Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93c73d28-6ada-4f65-bb8d-8fbee434c001.roa
File: 93c73d28-6ada-4f65-bb8d-8fbee434c001.roa (raw, json)
Hash identifier: PrPU6fv0P+vckJAQMM2K3D/4ZoerNsNDLZYcFFCSBWw=
Subject key identifier: AE:F2:BA:81:50:02:4A:50:03:11:02:8F:5F:F3:D1:D0:47:D4:66:64
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 64D8CB5D26F35B5BF3F5F085B7AA3DD786DC259B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93c73d28-6ada-4f65-bb8d-8fbee434c001.roa
Signing time: Mon 16 Jun 2025 21:41:24 +0000
ROA not before: Mon 16 Jun 2025 21:41:24 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d015:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d8:cb:5d:26:f3:5b:5b:f3:f5:f0:85:b7:aa:3d:d7:86:dc:25:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:41:24 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=c92a1ff213c6304629a3124b9cef7d04837fd29c2b039b8f1b1861d03169d319, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c0:08:a6:0f:ae:fc:39:cb:87:d5:47:b4:70:
fd:42:b7:53:8d:df:7c:52:48:af:82:ab:68:68:11:
e7:37:90:50:d8:bc:0e:fd:96:47:4b:84:95:c6:a4:
fa:e8:f9:f3:8e:b3:5e:f8:c7:5c:62:9e:b1:68:f1:
1b:b9:9e:a5:23:db:75:a1:3a:06:84:35:7f:2a:d5:
52:47:48:96:a9:18:df:2b:b6:bf:fd:8b:f3:85:ba:
38:79:1d:7d:21:b2:0d:40:44:41:9f:21:b1:bc:86:
ec:2e:16:c0:23:8f:7e:95:88:fd:e8:7c:7e:7b:be:
10:00:3c:8f:f3:80:b5:73:4d:80:fd:3d:e7:ac:d2:
e3:e3:58:d4:83:8f:3a:b5:f0:16:59:84:9c:ee:9a:
ea:5b:b1:f5:30:1d:0f:6a:e1:c0:f4:c4:47:11:9a:
21:cc:1e:e4:b2:db:63:5f:b5:87:14:cf:49:51:d9:
f8:1b:d2:80:4b:14:87:b3:ff:c1:cb:60:35:37:80:
7b:04:b5:fd:32:2a:a3:84:6a:6b:e4:3c:01:00:97:
33:58:48:fb:df:6c:35:61:93:c0:e7:df:01:1d:59:
f5:60:d0:d5:de:ce:c7:d6:d0:94:31:b8:10:e0:3e:
29:46:9f:e6:ac:80:3e:0d:64:f2:db:70:25:e4:55:
d0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F2:BA:81:50:02:4A:50:03:11:02:8F:5F:F3:D1:D0:47:D4:66:64
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93c73d28-6ada-4f65-bb8d-8fbee434c001.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d015:400::/38
Signature Algorithm: sha256WithRSAEncryption
0c:84:1e:f3:5f:0d:79:a6:47:c4:f6:41:84:89:cb:bc:00:23:
6a:04:51:fe:77:3d:30:a6:50:51:e7:d7:45:18:2e:8a:59:82:
a2:7b:e2:1f:2d:2a:7d:8a:73:1c:52:c0:88:e9:da:e2:7b:1c:
e7:b2:ae:53:e3:b1:55:2d:3d:32:af:be:14:d5:86:7f:11:0d:
41:7d:1d:ea:6a:fc:9e:20:dd:ec:e2:ee:80:bd:b0:23:31:61:
1b:4b:0d:85:eb:48:1e:8b:35:63:31:75:b1:62:f1:aa:40:7d:
15:1d:6a:74:57:ad:9c:1b:30:c3:27:7d:1a:cf:72:cb:12:77:
c3:dd:66:a4:98:af:60:e3:41:3f:d1:57:7e:c0:7b:05:54:5b:
9c:c2:97:5f:11:fd:62:40:a3:be:7c:70:13:90:fa:e7:5f:3a:
14:c5:f6:fd:c9:49:8c:8e:49:28:86:f3:16:a6:1e:05:82:62:
d9:2a:7f:e1:7f:66:f8:72:54:84:46:b3:f2:4c:3f:66:61:0a:
86:7c:e8:f5:59:cb:95:79:b6:ac:ce:b0:73:cd:68:30:c3:85:
db:06:68:26:a6:d8:cd:60:b1:14:9d:97:6a:dd:63:b1:4b:31:
aa:b6:38:9d:75:40:2c:7c:74:0a:26:6d:c8:f7:a0:d6:5f:df:
be:d0:51:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:56:30 2025 by rpki-client