Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6bd87d5-c11e-4508-ada5-ef58a495d3f6.roa
File: a6bd87d5-c11e-4508-ada5-ef58a495d3f6.roa (raw, json)
Hash identifier: JnAmWUSv9TaW5onqaUdZHijFlEp6pW/d/cYPJrMtLmg=
Subject key identifier: B9:2B:D3:D1:27:9D:DC:44:14:7F:2C:43:02:1A:86:C1:3D:29:03:9F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 44F809203FD873623961A44A7C53E39ACB754350
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6bd87d5-c11e-4508-ada5-ef58a495d3f6.roa
Signing time: Mon 16 Jun 2025 21:11:25 +0000
ROA not before: Mon 16 Jun 2025 21:11:25 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:f8:09:20:3f:d8:73:62:39:61:a4:4a:7c:53:e3:9a:cb:75:43:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:11:25 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=c0656771c753165c32454ab0b0572e52b02ab59a59c2aa88c16df78b893b3133, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:92:16:89:ce:de:f3:71:32:2b:43:97:b9:
8c:4d:0f:c5:9b:a1:7d:80:78:71:55:dd:2f:4b:a6:
d5:c0:51:0a:4c:46:7b:ff:eb:90:14:eb:fa:7a:2c:
ba:26:85:2d:3b:b7:e2:39:9e:67:a3:a9:84:8e:93:
9d:68:db:a0:42:8e:b2:b7:f9:b7:c1:9c:87:c6:39:
93:a2:6d:bb:46:03:66:dc:c9:9d:bc:02:88:11:36:
15:a9:e4:97:62:88:61:49:bc:ce:40:cd:ba:97:52:
db:dd:ed:f5:dc:d2:f2:ba:9a:fa:86:5e:ea:7d:f0:
b1:65:8c:b1:f4:ef:d8:ac:7a:0c:ac:8b:8f:ac:af:
11:05:c1:3c:a4:19:17:f1:9b:ee:c2:00:e5:67:62:
c0:00:d1:5a:96:99:27:33:0e:02:4a:17:3b:e0:56:
bb:cd:a0:ae:f0:e5:6e:ef:f6:ca:1b:d8:4f:94:38:
0d:6b:af:eb:22:44:e7:8d:5b:41:73:8b:ab:32:b3:
3b:58:ef:c8:37:df:d0:94:d1:1f:50:0f:e9:f1:fe:
05:cf:fb:34:91:bc:b0:30:0b:7f:4f:66:ba:7c:22:
ad:85:fe:98:d0:52:40:f2:ce:92:82:74:4e:e7:1c:
e7:b3:c0:dd:0a:cd:64:e6:1a:0f:6b:86:37:bc:52:
3f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2B:D3:D1:27:9D:DC:44:14:7F:2C:43:02:1A:86:C1:3D:29:03:9F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6bd87d5-c11e-4508-ada5-ef58a495d3f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:9000::/40
Signature Algorithm: sha256WithRSAEncryption
6f:c0:f9:d2:d9:55:fa:f1:1e:08:3c:7d:71:41:b4:0c:85:cf:
a8:79:4d:db:f2:87:dd:43:1a:fb:89:75:a3:74:52:67:00:a5:
a7:33:38:ca:59:1f:9c:5d:ce:cf:eb:f7:90:d1:10:18:b3:c9:
22:da:f3:c5:34:43:11:d7:3e:b8:6c:a7:83:82:46:66:73:02:
33:2e:bf:e7:14:67:63:b9:6b:c3:62:14:a8:ff:b6:21:22:c5:
cd:b3:f5:b9:fb:15:65:3b:03:fb:17:09:a6:83:bc:ec:67:54:
e1:06:7d:9f:3d:60:a6:ab:99:ca:00:64:dd:e6:64:40:0d:6a:
4a:2b:03:d9:2a:3f:83:9d:dd:57:2e:49:b9:f4:80:eb:8f:c1:
1d:e1:de:0b:28:6e:61:b9:d0:18:f1:ac:e6:35:72:7d:f9:2a:
cc:7a:34:9e:60:93:16:36:6d:10:95:01:e8:3e:6b:89:73:10:
a5:59:d8:ed:e0:ed:52:67:d9:85:f3:c3:6b:fd:1a:b0:2a:15:
c5:32:c8:f4:4a:fd:e4:0e:b7:91:ec:68:d9:7e:ff:e6:6f:94:
c3:39:38:ef:b8:89:5e:db:62:45:c6:38:56:2b:99:cd:1b:93:
8c:3d:1d:0b:82:5e:0f:6d:e2:dc:56:d1:91:c7:99:d9:e8:32:
27:9e:c3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:23:14 2025 by rpki-client