Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87659113-4050-43f4-ade6-cfd7a3483d5c.roa
File: 87659113-4050-43f4-ade6-cfd7a3483d5c.roa (raw, json)
Hash identifier: FqUdiI1/AMJbCR9t9I6twOKBs+p33d0KgS50p9UAL7o=
Subject key identifier: 83:31:A9:FD:6B:C6:16:8D:D0:49:36:A4:ED:88:2A:81:10:FD:E6:C9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 55A7C5479F7F5185FD50A99119E6AF2CDF787DDA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87659113-4050-43f4-ade6-cfd7a3483d5c.roa
Signing time: Mon 16 Jun 2025 21:21:21 +0000
ROA not before: Mon 16 Jun 2025 21:21:21 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a7:c5:47:9f:7f:51:85:fd:50:a9:91:19:e6:af:2c:df:78:7d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:21:21 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=38efd89ed82bf276c039932e0fae40f898d8ab20c936fdd5fb5c3be27e3a3bde, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:32:1a:6b:64:b1:21:f4:8d:d2:74:e7:f8:
e1:5b:ed:ae:e5:e6:9b:2c:78:c4:ce:7f:12:a6:22:
b6:58:66:68:5b:5f:f6:05:f4:ae:36:c3:b6:44:6a:
c9:e7:28:2c:71:34:c8:cb:aa:34:33:48:52:45:cd:
d9:3a:92:b2:0d:86:b4:d2:a0:30:82:98:63:c4:1f:
6d:1b:0e:20:71:43:e8:bf:cc:5e:dd:ba:e8:7b:65:
89:17:4d:a5:29:0d:2f:c2:e6:ca:60:2e:11:92:08:
60:1d:e0:d5:36:34:57:d6:05:07:3e:df:09:42:f9:
58:c0:15:70:65:05:b0:c1:71:fe:b9:48:4e:2f:2a:
9f:23:e5:e9:18:23:99:2f:d4:04:2b:6a:56:22:84:
b8:e7:fe:30:5d:d1:d5:df:b5:ba:f1:60:0e:a0:32:
4b:f5:b3:bb:01:18:67:38:0a:12:b9:7c:87:8d:67:
ac:04:84:c6:2f:27:d4:d0:90:49:03:49:60:79:6a:
50:b4:d0:36:f0:b1:da:9a:10:95:02:a2:94:cf:cc:
11:3c:9e:1c:d5:bc:e5:d9:29:9b:9e:e9:a5:11:df:
72:e6:5c:6d:18:1f:9e:29:4a:9e:6d:f4:0e:a3:46:
71:64:03:23:27:cf:5c:d5:cd:b9:aa:22:ad:96:1b:
15:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:31:A9:FD:6B:C6:16:8D:D0:49:36:A4:ED:88:2A:81:10:FD:E6:C9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87659113-4050-43f4-ade6-cfd7a3483d5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:8000::/40
Signature Algorithm: sha256WithRSAEncryption
5c:76:74:a6:33:43:0d:16:4f:07:21:30:f2:55:22:01:87:6a:
ff:de:25:56:30:90:bb:df:0b:d7:f1:94:ac:c2:cf:f0:33:d7:
9e:55:b9:85:f9:9d:fc:f9:5a:09:5e:a5:e4:79:2e:93:99:a9:
8d:0f:f8:4b:63:86:a9:b6:53:c4:45:26:80:d8:34:36:bb:2d:
ef:9b:9a:8e:62:c7:95:1e:44:a4:ec:c6:1a:5e:4f:3b:b1:0f:
7a:53:8a:13:0b:7c:6b:7f:d5:2f:28:71:e9:4f:2a:d3:f2:0f:
5b:c2:57:93:80:3c:71:07:ed:cb:2b:1d:ec:5c:a0:b3:9f:74:
85:90:20:e7:83:a3:c8:77:8c:55:de:6f:5c:e3:4d:54:ab:66:
73:3a:6d:70:6a:ad:cf:03:fc:77:a4:a0:05:2f:33:02:90:08:
84:70:ca:53:ce:29:b3:b8:3c:a4:50:2d:f6:1f:fa:af:e1:8d:
0f:7d:b7:11:0f:59:1a:29:59:f5:b7:41:73:95:b1:ec:33:d7:
99:fb:22:4b:31:78:fd:36:08:3a:5b:99:b5:6b:64:fa:15:16:
88:02:b1:ad:8f:7d:ab:0b:54:be:72:c6:b1:3a:6d:ea:f3:17:
22:77:7c:b0:a6:9f:e7:ed:9f:55:6e:0d:94:0a:e1:72:f8:cc:
c1:27:af:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:56:54 2025 by rpki-client