Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52b24640-f60c-42e4-9476-345e951e2387.roa
File: 52b24640-f60c-42e4-9476-345e951e2387.roa (raw, json)
Hash identifier: HKtaddpfNhIWRIaGXghOJEOr50bf0Vq4LWbDVqxrmHM=
Subject key identifier: 5A:7E:1B:2D:82:30:DA:E6:11:FB:EC:F4:E7:CE:97:F0:F8:C7:52:93
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 40180A01BE95727CA3EDF5D52B434492461BEDA4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52b24640-f60c-42e4-9476-345e951e2387.roa
Signing time: Mon 16 Jun 2025 19:51:15 +0000
ROA not before: Mon 16 Jun 2025 19:51:15 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:5040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:18:0a:01:be:95:72:7c:a3:ed:f5:d5:2b:43:44:92:46:1b:ed:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 19:51:15 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=15459d5ca0e73d9db56c3cb92068f37f451f40ff10558a54c7294bb70b923839, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:c8:fa:54:fa:87:da:12:70:86:2a:8e:64:
fe:57:e9:c8:a2:9c:3b:1d:ea:3b:98:87:e7:7e:8e:
32:e1:e0:97:c5:27:6f:7a:13:d6:10:08:d6:d1:a6:
72:1a:44:df:f1:4e:19:5f:6b:84:da:69:2f:e6:65:
37:7c:f9:93:67:63:80:55:e0:3f:aa:94:40:22:bf:
40:c7:11:32:ca:53:8f:9d:5e:df:41:e1:28:34:b2:
97:8d:24:23:bb:33:0e:ab:26:87:28:89:b0:2c:a0:
a0:6a:3b:b6:bf:4c:39:3d:75:a4:91:1c:a9:88:ec:
ea:3d:25:1b:89:58:13:41:f5:f7:cb:b1:59:39:6f:
95:27:91:a7:a2:64:70:79:b1:16:96:17:a2:33:09:
8b:f0:46:a6:31:b3:87:f8:9a:5a:93:31:eb:4f:67:
2f:46:6d:01:e4:7a:60:3a:dc:6a:79:7e:83:1e:83:
0d:2d:d6:6a:2c:6a:49:7d:c1:1b:2a:c0:9f:fe:b6:
39:1f:93:19:d2:9c:e0:1b:f4:18:2a:4c:79:0f:eb:
b7:33:a9:71:2d:dc:ca:80:7f:8c:a7:09:84:43:52:
31:f7:d2:bf:8f:83:cf:73:03:84:fc:38:da:f1:55:
7d:03:4e:5e:6c:96:27:08:60:b0:26:23:52:64:de:
24:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7E:1B:2D:82:30:DA:E6:11:FB:EC:F4:E7:CE:97:F0:F8:C7:52:93
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52b24640-f60c-42e4-9476-345e951e2387.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:5040::/48
Signature Algorithm: sha256WithRSAEncryption
8e:70:10:a2:b6:42:23:81:9e:b5:e1:eb:61:ba:a2:c7:0d:6e:
65:a6:c6:1a:d8:d0:71:03:42:30:cc:2f:ab:a1:4b:aa:29:e5:
ab:ae:fa:89:c0:2a:ba:3f:78:9b:89:35:0f:88:eb:9e:99:20:
34:76:ae:23:8d:6f:2a:28:24:0e:0c:e9:d6:1d:c3:ce:95:cf:
09:51:d3:f4:af:cf:e6:c7:18:be:50:c1:56:0e:31:73:5a:80:
7c:2f:8b:39:e0:2e:23:8d:97:eb:45:93:24:da:db:9f:2f:31:
9a:f6:cb:8a:5f:2d:cd:21:95:fb:53:9e:80:0e:b3:2c:e9:f8:
ab:5d:7e:ba:06:47:33:73:7b:a0:a7:bc:07:89:9d:4f:05:30:
cd:c1:76:3b:7c:d7:11:b1:e3:c0:16:48:22:20:33:0e:b0:20:
be:29:3a:c1:b5:a3:95:1c:71:e4:f0:af:86:9c:fa:db:cf:24:
2a:d0:8d:72:13:70:79:8a:88:32:af:45:c4:d0:1c:00:ed:dd:
db:22:7e:4f:2c:65:fd:de:f7:95:49:1e:20:24:a6:03:5a:52:
02:ac:c8:aa:4d:93:82:5e:c3:7c:ff:0e:8d:bf:08:fe:bd:9b:
b8:83:3f:5e:9b:f7:e6:b7:5b:4d:b6:19:1c:8b:7e:dc:23:78:
c4:ae:bd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:35:14 2025 by rpki-client