Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5076366-3004-428c-8b4e-9132d17cf171.roa
File: a5076366-3004-428c-8b4e-9132d17cf171.roa (raw, json)
Hash identifier: oHyl7bFwmoVYzHGtGqknwIp3fdo4XQxfZMCmTnraLuU=
Subject key identifier: 0A:7C:B4:DA:9A:A1:2C:42:58:47:E8:53:31:29:F9:BC:EC:E0:F5:A5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 16E567E8A9B2EA1FC4DE37BAE75A97B4EC477441
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5076366-3004-428c-8b4e-9132d17cf171.roa
Signing time: Mon 16 Jun 2025 20:41:18 +0000
ROA not before: Mon 16 Jun 2025 20:41:18 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:1080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:e5:67:e8:a9:b2:ea:1f:c4:de:37:ba:e7:5a:97:b4:ec:47:74:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:41:18 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=938f940b61b469c83a0860ed300d3aa1951a30cd9b7d635f6bf0392c41dd1037, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f2:7b:a8:aa:67:6a:dd:51:2c:29:d2:5b:e2:
95:b3:81:d6:0a:05:40:93:f5:e3:49:67:61:c7:f3:
ad:1f:f8:42:cc:37:12:cc:dc:cb:6b:6c:2c:fb:51:
13:91:f5:ad:f2:50:1e:b6:60:25:f0:b4:f3:dc:8e:
91:eb:36:dd:18:89:20:ca:da:89:9b:29:f3:4a:de:
88:3f:10:67:b6:d4:bc:84:87:01:15:e9:50:f8:06:
80:5d:25:e0:2a:64:0d:c3:34:b8:58:7a:6a:82:a8:
a7:53:22:cd:b6:c7:aa:7c:f5:ca:ca:ac:3c:f2:d5:
6d:fc:a2:cb:15:d6:dc:8e:e6:de:44:e8:1a:95:46:
0f:d7:9a:e8:15:8d:6f:7c:a2:f9:96:86:48:ef:93:
5a:aa:31:ed:c8:78:85:44:4e:19:0a:db:7b:83:c2:
e5:d3:ad:ac:55:74:8c:06:0e:74:bc:fb:d1:e3:fa:
ce:7b:8b:71:31:38:f5:76:a6:58:bc:7f:24:60:e2:
7e:df:27:ea:eb:48:13:36:5c:ca:64:55:82:57:43:
f4:8a:68:ae:96:55:bf:df:fc:b6:f2:65:30:79:73:
dc:7a:b2:67:b0:df:23:e8:68:f6:04:4a:6d:48:f2:
c4:e6:0a:f6:82:06:61:90:84:bb:3e:19:7c:ff:96:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7C:B4:DA:9A:A1:2C:42:58:47:E8:53:31:29:F9:BC:EC:E0:F5:A5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5076366-3004-428c-8b4e-9132d17cf171.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:1080::/46
Signature Algorithm: sha256WithRSAEncryption
9e:b7:4a:a0:73:8a:7b:55:b9:ba:8f:59:fc:cc:e2:31:22:e9:
14:36:52:57:2e:16:18:4a:5e:f1:8f:2e:66:d3:d5:a2:a9:73:
b7:16:21:cd:af:0c:bf:5f:8e:80:ea:b0:03:7e:45:24:58:f6:
47:dc:af:98:24:0a:42:f2:0a:f4:35:6b:67:dd:1f:05:b5:fe:
51:4d:8f:22:fd:12:2b:8a:9f:d1:e1:dc:0c:88:53:18:2e:54:
3b:e3:36:f7:42:d9:cc:4f:9b:75:9b:92:8d:ac:e8:48:db:ed:
f9:64:9d:fc:f1:47:f8:3c:1b:51:f4:66:a5:d9:d7:34:df:4c:
7a:5c:1d:34:13:ef:cd:bc:a4:29:7d:8b:48:99:79:d4:78:da:
21:8a:1e:7b:f8:e4:73:9d:be:b6:64:43:28:ab:d0:59:c6:5c:
7e:f1:0b:e0:3d:08:44:93:1d:b8:22:69:d6:29:8d:b3:91:ef:
06:da:33:c0:14:86:d2:b2:03:81:6a:21:f3:77:31:bc:48:12:
39:23:fb:9d:6c:80:b5:40:38:b4:f8:0d:09:89:7d:a6:38:2b:
df:2b:cc:2d:89:7e:df:3d:6c:09:90:16:49:4e:6f:f5:07:f5:
2b:a0:a9:e3:7e:cd:7b:e2:ee:1a:32:9e:a5:9b:f9:5b:47:6d:
c9:49:c1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:33:39 2025 by rpki-client