Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6f8d79c6-b773-4073-9ff4-2210e6a111b7.roa
File: 6f8d79c6-b773-4073-9ff4-2210e6a111b7.roa (raw, json)
Hash identifier: 5yCDxCfwR3NPVWYBV361mjXWIbjXzAc2Oeuc3nRBjSs=
Subject key identifier: 19:7B:0D:3A:F8:DB:FF:64:A8:BE:C7:E3:84:65:FE:14:5D:B4:8B:2A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 68F3ECCD0F445B756545A8F93D4989302A912AB3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6f8d79c6-b773-4073-9ff4-2210e6a111b7.roa
Signing time: Mon 16 Jun 2025 21:11:14 +0000
ROA not before: Mon 16 Jun 2025 21:11:14 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f3:ec:cd:0f:44:5b:75:65:45:a8:f9:3d:49:89:30:2a:91:2a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:11:14 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=7a48bc7adc6ae32325787914a9cfbb8f7508d09bef6d32227b70b51e31d4877b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:e2:ef:72:79:dc:73:20:f9:29:ce:74:29:
95:42:5d:8d:60:ac:17:d3:18:07:66:eb:21:69:72:
aa:f4:ca:49:90:33:62:5c:c6:b1:6f:e6:e2:a7:c5:
f2:8c:2b:f0:72:fa:aa:99:db:9f:20:8a:28:05:af:
9a:95:2a:44:d8:64:36:9b:d1:6f:00:32:2e:4d:4a:
4a:67:7f:70:e2:75:71:36:f7:6e:56:5f:b7:87:13:
15:e5:12:5a:e5:38:a3:59:9d:72:7c:3f:aa:bb:c4:
4e:bc:d2:69:f5:d8:e7:4d:e5:86:3b:6d:01:06:eb:
96:52:4b:4f:90:34:de:8b:2c:09:49:c1:55:a6:c4:
c6:38:48:e8:bb:c3:2f:2d:48:85:5b:e3:0b:a2:90:
9d:56:0c:66:6e:38:42:d7:f4:62:e8:ec:f5:b8:bd:
f9:b8:fa:cc:35:ce:bd:ce:81:7a:93:2b:69:bb:a7:
bd:07:6b:99:c7:09:e1:8a:65:a4:c1:85:ea:bc:25:
7c:c5:b4:62:b6:07:ad:76:81:73:73:d0:76:4e:73:
a8:53:0f:97:2b:9d:45:47:31:07:e1:40:7c:dd:76:
9b:4b:c5:11:e8:0f:a5:08:f2:5c:c0:94:bf:03:65:
da:68:a2:91:9c:9a:de:75:32:cd:68:64:79:94:e1:
c1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7B:0D:3A:F8:DB:FF:64:A8:BE:C7:E3:84:65:FE:14:5D:B4:8B:2A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6f8d79c6-b773-4073-9ff4-2210e6a111b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:1000::/40
Signature Algorithm: sha256WithRSAEncryption
39:cb:0c:18:85:9d:f2:d7:65:3f:af:9d:cd:dd:5a:af:06:ad:
1b:0e:4e:a7:f7:d8:74:54:ef:47:f2:d1:30:70:39:93:8e:c0:
8f:89:ec:13:07:69:73:d9:ab:67:da:75:c4:4a:db:6c:b1:f9:
18:bc:a8:ab:39:16:27:bc:3f:2a:84:f4:3f:18:7d:6c:54:7d:
ff:1b:16:10:c5:03:5a:f5:ac:8c:97:71:5b:95:5c:80:3a:91:
fb:9c:be:2f:bb:32:f1:be:36:a9:09:d9:dc:d4:55:3d:c2:a2:
e0:3c:4c:88:7b:c2:a0:96:55:07:4d:8c:8c:6f:6f:75:94:33:
3c:87:ce:cd:e0:41:ae:07:5b:96:c9:df:39:a7:a2:9f:6b:bd:
34:37:43:e4:ec:e9:38:46:e0:89:60:44:ed:3b:05:10:07:c5:
d8:e1:e2:ca:24:de:d6:06:47:9e:01:29:6c:b4:97:8f:dd:cd:
b0:03:53:5a:0d:d9:df:5c:42:9c:fd:fa:55:78:1c:19:96:59:
cc:c2:5a:4e:55:97:0d:3a:18:d5:ee:90:27:d0:f1:4f:7f:4e:
5c:f3:80:d6:53:27:fb:dc:6c:b2:4c:a6:43:bd:0f:f9:4a:b1:
7d:e4:f2:8f:90:d8:0b:48:cc:08:e3:c7:43:86:b4:e6:da:56:
4b:be:e6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:32:08 2025 by rpki-client