Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/743b08e5-dfbe-44cb-a9af-87de652b3c1c.roa
File: 743b08e5-dfbe-44cb-a9af-87de652b3c1c.roa (raw, json)
Hash identifier: WoqeJQQcW6UgWbAIsQ7o1UbApXvaPrAWazbMQWIREZs=
Subject key identifier: 73:89:2E:2F:E2:35:89:DA:21:47:39:A4:99:6C:C8:8B:84:F1:C5:E5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 43EF482A53DDAB7B46F0A2935928A2F2C3A7D2CA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/743b08e5-dfbe-44cb-a9af-87de652b3c1c.roa
Signing time: Mon 16 Jun 2025 20:31:33 +0000
ROA not before: Mon 16 Jun 2025 20:31:33 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:e0c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ef:48:2a:53:dd:ab:7b:46:f0:a2:93:59:28:a2:f2:c3:a7:d2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:31:33 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=790c8f641b6fac1d7bf815f950495e45f697488128a8fe35b10e9ff87e6eb7ad, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4c:11:57:00:d2:0c:4f:31:c9:f3:67:b7:36:
a3:cb:92:44:c5:c1:7e:98:97:31:28:22:54:26:59:
cf:98:d8:08:61:ae:07:92:3f:dd:db:ae:25:9b:ed:
4d:60:54:60:98:e5:97:9c:6d:52:ad:17:4a:3e:f2:
69:c3:18:52:d1:99:dd:79:f4:57:7b:7a:95:53:33:
c4:f0:40:91:7a:3f:95:fb:cf:24:19:cf:02:82:df:
eb:47:7d:69:ee:e3:41:a3:da:9c:4e:47:57:c2:33:
3e:66:88:6c:c5:fb:f9:3a:70:6a:5f:14:d1:fa:11:
fe:a6:09:e8:89:34:6e:89:dd:9c:ec:2c:ea:a7:11:
c9:be:2d:3c:2b:0e:e4:d0:14:62:21:c1:fc:86:db:
0f:fb:8e:ba:91:20:f2:09:a0:38:f2:26:0e:46:15:
e5:ce:8b:9d:c7:7a:7c:d0:4f:a0:f1:b0:05:79:98:
b7:41:f2:4b:b7:dc:a5:b5:66:65:34:fb:4d:0a:39:
f4:ed:b3:28:d7:94:f5:8e:be:97:5e:e1:5b:3e:c5:
e0:e2:ba:35:3f:92:28:2e:76:37:69:8b:70:12:99:
18:47:76:5b:e8:55:b8:67:01:d1:b7:ce:28:cf:c4:
c5:2e:4f:08:21:4b:ca:22:6f:dc:52:72:1e:42:85:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:89:2E:2F:E2:35:89:DA:21:47:39:A4:99:6C:C8:8B:84:F1:C5:E5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/743b08e5-dfbe-44cb-a9af-87de652b3c1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:e0c0::/46
Signature Algorithm: sha256WithRSAEncryption
13:c1:c2:05:b6:f4:e0:68:81:a1:ca:6a:c5:a3:0e:88:83:31:
fa:a7:36:95:2e:9c:7d:09:e0:fa:0e:81:1d:53:9b:fa:05:9a:
4d:a1:fd:df:0c:6d:27:69:5f:50:b4:98:75:c3:d6:46:f3:c7:
c2:80:d1:08:41:14:b7:a2:57:44:55:f8:b0:76:c6:7d:89:b0:
fe:87:0a:2b:c9:1c:b6:4a:68:be:83:b7:bd:01:bc:0f:ff:63:
d5:27:fe:45:55:c0:c6:ce:0c:a6:1e:26:f6:c4:16:f9:ae:d8:
37:19:9d:df:64:78:0a:2b:66:72:ba:78:cc:1a:e6:4a:37:d4:
66:c0:84:c5:2a:d8:a0:0f:53:eb:39:2e:78:c8:87:3b:8d:06:
11:0e:82:b1:79:25:b9:56:3a:b7:45:40:da:93:51:d9:63:64:
9b:88:bb:41:00:99:f6:6d:ef:f9:67:bf:47:ca:57:c2:18:de:
86:aa:e7:4d:92:37:1b:14:37:69:56:b0:8f:68:8f:03:7b:15:
2d:2a:b8:0c:e6:f9:09:36:74:7d:df:0d:fa:7f:2d:c4:f9:23:
a2:24:9e:28:34:ef:63:8f:7f:3f:ce:27:c4:d8:d8:ff:f8:cf:
c9:bf:26:e0:03:cf:24:2f:84:44:90:37:6e:d9:6c:7c:a7:b3:
47:bd:27:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:49:02 2025 by rpki-client