Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a585e9d-8bf0-4bc1-ad7b-b6c3e0bf9b93.roa
File: 5a585e9d-8bf0-4bc1-ad7b-b6c3e0bf9b93.roa (raw, json)
Hash identifier: VB1u70ekalZU9VI3TZciLPTRFADd9YEDdVz6FNdTsso=
Subject key identifier: ED:42:00:74:26:B9:BD:B0:55:3C:53:81:97:07:FC:0B:13:AC:45:94
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0562536E3378041A04AB9A1DAAC8E7B18C18D91F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a585e9d-8bf0-4bc1-ad7b-b6c3e0bf9b93.roa
Signing time: Mon 16 Jun 2025 21:50:16 +0000
ROA not before: Mon 16 Jun 2025 21:50:16 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d025:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:62:53:6e:33:78:04:1a:04:ab:9a:1d:aa:c8:e7:b1:8c:18:d9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:50:16 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=5f1040be3926aeabc0098f8091ea9d874030a32a212a762ef7eb3aa50b72bebd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:4c:85:0d:8e:b1:f2:05:84:84:d2:87:c0:
b8:38:0b:a2:90:97:10:d6:9c:46:90:43:71:b9:94:
de:d0:3d:d3:ed:c3:fa:3e:57:73:95:82:d9:35:43:
74:4a:38:fd:b9:5f:0a:fd:53:fd:f8:fe:24:96:f7:
45:2c:71:13:fe:fb:b9:3d:98:b9:50:36:26:7c:c1:
db:5c:0f:9d:20:56:96:83:8a:1c:5b:85:b0:d6:66:
5f:83:c1:7b:32:43:0a:60:3d:de:05:59:08:60:19:
48:75:a5:82:7d:a3:14:c8:23:37:0a:3a:9c:58:59:
5f:17:ac:d3:9c:4f:e8:fd:18:bf:d2:74:6b:fa:09:
d7:94:80:88:f8:3b:21:a5:4b:bf:2e:be:74:c2:b6:
11:88:5a:37:d5:ea:9d:d6:d7:75:21:b6:fe:b2:17:
79:61:f2:f4:cc:61:fd:30:b6:86:e4:88:40:45:bd:
da:86:2e:2b:d1:19:96:79:02:58:15:e1:a9:cf:49:
4c:75:78:8f:53:b7:58:50:6c:f0:22:01:1a:66:bf:
b5:64:4a:25:50:a4:4b:9d:3d:f3:a1:48:bc:6f:4f:
02:6c:31:85:0c:dd:d2:01:95:c1:55:43:df:08:d2:
66:40:3e:8c:11:f9:ee:a8:f5:cb:ab:a5:04:f9:df:
9a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:42:00:74:26:B9:BD:B0:55:3C:53:81:97:07:FC:0B:13:AC:45:94
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a585e9d-8bf0-4bc1-ad7b-b6c3e0bf9b93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d025:1000::/36
Signature Algorithm: sha256WithRSAEncryption
39:92:49:18:53:ad:e7:7f:1a:b4:3e:63:63:85:c3:ef:11:81:
c1:33:be:18:08:2f:b3:07:f3:8e:58:20:45:ae:8b:3d:e5:b4:
67:ac:97:02:39:7c:a8:ac:44:d2:7f:30:f9:e6:89:d4:c9:5f:
b6:6f:58:e9:37:6d:a1:9f:c2:cd:31:86:61:3f:aa:8e:83:08:
02:e0:35:ee:97:1f:05:58:e3:b9:c9:d8:36:7b:2b:d4:10:d5:
ee:e3:20:70:19:70:cd:2b:63:9f:79:b8:cc:d3:52:b3:8d:7f:
19:f9:7e:6b:22:ea:8a:c9:41:c8:8b:66:73:07:b7:20:5e:7c:
3f:87:df:72:f9:f5:1a:51:78:2d:03:b7:2c:f7:03:cd:4b:cd:
06:36:58:f1:78:40:d1:c3:c7:93:a9:03:0a:21:7c:12:d4:ee:
e7:ee:98:37:6e:b5:21:42:c2:19:f2:07:46:c2:32:65:69:84:
97:ee:0f:4e:e0:0b:be:1c:88:be:d1:86:f3:09:49:c9:02:fc:
69:52:db:28:f6:86:a4:86:a8:b8:e2:d9:14:7d:0b:38:4c:0d:
e6:65:db:38:5e:11:95:71:5d:e0:fc:4e:a2:6a:62:bd:92:bb:
5e:60:7d:82:a9:0a:82:dc:cc:97:33:7b:b6:b7:ad:67:08:6f:
42:81:fb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:59:09 2025 by rpki-client