Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5854e06a-c825-40fe-bf51-5b77d3ba4d02.roa
File: 5854e06a-c825-40fe-bf51-5b77d3ba4d02.roa (raw, json)
Hash identifier: 12NiHsXNtlnF1o0mHMTNeKFq7jfLutBRBuHwphs040o=
Subject key identifier: FD:4E:BE:C3:5E:98:4A:BC:4E:6B:04:EF:B1:22:94:89:D1:B3:40:59
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7E094AF229CD903A733BF48C109303B1906FF403
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5854e06a-c825-40fe-bf51-5b77d3ba4d02.roa
Signing time: Mon 16 Jun 2025 21:30:56 +0000
ROA not before: Mon 16 Jun 2025 21:30:56 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d016:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:09:4a:f2:29:cd:90:3a:73:3b:f4:8c:10:93:03:b1:90:6f:f4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:30:56 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=8fb096c9042116626300cb07a0ec0e564646abda6945bfc6cefa041a56692cff, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:e5:c8:00:06:4f:51:d3:c8:1b:f5:09:5a:
f4:08:01:ce:67:cc:75:28:2f:61:8d:ce:b7:0e:8a:
ec:e8:10:a9:bf:80:31:c9:61:49:6f:ab:cc:30:3c:
51:e3:74:2e:28:26:2b:18:6a:50:8a:c1:49:74:86:
9d:36:da:0d:09:10:dd:d7:4e:1a:58:d7:92:86:ea:
78:4f:5e:af:52:56:f6:10:f4:33:b9:74:3e:6a:61:
1b:68:8f:5c:13:28:14:99:3f:d6:ba:d7:74:d2:fa:
23:41:f8:02:ea:b6:e1:10:96:86:63:1a:e5:e1:25:
a0:6b:e2:7a:90:62:6b:76:52:c1:d2:82:a4:79:9b:
fa:49:24:e0:ca:20:73:2f:94:25:d4:39:ec:55:0d:
c7:4f:2b:ff:79:74:6b:a3:f4:1f:23:85:79:36:1c:
97:4e:8c:62:5f:eb:9e:6b:4f:f1:b1:1d:22:e8:69:
b5:03:e0:53:52:86:a6:e6:03:09:a4:aa:7a:28:ab:
3a:0e:3d:18:8d:ac:80:87:97:b8:12:91:4f:92:44:
a2:a1:c9:5a:31:b4:7d:82:b4:66:6a:10:56:41:84:
72:81:85:ef:62:34:c3:6e:b7:76:45:7e:2e:bd:00:
a8:3e:9b:96:18:09:b8:78:28:b3:8d:38:a2:cb:ef:
38:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4E:BE:C3:5E:98:4A:BC:4E:6B:04:EF:B1:22:94:89:D1:B3:40:59
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5854e06a-c825-40fe-bf51-5b77d3ba4d02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d016:c00::/38
Signature Algorithm: sha256WithRSAEncryption
89:24:8b:6d:b0:10:1f:67:34:0e:4b:74:39:6d:a9:4d:f5:6f:
1b:05:3b:3a:53:70:1e:9c:a3:ea:7e:9f:3d:f4:cc:3a:cf:b3:
a6:94:02:32:a1:f0:76:45:4c:48:f6:63:6e:62:dd:98:f0:a7:
44:c2:8e:33:d5:54:10:83:8a:bc:85:23:8b:83:7d:58:62:c9:
09:ec:92:19:a7:a9:54:d5:0b:5f:e8:c8:19:25:23:7f:d3:dc:
40:35:c6:da:e9:06:e5:c6:0c:eb:9c:41:b2:77:eb:3f:b6:77:
08:b0:71:c5:1c:cb:43:b2:1f:39:4b:20:c2:7b:10:45:79:d7:
74:f7:cd:56:8e:07:54:52:0d:63:ea:7d:2d:53:68:23:d8:da:
e3:54:46:6f:27:8b:62:1a:cf:46:d4:74:55:63:d1:ad:e7:c2:
2d:86:60:b8:e0:43:c5:96:ac:75:37:80:31:ae:6b:b6:be:09:
db:d1:35:21:78:94:b0:de:29:20:eb:16:be:19:2d:26:08:89:
b9:4d:75:ab:49:23:2a:cb:d7:9b:de:53:f2:2e:5b:3e:e2:20:
89:a8:23:35:81:c2:6f:e6:71:12:0a:67:86:94:9d:a3:1b:7f:
9e:56:31:b5:d2:84:82:2b:bb:02:7e:a9:e9:e4:21:2d:47:b7:
fc:64:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:51:23 2025 by rpki-client