Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/54aaecbd-f237-4e42-9d78-c366846bfd11.roa
File: 54aaecbd-f237-4e42-9d78-c366846bfd11.roa (raw, json)
Hash identifier: xi9ST8xV9vhoBsTLR/WRXhZ6nh2p2ISi/ghpjoxDABI=
Subject key identifier: 2C:74:C3:63:E1:3E:84:48:6C:14:67:6C:09:E6:24:C5:26:B0:B6:19
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6942BE5F291B0402ACBA49EC629F6ABCC3FB27CD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/54aaecbd-f237-4e42-9d78-c366846bfd11.roa
Signing time: Mon 16 Jun 2025 20:41:33 +0000
ROA not before: Mon 16 Jun 2025 20:41:33 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:42:be:5f:29:1b:04:02:ac:ba:49:ec:62:9f:6a:bc:c3:fb:27:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:41:33 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=9a5a07fab0dd8b9666ac5177ec07c80bc6ff12c5a03b8d69a637094ee58843b9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:3f:8f:b7:65:91:74:15:b9:33:b5:2e:61:
bf:51:f4:d8:0b:2f:21:a3:55:62:c5:20:d7:be:cb:
32:e2:7a:ee:3e:43:fb:8b:ff:e1:4f:7c:77:51:04:
4c:8a:db:d3:f8:d1:d5:9c:45:83:43:8b:38:b1:4a:
e5:40:c5:47:fd:8d:f5:42:4f:b8:90:0f:ce:95:aa:
43:9a:ea:ce:e4:08:7b:b4:1c:c7:ad:ab:59:1a:4a:
a1:ca:ee:b5:87:93:dd:ff:6e:b8:1c:87:23:d3:30:
b7:02:76:49:51:73:52:31:24:7d:e6:1b:ad:fa:f3:
c0:6d:fd:2a:4d:0b:a2:0e:37:81:96:15:6f:06:51:
23:75:9f:93:b8:d4:62:62:b6:a1:59:ac:9e:f5:cb:
d2:34:01:e0:2b:8a:33:9f:ce:32:4a:e8:ad:57:de:
31:27:2d:58:08:53:f3:35:9d:2a:e8:6a:a9:8a:68:
82:00:38:ec:bf:99:46:3f:66:47:fd:ee:70:3d:31:
c0:d9:78:e0:7b:26:45:fe:42:ae:0c:e5:b8:73:83:
5d:5f:80:6a:fa:b0:14:ba:ec:de:0a:c4:71:08:c1:
04:81:b9:7d:2a:7f:ad:cc:c1:0f:3a:1b:e0:fa:ed:
11:d5:f2:53:e1:5e:05:33:0d:04:27:f7:33:63:9a:
67:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:74:C3:63:E1:3E:84:48:6C:14:67:6C:09:E6:24:C5:26:B0:B6:19
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/54aaecbd-f237-4e42-9d78-c366846bfd11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:a000::/40
Signature Algorithm: sha256WithRSAEncryption
47:d8:2a:7d:c8:24:94:d0:c3:92:64:1e:a3:c5:7e:b9:38:e1:
7a:1b:26:66:c9:7e:6e:69:c1:f8:22:f7:d3:0f:86:06:18:66:
95:b2:12:c4:66:6c:cd:28:77:b9:69:fb:0a:56:ba:31:31:92:
c7:3f:8e:98:76:9b:a7:a3:75:4d:a7:53:f3:e2:30:1d:a3:81:
7b:a0:8f:73:4a:08:5c:19:2f:85:7a:ed:26:3b:0b:a8:91:3a:
c7:90:07:20:8e:1f:5b:a9:d5:bf:93:51:b1:f9:8a:4d:44:f9:
37:c3:2a:a4:eb:1b:02:16:b7:10:b7:91:77:d1:40:d0:28:d0:
46:c8:25:51:47:48:76:a3:dd:7a:14:1f:e1:d5:80:bc:4a:9a:
d9:60:1d:61:eb:9e:eb:96:dc:cc:8d:67:40:f2:30:03:0a:d2:
63:36:bf:2d:33:4d:57:26:b2:3b:9b:50:bf:ff:04:2a:d5:1c:
79:4f:cc:f9:d1:23:23:a0:fc:8d:e4:44:d3:c4:90:79:57:99:
08:e8:78:16:8a:f4:22:e9:16:5c:36:d8:b8:1a:bc:eb:5c:d0:
f2:60:5d:b3:a4:a3:1e:0d:10:87:56:16:3a:5e:b4:47:38:9f:
ed:8f:66:68:84:88:5e:b4:41:45:1a:0b:ea:22:6c:39:bc:d0:
14:2e:58:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:53:32 2025 by rpki-client