Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7df76649-dcc0-4f8c-be6b-13fca27ec4f2.roa
File: 7df76649-dcc0-4f8c-be6b-13fca27ec4f2.roa (raw, json)
Hash identifier: c+ZdOXuXXu72lSTMLdqenLdnkOXqsKp518ZzQHjDJ7A=
Subject key identifier: 7C:FC:23:A9:1D:1F:44:A1:B2:FA:42:78:A9:04:D6:0B:67:10:6C:C3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7C1072FC4393EA60ECAB02666E0194A8D3C4B9B9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7df76649-dcc0-4f8c-be6b-13fca27ec4f2.roa
Signing time: Mon 16 Jun 2025 21:31:00 +0000
ROA not before: Mon 16 Jun 2025 21:31:00 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d012::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:10:72:fc:43:93:ea:60:ec:ab:02:66:6e:01:94:a8:d3:c4:b9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:31:00 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=7be84e8df45ae04fe14ab5004676f3f9eee7bcaa0ddfe766f0cd63966da01044, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:34:32:cd:8b:60:4b:0a:ca:93:31:2c:11:9f:
21:48:9d:b6:13:a5:ae:f1:fb:5e:16:17:12:e5:89:
dd:41:9e:b6:13:53:2f:7a:65:e4:2c:97:59:2e:22:
5b:55:af:70:a6:dc:c1:e4:61:00:c7:8f:5c:6a:71:
e8:c4:67:0f:8f:91:8f:7e:2a:71:a8:e9:ae:5a:50:
26:1b:82:88:1a:7a:34:b8:28:ed:00:fe:04:f8:66:
7b:0f:cf:7d:a7:2a:17:bb:a1:71:c5:7c:5f:15:e0:
62:e8:45:6e:e7:26:97:b2:24:be:ab:86:64:2b:8b:
ed:0d:e7:2e:a1:bb:88:c7:30:59:66:d5:68:7e:d8:
ed:df:be:ed:59:c4:28:52:5c:65:94:09:2c:d3:f3:
86:f7:b4:b8:d7:5e:98:67:16:a1:12:4f:07:3a:6f:
f3:8b:e1:3b:ba:64:69:29:bc:96:26:36:7d:bf:13:
90:8b:d8:91:19:4a:5d:e2:81:14:a8:5c:7c:f8:2f:
da:75:8b:80:fc:3e:14:2a:c4:c9:90:2c:cf:b3:89:
ba:f6:02:07:d5:37:4c:05:60:18:0f:66:83:ad:99:
2a:7c:17:70:03:74:69:e9:59:83:78:00:0b:5e:c5:
0e:ef:67:ed:b5:48:b0:f1:0c:cc:1c:31:e6:8f:6d:
0b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FC:23:A9:1D:1F:44:A1:B2:FA:42:78:A9:04:D6:0B:67:10:6C:C3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7df76649-dcc0-4f8c-be6b-13fca27ec4f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d012::/36
Signature Algorithm: sha256WithRSAEncryption
5f:10:c0:47:e4:ec:3a:02:05:0a:53:a6:d3:a9:23:6b:66:c4:
dc:aa:af:98:47:15:3a:07:51:48:eb:6f:23:7c:a9:77:f5:d9:
55:b8:38:ea:5c:db:e4:49:3c:62:e0:04:44:b7:0c:1e:39:57:
1a:83:a7:9c:9a:dd:7a:7b:ea:f6:6a:a5:5c:c2:6a:34:52:82:
ca:1b:71:59:1a:10:5b:ed:22:b6:45:2f:8c:ce:05:fd:77:ca:
b6:c9:45:f6:55:33:87:f2:d7:25:be:a5:4f:96:ce:e0:e1:e3:
af:79:62:69:f1:41:f5:d9:e1:66:03:08:08:ad:06:69:c1:b5:
76:e2:1d:61:6d:0a:9d:cb:a3:d1:d6:9b:9d:6f:f0:a2:1d:f1:
af:72:f7:bc:fc:79:66:8f:88:e3:51:a3:d5:9f:eb:06:d8:91:
f1:6d:29:30:08:81:0d:3b:c6:7c:70:50:f0:f9:43:f5:71:bb:
2a:6a:d0:82:ec:e6:dc:83:7a:98:ef:62:56:f4:da:00:23:fd:
93:db:6c:ed:c8:32:56:82:03:76:0a:be:3d:71:e5:2f:64:48:
9f:14:ac:b8:b5:fe:dd:c7:8b:66:f9:29:98:55:4f:52:b1:bd:
20:5e:30:cd:15:e6:d2:b4:3e:29:b9:bb:1b:28:52:a9:0d:f6:
77:f6:3e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:51:14 2025 by rpki-client