Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b40dd9ec-4177-448f-b3c2-9372632cd0a3.roa
File: b40dd9ec-4177-448f-b3c2-9372632cd0a3.roa (raw, json)
Hash identifier: mCTETCSrrmMHRtEkuPtcZRHqrMW6ObTPVaL32gos+vU=
Subject key identifier: C8:6F:85:D2:7C:E3:AE:57:77:1A:F9:B9:22:6C:60:F8:D0:62:F3:16
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 43785B02B66406D5630C7B2AE15E14E927677CF4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b40dd9ec-4177-448f-b3c2-9372632cd0a3.roa
Signing time: Mon 16 Jun 2025 20:50:16 +0000
ROA not before: Mon 16 Jun 2025 20:50:16 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:c040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:78:5b:02:b6:64:06:d5:63:0c:7b:2a:e1:5e:14:e9:27:67:7c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:50:16 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=2083807379a9a05a313f2ddba79f51180b8b83b0478f581b5318bfdf80a72c50, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:08:5a:f3:59:21:bc:b0:10:fc:07:50:30:91:
79:79:17:fc:62:7b:bf:75:b8:82:43:f2:fa:1a:60:
5c:8c:54:25:26:78:53:2a:fa:80:1d:b0:18:c4:bc:
09:50:e6:38:0a:65:5e:55:77:3a:18:4b:15:ba:f6:
f2:cd:ee:4b:b4:57:2a:70:ab:54:05:f2:2c:b4:5f:
86:60:ba:be:92:3a:0b:df:01:c8:df:05:3e:59:0e:
c8:15:ad:c9:25:61:55:e5:4b:b4:87:a3:49:35:bd:
74:43:ef:c1:38:60:16:94:6b:b0:cf:cd:42:83:52:
63:65:c4:40:75:3b:40:3a:c4:b8:56:e6:84:e7:c8:
94:fa:25:e9:2c:a6:94:fe:6a:d2:41:58:37:92:f5:
74:11:53:dd:be:4f:13:32:e8:6a:da:ca:3a:86:55:
6b:20:c9:ac:fd:8d:75:95:94:d2:a7:57:27:1c:95:
8b:03:40:d7:0b:da:12:78:11:31:7d:8c:33:71:9d:
35:5a:be:ee:4d:94:7e:d8:47:07:c9:65:57:42:64:
c4:45:20:28:2a:b4:ca:03:93:ff:23:1a:e3:2a:88:
b7:5f:2f:2e:38:17:e8:5b:68:3f:7b:65:ad:ee:c1:
82:9c:bc:9b:61:92:f0:e2:b4:ea:af:3a:a7:9a:a6:
22:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6F:85:D2:7C:E3:AE:57:77:1A:F9:B9:22:6C:60:F8:D0:62:F3:16
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b40dd9ec-4177-448f-b3c2-9372632cd0a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:c040::/46
Signature Algorithm: sha256WithRSAEncryption
44:ed:e7:81:f5:9f:f8:86:16:b8:97:70:31:60:c7:4f:64:0b:
36:d1:ba:fe:ac:d4:b7:6d:f8:f9:e0:ea:cb:2c:09:8c:65:d2:
85:d4:68:9a:3f:c3:bd:ff:9b:b4:4e:22:f8:82:eb:01:f9:57:
bb:f5:70:f2:8d:de:51:1c:48:a2:1f:cb:51:03:4a:1e:9f:2f:
9a:13:96:fb:96:12:e2:42:6a:bc:4f:6a:95:bf:df:21:a4:c3:
59:10:47:4b:70:fe:e0:1b:e5:57:4e:c1:5d:f5:69:b6:c1:fb:
75:1a:d0:e6:2a:f0:e0:14:ab:2d:38:7a:bf:1c:4b:43:59:f3:
30:dd:c5:0a:80:bb:f6:46:d9:ca:db:d6:5f:87:80:33:1b:82:
21:8e:a9:78:f0:ab:02:ca:e6:da:86:95:dd:46:e4:85:6f:40:
63:00:45:cc:0f:f7:df:fb:44:e7:2a:16:bd:ef:46:f6:f1:c6:
84:fe:2e:c4:7d:f0:18:d2:d9:31:03:32:0c:ea:c0:4e:87:0c:
c2:51:2f:7b:56:79:27:bd:bc:40:ab:ac:87:7c:76:fb:f1:f1:
85:51:a4:ab:b4:68:24:dd:91:5a:89:5f:82:4e:22:fe:65:69:
80:a7:22:a1:ff:27:05:28:dd:8a:ce:39:99:0d:d9:c1:d1:5c:
2a:e4:0e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:56:36 2025 by rpki-client