Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa
File: a6c61029-f559-411c-89fd-a1970cac6bc1.roa (raw, json)
Hash identifier: U6/v/06kDdxrx0EaxzHcejbw/92h5773jX0+sLGATeg=
Subject key identifier: 4A:C6:C0:EC:2C:72:52:9D:9F:D0:8F:B7:0C:DD:CC:F6:9E:FC:36:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 749100415ABFEFE9F5155FD9A3A620DE30016EB2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa
Signing time: Mon 16 Jun 2025 21:20:41 +0000
ROA not before: Mon 16 Jun 2025 21:20:41 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:91:00:41:5a:bf:ef:e9:f5:15:5f:d9:a3:a6:20:de:30:01:6e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:20:41 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=3228a900d71b63525e85692e6413901ef224b228efdd6a5de299427eee77dec0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:64:66:bf:f0:4a:c1:a3:b7:3f:32:0c:4b:0a:
33:0e:c9:ce:c6:7d:e5:81:c6:d8:0a:f1:f1:b8:6f:
35:6c:37:6a:d2:0f:d2:9f:00:dc:f2:85:21:50:05:
ec:2e:e2:9c:d9:7a:b7:e2:42:37:74:4c:dc:a5:e6:
23:2b:7f:e3:ed:07:af:42:b6:48:17:c0:08:56:af:
37:aa:0a:39:6e:03:36:dd:5c:3f:41:19:64:21:9b:
48:e8:c7:75:45:ff:55:fe:c9:97:66:08:35:36:5e:
38:f5:01:6f:de:86:bb:08:fa:c0:d2:82:56:cd:ca:
00:c8:a5:ba:ad:0f:2b:9b:e8:ed:e0:fd:c6:dd:22:
a8:d6:1d:27:f6:6e:80:eb:71:3f:3d:89:d5:87:6c:
ef:35:d5:d3:6a:ca:96:d8:6c:ac:84:43:bd:21:4e:
8d:cf:0e:fe:31:c3:ec:5c:64:3c:8e:54:d0:9d:35:
b1:4b:7f:0d:56:a7:10:4b:cc:30:45:db:8e:16:e0:
71:6b:b8:4d:6b:92:22:86:dc:26:c4:55:3c:f8:04:
14:75:93:e2:02:e8:eb:3d:f6:e6:c8:15:52:46:58:
69:e4:b4:ec:18:9a:31:61:e4:13:7d:45:8e:3d:6c:
db:cb:5c:74:2b:77:db:53:94:02:30:d7:3d:13:61:
5b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C6:C0:EC:2C:72:52:9D:9F:D0:8F:B7:0C:DD:CC:F6:9E:FC:36:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:9000::/40
Signature Algorithm: sha256WithRSAEncryption
56:df:cc:5d:dd:e5:49:b3:a1:df:3e:2c:29:aa:4b:97:b8:ed:
f6:b6:7b:21:d2:0f:a9:9a:a9:49:bb:c8:e6:cc:f3:6b:da:6e:
4a:c6:bf:74:e0:2f:8e:95:73:63:5d:95:0e:1e:a1:c4:e2:e4:
ca:ea:c4:7d:20:9b:7c:46:65:c0:6f:b2:ca:d6:32:3c:b2:a6:
d7:80:a4:60:3e:90:13:6d:dd:d6:ed:9f:25:af:bb:7f:2c:a4:
9f:ab:74:fc:53:fe:c4:d4:9c:e9:5f:e7:69:c5:10:09:1a:5e:
8e:64:96:b5:db:01:99:4b:16:ca:dc:72:0b:d1:ae:32:9c:48:
ce:0b:6c:09:4b:a4:6d:5b:95:08:1f:37:c7:85:ed:a5:1b:77:
aa:b5:13:a8:f5:7c:c9:46:dd:29:56:28:f9:81:7b:ae:da:88:
39:26:24:47:8b:89:30:d1:39:81:79:f4:13:a8:e7:ce:bf:e3:
c9:00:d2:54:9d:0d:76:db:2b:dc:c6:e8:d4:4b:32:fd:47:d2:
95:0b:0a:d0:9a:e0:d4:f1:6e:78:57:40:71:f1:7c:f6:d6:74:
c6:86:e2:19:27:68:91:91:5b:8e:14:3a:ae:ba:0a:99:8b:2d:
35:51:62:5e:ee:ad:91:2e:06:fc:1a:f7:05:43:4e:0b:97:d7:
3a:f6:19:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:58:05 2025 by rpki-client