Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/81574dff-feff-4992-98e4-f8b95431a28d.roa
File: 81574dff-feff-4992-98e4-f8b95431a28d.roa (raw, json)
Hash identifier: 7jjImjGzvjS0Pvt8Y8PK2UifAvtLtVHrx6A20uke0v4=
Subject key identifier: 00:DB:FD:96:70:11:D7:CE:B2:F9:11:13:42:97:6F:0A:BD:3B:EC:45
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3014112F53046AF5B1E1B5DEBBB55C3496014EE2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/81574dff-feff-4992-98e4-f8b95431a28d.roa
Signing time: Mon 16 Jun 2025 20:40:05 +0000
ROA not before: Mon 16 Jun 2025 20:40:05 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:9040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:14:11:2f:53:04:6a:f5:b1:e1:b5:de:bb:b5:5c:34:96:01:4e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:40:05 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=1579541a9a5d803e747667f5874b886c93c5647619f3e99ee38cc081cf4f845a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:1e:b4:bb:81:ec:8d:1e:ea:52:ac:32:c7:
0b:d2:c1:b2:4a:dc:83:d6:d1:60:f2:8a:e5:ba:61:
75:30:15:93:4a:5d:f5:72:ed:54:f1:8b:d7:3c:b9:
af:15:89:14:3b:0b:08:02:99:03:06:4f:d8:a8:b1:
3e:df:7d:e7:50:03:ad:29:19:9c:55:c7:7f:ec:f9:
c8:91:8d:3b:26:82:e3:f3:ee:f7:51:42:a2:09:5d:
eb:b2:d9:4a:26:e6:db:e0:fc:f5:8d:13:f7:b6:ec:
fa:37:c3:9b:cd:7d:8f:c9:c8:f0:74:22:89:1e:6f:
f9:ec:5e:67:70:cc:2b:5b:e4:85:ee:18:d2:7f:ad:
8a:ce:3c:49:39:f7:10:f5:6d:1a:24:79:23:70:0c:
7a:62:6e:6b:c2:13:d4:c0:0d:77:9e:88:ef:e3:0e:
2e:4a:0e:d2:45:95:ff:b0:7a:57:a2:62:64:20:a9:
46:62:78:89:7a:11:d2:3d:d7:e0:b3:2f:e0:03:31:
2b:fc:63:6f:27:45:29:40:ab:94:e3:a4:41:61:a0:
52:c3:c9:ea:04:95:c8:43:6e:46:19:87:03:12:18:
58:95:59:89:fa:24:f3:1a:b2:01:3d:33:fc:42:9a:
ba:1f:65:df:61:42:97:8b:3f:95:77:05:b9:a1:c7:
c8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DB:FD:96:70:11:D7:CE:B2:F9:11:13:42:97:6F:0A:BD:3B:EC:45
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/81574dff-feff-4992-98e4-f8b95431a28d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:9040::/46
Signature Algorithm: sha256WithRSAEncryption
ba:8b:15:ec:61:62:45:e1:73:a9:6f:ac:3f:3f:20:9e:6f:bf:
f9:6a:05:7c:39:47:30:5b:ba:c7:02:45:ec:95:7f:3d:9a:48:
61:a1:be:98:fc:3d:78:43:92:34:59:78:6e:29:76:87:cf:8b:
d9:46:e2:95:ad:5e:e8:bc:49:a9:c1:58:82:d8:f8:ff:53:f7:
5c:40:75:6c:03:89:a9:f0:17:1c:bb:87:5a:ec:64:1d:6c:ea:
d2:24:68:22:ac:e3:a5:61:93:96:cf:2e:97:69:0a:3d:d4:8d:
70:aa:fd:6f:e4:8f:65:8d:4c:53:ca:e2:33:41:cf:80:56:1d:
d1:99:8b:08:53:bf:0b:3c:38:a8:4e:b5:20:23:ae:70:5d:e0:
c1:72:04:06:61:cc:1f:24:1e:98:06:a5:cb:46:84:96:6f:2b:
56:d8:1a:f8:b0:b6:54:64:6c:c9:49:4e:2f:5d:eb:3d:0d:cc:
a8:76:e9:6b:50:b4:23:a8:63:86:34:ea:27:82:eb:06:db:ce:
ca:4d:b1:12:5a:d4:0d:e9:43:de:4d:89:41:a6:d2:8c:5b:c5:
0e:0e:4b:93:9c:cc:9e:b2:2b:cb:97:6d:fd:f6:97:42:8f:08:
04:bb:f8:89:75:03:f4:54:b8:95:b1:6d:b7:d7:0e:79:81:63:
fe:83:f4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:34:18 2025 by rpki-client