Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a25c5c84-0f08-47bb-96ab-7ab46c85a8e8.roa
File: a25c5c84-0f08-47bb-96ab-7ab46c85a8e8.roa (raw, json)
Hash identifier: j5NIhYvt0kW+HWcjhnGwzPlAgic7pYwPoFCMTbBgrdg=
Subject key identifier: 3B:D2:3D:83:C7:F2:A9:61:02:24:97:AB:25:C7:4D:79:37:46:82:86
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 72CF231E9519CAF7F764CD5B53FB45F9F81829F2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a25c5c84-0f08-47bb-96ab-7ab46c85a8e8.roa
Signing time: Mon 16 Jun 2025 21:00:55 +0000
ROA not before: Mon 16 Jun 2025 21:00:55 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:cf:23:1e:95:19:ca:f7:f7:64:cd:5b:53:fb:45:f9:f8:18:29:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:00:55 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=9e356bedc2135c8b27fa507dde36d7dd84e2d7d2d7a3dcb6ac625dd05640b91c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:40:1e:55:f9:b2:53:f2:07:7d:e9:3f:87:5c:
84:01:5f:49:2e:da:d3:1a:2f:69:33:ba:c8:6b:b3:
58:88:81:2e:fd:13:19:a1:d2:f7:df:d7:4f:04:90:
09:35:d0:1d:80:50:20:4b:4b:38:89:8c:41:04:5b:
1a:cc:9b:6d:82:66:15:36:2b:d1:bb:38:ab:d3:bd:
6e:f6:61:0a:e8:0c:4a:82:e2:0b:db:15:28:59:2c:
07:28:f8:2b:0a:d0:57:61:84:64:e9:62:a0:86:8a:
b1:7d:3f:a7:9c:b7:57:3c:68:ec:22:3e:c4:4b:12:
3e:50:7f:91:ff:09:9f:71:44:89:74:98:3c:e2:0c:
33:e0:31:02:42:ae:6f:6e:30:64:8c:15:da:4e:8d:
bf:0d:33:fb:aa:5e:76:5e:17:2c:89:76:38:8a:a5:
c5:b3:1c:ca:27:77:b0:85:27:98:f9:2c:56:72:c3:
43:aa:e1:e3:7f:ed:fe:11:ad:87:d2:0e:58:67:93:
36:62:df:cb:ed:8a:4f:e0:1e:98:95:f0:e3:42:3e:
f8:b6:f5:7f:3a:d3:bb:b7:a1:9d:68:29:3b:4e:11:
ec:02:07:5f:f7:e2:42:12:4d:60:5c:ec:54:a0:ce:
e5:2e:af:6e:23:8c:d2:f9:1d:2d:a8:f8:83:ba:39:
28:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D2:3D:83:C7:F2:A9:61:02:24:97:AB:25:C7:4D:79:37:46:82:86
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a25c5c84-0f08-47bb-96ab-7ab46c85a8e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:a000::/40
Signature Algorithm: sha256WithRSAEncryption
a9:52:aa:ed:61:b1:a6:4b:b7:4d:2d:81:bf:28:3b:81:2b:19:
6e:98:54:b9:98:d6:2e:2c:83:7f:b6:bf:4d:7f:67:28:f9:cd:
62:04:c0:f1:d6:e1:da:dd:79:d7:d2:b9:6c:f2:1b:ce:3f:dd:
ec:b3:a1:07:47:7a:fb:da:1e:c0:3a:eb:aa:1e:6f:ec:9a:e6:
4f:d3:54:11:33:9b:5c:da:2c:c6:1b:c0:c5:a0:2d:d2:51:c4:
e1:46:cc:f1:0b:de:15:60:2c:9e:fb:e4:2b:b7:ad:a9:d5:32:
59:c2:33:2e:97:4a:2d:29:0d:3f:b6:05:d4:9b:ef:22:a4:9c:
45:15:aa:e3:e6:cb:4b:5a:94:d8:70:b4:f3:dd:80:4a:1a:33:
64:5d:ea:cf:4d:bd:75:a3:5c:61:26:cf:4b:70:51:cd:7e:1c:
23:25:bf:ab:b3:17:02:16:81:a5:f3:b0:a3:97:0e:61:d8:1d:
92:bc:27:2a:12:1a:c8:b6:6b:eb:10:27:5d:a2:69:84:a9:c3:
fb:67:0c:9b:45:bb:c1:83:e9:ed:f3:a9:df:ae:99:62:40:b9:
f5:d3:df:1e:ed:cc:92:10:57:05:d1:03:37:5e:19:f5:ec:02:
99:25:9d:86:9f:68:5c:d1:12:30:26:5a:d6:7a:09:16:1a:bb:
79:cc:a0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:25:17 2025 by rpki-client