Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/898dbcab-881e-4370-98c6-9b1ac5214cd0.roa
File: 898dbcab-881e-4370-98c6-9b1ac5214cd0.roa (raw, json)
Hash identifier: gXhEXHCYypqN0jsT+t8nF6R/HEiIgZ+5U5VHqQ9vBMw=
Subject key identifier: 8F:92:F9:2E:0F:4E:80:78:DB:C7:BD:03:63:6D:EC:88:3E:8A:AC:E7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 103E0A081D462171475EF5422E335E1C5B6A6E82
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/898dbcab-881e-4370-98c6-9b1ac5214cd0.roa
Signing time: Mon 16 Jun 2025 20:31:08 +0000
ROA not before: Mon 16 Jun 2025 20:31:08 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:e040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:3e:0a:08:1d:46:21:71:47:5e:f5:42:2e:33:5e:1c:5b:6a:6e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:31:08 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=f9a1241ecdd14b326a5c4214c86f73ab7b6ecefc65c3f443ca63c9bc8fff9648, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:df:dc:7c:a2:3f:71:2a:c4:3d:26:2d:51:de:
4c:d4:7e:0e:b8:e4:f9:73:be:d9:00:88:3c:9b:ab:
cd:93:14:5f:ec:ec:96:af:34:26:7a:53:77:0c:b1:
95:61:3e:57:21:ca:4e:20:92:25:b7:dd:b6:d8:d9:
ed:d1:f4:08:5f:4c:8f:4a:9c:bf:0f:4c:a4:67:d4:
d5:d8:e5:09:f3:13:2c:6e:f1:41:0e:d9:4b:7b:bd:
53:a8:f0:7f:d2:f8:2e:71:68:28:f1:5f:85:c1:61:
66:1b:f7:0e:83:e3:99:ab:04:39:19:62:08:77:06:
69:08:bb:09:21:fd:46:9e:fe:97:0f:90:fe:6d:d9:
0c:07:77:e1:0b:2f:7e:c4:5e:29:04:cb:e2:f8:7e:
1a:d4:2a:2a:9a:18:6f:28:11:91:7b:29:b7:2f:36:
a8:74:93:f7:3c:a2:71:13:89:2c:ea:26:27:00:3d:
62:78:1a:7d:28:07:55:a8:53:fe:12:8d:91:d9:03:
ef:d6:fb:87:2b:5a:77:f9:7b:d2:97:fc:c6:b1:74:
c3:4f:51:0c:09:f5:b7:c9:34:13:8b:a0:e2:dd:4b:
50:f0:51:c2:be:19:66:a6:df:36:6f:e5:c0:40:ff:
9d:cf:90:ee:26:9f:00:3d:77:41:fe:45:be:fd:04:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:92:F9:2E:0F:4E:80:78:DB:C7:BD:03:63:6D:EC:88:3E:8A:AC:E7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/898dbcab-881e-4370-98c6-9b1ac5214cd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:e040::/46
Signature Algorithm: sha256WithRSAEncryption
2b:66:d1:2e:92:32:82:19:2b:fa:f5:98:f9:19:5f:42:ef:c1:
26:12:3a:82:42:29:50:d3:13:7d:1a:ea:84:04:3c:5c:27:2c:
0e:b4:b6:9f:6c:64:78:e6:39:7a:bf:ff:4c:8b:e1:ae:ed:17:
74:5a:05:48:09:c4:4f:a6:88:13:ba:50:ce:c0:50:2f:ad:7d:
e6:43:f4:72:38:91:8d:fb:51:f6:e0:40:95:ae:d3:b9:b8:f9:
b4:87:5c:49:04:4a:0f:35:de:68:0a:80:50:30:99:18:4e:4a:
02:b7:de:d3:37:70:e8:ed:d4:85:91:84:83:36:3e:15:21:27:
3d:57:e8:7d:a1:e4:4b:a3:18:b4:ae:c0:0e:c3:95:dd:76:62:
47:a8:d9:3e:3a:c1:a1:94:3c:4f:a8:59:37:40:0c:2f:47:85:
2f:57:34:e9:f3:41:e0:e4:a4:3c:ce:04:c1:35:16:79:32:b7:
ea:92:22:49:08:08:e9:4f:20:9f:94:7d:76:68:ed:fb:36:61:
aa:67:ec:26:b6:fa:1f:ea:29:4a:7a:1f:21:5b:a2:d3:e7:1c:
c5:d2:53:65:ff:68:c0:dc:13:7a:23:3b:a5:89:f6:f9:dc:07:
e2:d1:5b:89:67:d0:6b:e2:5e:c3:80:4d:46:23:1e:3b:8c:52:
74:4d:22:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:58:30 2025 by rpki-client