae:d4:fe:f4:28:ae:3a:7c:2e:94:ab:
c6:3c:65:89:07:30:8e:9c:32:0e:53:6e:ba:b5:fd:
18:ea:5d:cc:05:d1:37:05:b0:5d:cb:b0:eb:b1:89:
f7:a4:76:8d:8b:70:4f:a3:2d:72:9f:ae:ad:23:9e:
2a:44:0c:40:77:84:ca:be:c4:de:a5:fa:7b:fb:72:
40:10:88:04:81:a2:8f:d1:78:50:44:3b:b8:96:99:
df:ec:8a:3c:3b:de:60:00:53:d9:ee:a6:c2:e8:43:
0e:ba:6d:7b:cf:ac:1a:43:69:5d:f1:cf:49:0d:8e:
ae:a8:86:7d:eb:b0:56:53:96:fc:60:e1:fa:a6:30:
4f:dc:f1:8c:35:97:a2:f4:09:9c:83:98:eb:ba:0d:
f7:f7:3e:55:0d:3a:6b:0a:49:83:85:aa:75:b8:80:
58:b3:c6:c8:00:8a:ad:a0:d0:d7:c3:10:d5:77:c2:
c0:33:c4:4f:47:b3:18:2f:35:e0:25:74:9a:8c:fc:
16:75:a3:5c:56:1a:53:ef:4c:3f:5e:fd:eb:38:b6:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:20:60:D2:54:27:34:F3:33:FA:C8:4D:9D:2A:65:BF:BE:A0:C3:58
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa20760-fb28-4393-bec8-9ffb467f03e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07a:6000::/40
Signature Algorithm: sha256WithRSAEncryption
25:e7:73:2e:04:f4:e3:22:e8:13:f8:7d:e5:08:60:37:a4:4b:
62:ab:53:8f:9a:03:15:61:f9:02:c4:64:5f:d7:4b:cd:1d:2b:
ad:6e:3d:89:15:05:e8:51:28:57:ce:a0:c9:e0:da:aa:4f:96:
ac:2a:79:d2:56:fc:94:f2:1e:ee:9a:d4:73:7c:f6:1c:dc:cb:
eb:34:07:b8:5f:14:85:cd:0a:c2:03:68:4e:1f:5c:05:0d:2e:
12:6d:97:a6:7f:ec:31:f8:fb:23:5a:60:46:cd:8f:45:76:7f:
65:9b:0f:c4:89:8e:24:13:cc:d9:9f:1d:12:df:81:8f:b4:f1:
35:45:42:c0:2d:af:6c:43:26:bb:db:6c:07:71:9e:6d:f3:65:
9e:a3:9d:48:13:c9:40:f3:f1:c5:2f:0f:d7:e9:49:5b:45:32:
b2:cc:fa:f5:db:e7:97:c7:ea:2f:f3:20:35:00:ca:b3:75:28:
10:57:cd:9d:ba:2c:4e:11:03:f6:b3:fc:f4:8a:19:f0:be:ed:
3d:1d:23:0b:2f:45:31:c1:9d:d4:e8:e6:dc:08:61:e4:94:46:
ef:2d:44:ce:7e:eb:b8:c6:c1:76:fd:64:68:fb:4a:bd:9e:0c:
00:2e:ea:5c:0a:06:f7:c4:d6:2c:5b:e4:ea:c2:59:cc:05:2b:
b6:3c:cf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:08:47 2025 by rpki-client