Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e3dd00a-f49d-46a6-b97d-d14ff1197f6d.roa
File: 6e3dd00a-f49d-46a6-b97d-d14ff1197f6d.roa (raw, json)
Hash identifier: E6Vo0+NKparzlH4xWkqvVgseP2IBXQQTG5Zf6MZQWiM=
Subject key identifier: A8:60:BD:7D:60:6A:CE:D6:58:7F:8D:EB:7D:66:6C:75:12:DF:A9:39
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1DE9AAD7F7E74C21CA9BDC2A278D9DDB36DE5E1C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e3dd00a-f49d-46a6-b97d-d14ff1197f6d.roa
Signing time: Mon 16 Jun 2025 20:40:10 +0000
ROA not before: Mon 16 Jun 2025 20:40:10 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:e9:aa:d7:f7:e7:4c:21:ca:9b:dc:2a:27:8d:9d:db:36:de:5e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:40:10 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=26f0f2b1238ae3d481a15efb14f8f7bf7a78f0bcb7f26b6f58bcd306f4e1fcfc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:2f:35:f6:5a:54:0d:8a:59:a6:0a:8a:76:
aa:91:e7:22:d0:9a:23:0a:86:4f:2b:92:ec:f3:18:
e4:94:1c:d4:dc:af:70:55:c2:66:45:55:ce:d8:19:
b2:ce:59:1b:3b:82:52:a8:9b:cb:96:b8:ed:5b:d7:
f8:cc:55:e8:4f:a4:cc:c8:9b:47:b1:a1:4e:d5:b3:
31:aa:0d:e4:8d:87:38:a6:be:59:b8:40:be:c6:b8:
a7:df:c3:14:b8:49:da:26:86:c2:c9:18:0f:4d:e4:
f6:12:3e:32:8c:24:10:40:b1:05:f4:46:ea:ef:0c:
64:50:a8:2f:7a:6c:df:18:14:8d:8c:49:73:7b:b4:
89:a2:43:5f:66:83:35:83:72:13:6c:46:fc:ee:fe:
77:f0:bd:5b:49:6f:4d:0b:a4:11:57:c5:84:cd:c2:
1e:a7:5a:7c:35:f4:68:dc:d9:34:b1:38:58:ad:34:
51:29:98:d9:28:18:5b:af:d1:2b:b5:40:08:2a:53:
bf:a0:bb:d3:4b:10:47:29:f9:11:c6:4e:90:3b:7c:
13:b7:00:ce:d5:59:9b:94:68:c7:82:95:d2:77:12:
30:d2:c8:ca:f1:98:d9:98:55:f7:88:8a:08:58:21:
1f:43:3b:f6:c3:1c:1e:51:2f:2b:6c:f7:1f:d8:de:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:60:BD:7D:60:6A:CE:D6:58:7F:8D:EB:7D:66:6C:75:12:DF:A9:39
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e3dd00a-f49d-46a6-b97d-d14ff1197f6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:e000::/40
Signature Algorithm: sha256WithRSAEncryption
7d:8c:0f:9f:10:93:11:23:e6:ef:2b:d3:9d:19:36:23:3a:d7:
03:a1:11:85:94:3c:e7:93:2b:89:bf:7c:6a:54:dd:a1:09:28:
a2:ea:ad:32:7e:85:7e:b8:ed:7f:e5:28:02:e9:9a:7c:21:32:
25:50:51:f5:08:0f:aa:d8:45:15:82:b6:93:e2:13:5b:57:e4:
e9:28:bf:1a:a6:36:37:d7:3f:b5:bf:e5:90:97:59:58:7a:1b:
c7:57:2e:37:6f:d0:59:18:46:6a:7b:be:d1:3d:27:c7:7d:95:
14:eb:66:7e:6d:1d:0d:dc:3c:1e:e6:12:96:a9:d1:e7:34:4f:
b2:c1:85:98:ae:95:28:5c:ad:e5:8f:39:99:cb:74:a5:fd:81:
9a:a8:42:69:24:1c:22:66:da:93:00:b0:54:37:f9:79:80:10:
3a:e2:b2:05:e3:05:66:d4:89:8b:a5:13:e0:c1:0e:27:68:30:
6c:57:ea:b8:a7:bf:d0:99:9f:e7:fb:da:c2:72:df:ae:19:aa:
cc:91:a7:66:11:1f:90:94:7d:e6:f7:c2:f9:b2:a3:98:26:8f:
4f:b8:d1:fe:e7:50:00:f6:b3:4c:1c:89:46:cc:ee:df:eb:6a:
15:6a:6e:64:1f:4a:d7:72:7c:74:46:85:3e:d4:09:2c:95:01:
fe:81:2a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:25:30 2025 by rpki-client