Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
File: 92f142f2-bd1c-4295-a008-efcde04ceb18.roa (raw, json)
Hash identifier: 0LxXPTbz+W4lLsm3qpZK3oyxqouRZ8I0maVKwMtXz8k=
Subject key identifier: 0A:D0:6B:16:B7:AB:37:2D:37:D8:8E:71:52:22:3A:36:50:D0:A5:A7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 278E2759F2D53EFE29E88B50A08B41B7F82454D9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
Signing time: Tue 17 Jun 2025 00:50:03 +0000
ROA not before: Tue 17 Jun 2025 00:50:03 +0000
ROA not after: Tue 22 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:8e:27:59:f2:d5:3e:fe:29:e8:8b:50:a0:8b:41:b7:f8:24:54:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 17 00:50:03 2025 GMT
Not After : Jul 22 23:59:59 2025 GMT
Subject: serialNumber=e9073ef0f49a4abb43b5d9e59b8faeffec73c19930a34b86b9473ddbc771ec88, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:d8:5a:c9:20:72:c8:74:5e:6e:77:cf:15:
a6:26:bb:68:f4:a2:13:98:ab:95:35:51:0c:cd:77:
e8:ad:c5:f5:7f:31:34:3e:01:3c:a5:2b:71:8d:2a:
d2:84:d5:c2:d2:de:d5:b1:58:b0:fa:b4:24:e4:63:
93:af:54:d2:ea:8a:a5:2e:c4:78:c3:14:22:e6:20:
89:ff:1e:39:4c:9a:db:56:1a:78:b2:58:dd:52:4b:
e3:16:17:e3:6e:bd:0c:89:c8:56:24:a2:94:36:b4:
db:e9:64:94:eb:41:56:46:61:22:93:bd:cf:bb:86:
05:44:38:63:28:d0:1a:1d:06:63:10:21:83:c1:e9:
5e:5f:42:b8:36:90:95:91:89:72:63:99:a2:9d:56:
12:73:e4:9b:97:c1:27:87:f0:01:61:1b:27:23:b5:
07:0a:ac:a9:b7:dc:b1:a4:69:c7:10:32:f2:bc:21:
8f:90:53:37:3b:05:08:9a:e5:9e:a8:e0:61:fd:be:
bf:a8:98:e5:57:6f:dc:c0:4f:25:e9:c9:84:88:56:
fa:d4:33:54:a4:4a:67:a0:61:76:3a:e4:92:90:23:
b3:58:2a:2b:ba:54:c4:8b:e9:e7:1d:8b:6d:e7:3a:
9d:e2:e9:8c:9f:b8:65:f3:fa:75:2b:7b:6c:8b:8e:
d6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D0:6B:16:B7:AB:37:2D:37:D8:8E:71:52:22:3A:36:50:D0:A5:A7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.16.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:87:f9:bd:65:ee:b5:3a:bc:16:2a:a6:86:f2:e9:32:29:6d:
48:1b:d1:a4:26:3d:13:6a:cc:f9:25:0c:97:41:0d:82:01:06:
05:8e:ac:66:a1:ba:84:b9:47:e3:62:0a:e1:b0:3d:01:ef:ff:
9c:eb:db:a2:86:d2:ba:85:18:83:62:e5:51:7c:6f:f0:26:ca:
2f:94:09:08:34:94:a8:c1:50:55:6c:c2:ea:f1:70:06:8c:65:
fa:3f:35:2a:11:5e:2b:81:9d:6d:ce:a0:2c:c5:65:f1:64:ef:
f3:86:10:28:7b:8c:10:6d:5c:3b:f1:3b:cd:4b:12:c9:0d:9f:
17:bf:dc:7a:f4:af:43:13:8e:a8:70:c1:a4:ed:e9:7e:24:70:
59:b8:fc:e7:80:5b:01:4f:2e:35:16:5e:fa:8b:9f:6e:e7:5f:
50:54:7e:d0:15:35:72:f1:5a:dc:1b:70:10:fc:a7:1c:67:ce:
3d:71:ff:51:48:43:b9:f4:78:5a:ab:b0:34:ba:9b:09:35:aa:
b4:e5:b4:b3:57:6b:3e:18:33:b2:4c:8c:b0:7f:83:99:a2:78:
a2:59:15:a3:ad:8d:24:56:11:f8:65:ac:02:58:c3:38:73:cf:
15:f3:c4:0f:9a:bd:47:31:52:61:73:7f:92:c8:79:3e:02:ef:
b8:f3:0b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:24:40 2025 by rpki-client