Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a626735f-cb4b-4dff-992e-95390a4e2eea.roa
File: a626735f-cb4b-4dff-992e-95390a4e2eea.roa (raw, json)
Hash identifier: 9Zlvmgcgc/hLJnftBZSQpgcD/7PBRds15WKvGbbookQ=
Subject key identifier: 17:A3:D4:7A:96:2D:7C:CB:0B:E3:2A:58:3E:76:31:9C:4F:45:8E:9B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 286E350606D420F6D001B606AB1098396EAB84EF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a626735f-cb4b-4dff-992e-95390a4e2eea.roa
Signing time: Tue 17 Jun 2025 00:40:48 +0000
ROA not before: Tue 17 Jun 2025 00:40:48 +0000
ROA not after: Tue 22 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:6e:35:06:06:d4:20:f6:d0:01:b6:06:ab:10:98:39:6e:ab:84:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 17 00:40:48 2025 GMT
Not After : Jul 22 23:59:59 2025 GMT
Subject: serialNumber=3bbfd97be8b7356d97db06c8f56a4ed26d086bf13b367825ec94959663e5aba1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:79:ce:6c:2f:dc:7a:25:03:aa:3d:8a:a4:72:
5e:d8:18:a6:0a:bb:f2:fe:64:db:20:68:da:7c:3d:
b8:d1:cd:0e:07:2e:78:5f:98:dd:99:30:5d:d8:9b:
35:27:71:db:8c:76:69:44:53:d3:e1:a8:03:0e:91:
ff:14:93:f4:a4:66:0b:48:0f:b8:35:59:51:f1:0f:
be:bc:4d:fc:f6:7b:2a:ce:59:4a:4b:83:1e:cc:de:
c1:a1:92:37:c7:be:af:90:15:5b:9e:f2:da:e6:08:
f9:de:fc:f6:e2:8e:ad:be:e6:90:b5:8a:bd:9f:ec:
dc:0d:e3:0c:99:67:4e:02:06:d0:64:9f:1e:fb:28:
2b:67:f8:aa:af:e9:cc:86:13:a8:36:1c:d4:fc:18:
25:7f:3e:d6:9e:43:d1:f2:b6:70:cc:6e:3a:bc:e3:
b2:24:bb:d3:52:40:61:65:c5:56:0e:16:c6:4d:b8:
d3:65:77:56:76:63:0c:03:0f:a3:14:4c:78:48:17:
4c:fd:12:70:69:a1:7b:50:b1:8b:99:24:45:2c:91:
74:01:9e:9e:b2:d9:c2:2c:87:5b:e1:bf:60:ab:ec:
a1:9e:f5:9c:de:ef:e5:08:9a:22:08:f7:20:96:78:
3f:25:b6:dd:bc:ed:cc:7e:b6:2c:0b:2e:b4:22:f5:
e4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A3:D4:7A:96:2D:7C:CB:0B:E3:2A:58:3E:76:31:9C:4F:45:8E:9B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a626735f-cb4b-4dff-992e-95390a4e2eea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:2000::/40
Signature Algorithm: sha256WithRSAEncryption
bf:e8:a0:03:c4:f9:e0:ca:be:23:8b:17:f6:c5:27:50:32:2f:
2b:87:a0:d6:6c:a9:80:57:69:dd:ab:98:88:6e:2f:50:e4:b4:
b1:fb:ba:0b:8d:a2:09:70:0e:84:9a:54:ed:2f:ed:98:50:b7:
64:7d:2b:cb:f1:16:60:74:97:99:64:b1:a1:2e:ba:8b:d1:68:
2a:09:d5:36:67:ff:13:84:89:23:b4:d7:5f:76:0b:16:38:af:
80:7e:9f:4a:f1:50:4c:ac:72:7b:ae:49:65:fe:8f:d1:ef:84:
59:f0:7e:2c:44:2c:f7:c8:46:1a:2a:9d:be:96:94:6b:9f:ad:
e9:ab:b6:a6:d3:76:ca:fd:a2:d5:4a:82:f0:23:53:32:21:71:
0e:1e:5e:f1:22:7c:d6:49:56:9f:91:e2:6a:55:c4:19:23:52:
3b:87:b9:3b:61:6f:4e:ba:e3:40:d4:13:a8:ae:98:5e:58:75:
4f:79:a1:81:84:ae:06:db:b3:a2:08:bb:46:4d:07:0d:c7:6f:
01:52:4c:c2:8e:2e:f9:99:69:88:29:70:ba:d6:53:2b:b5:95:
03:4d:aa:9e:ae:9d:3a:d7:90:97:c6:6c:38:3a:85:ec:31:37:
43:a7:3f:c6:32:3a:9b:e6:a9:1a:a2:b1:9c:0b:6f:01:1d:3d:
a1:6e:f7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:54:39 2025 by rpki-client