Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa
File: b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa (raw, json)
Hash identifier: HoOcIvcDBj0HM6cCZ5jP00CiKOr15bdNSYvD/uWDFTc=
Subject key identifier: 42:C1:A0:DE:B7:F2:DC:F1:E4:B1:5C:8E:F4:83:3F:94:08:B3:5F:18
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 60168324972BE614EBC03FBBA52882A55935F440
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa
Signing time: Wed 25 Jun 2025 00:50:07 +0000
ROA not before: Wed 25 Jun 2025 00:50:07 +0000
ROA not after: Wed 30 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:16:83:24:97:2b:e6:14:eb:c0:3f:bb:a5:28:82:a5:59:35:f4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 25 00:50:07 2025 GMT
Not After : Jul 30 23:59:59 2025 GMT
Subject: serialNumber=70d33267fc7eae2ecfda871c9a6b7796a7500a6c5197c2e16f8f5c7edf40fdc9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:fb:27:83:fb:2c:bb:9f:b6:9e:f0:c9:d3:
11:5c:a0:03:a0:85:53:85:f1:90:94:e7:38:05:02:
e3:9c:88:ac:af:2d:fb:11:32:2f:cb:c5:ed:90:5d:
84:9f:87:be:cf:e7:a9:0e:4a:7d:2e:dc:45:cf:c6:
7f:12:82:f0:a6:76:9b:48:60:f3:fa:88:a7:c3:fa:
70:86:90:dc:7e:af:e7:47:7e:f5:d0:cd:3c:df:1b:
04:03:8e:6b:8f:31:b5:03:65:b9:fe:6d:b7:e1:c0:
15:86:2d:c1:df:47:a6:fd:21:fa:8b:94:bc:69:9c:
2e:4d:f1:b4:3a:53:2d:56:25:71:02:7b:00:14:b4:
4b:f7:13:0e:e2:65:87:d3:45:68:b9:8a:b6:f0:ed:
d6:a6:c6:ac:e0:ae:f1:43:52:2f:e4:6e:0f:c8:a4:
98:30:9f:93:30:a7:91:cf:6d:82:f0:31:a9:52:22:
fc:e4:48:bc:b7:82:f8:c4:06:ac:d9:13:33:60:b1:
77:26:5b:fe:43:ee:e8:a9:dd:56:60:c2:7d:48:b1:
14:43:5f:87:15:a0:6f:3b:9e:28:0f:be:41:f7:10:
c8:df:eb:2b:85:e7:33:91:cf:de:0f:6d:b2:bf:b0:
1d:6a:ec:c7:bc:39:af:92:28:01:a7:93:d9:4e:70:
e6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C1:A0:DE:B7:F2:DC:F1:E4:B1:5C:8E:F4:83:3F:94:08:B3:5F:18
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:8000::/40
Signature Algorithm: sha256WithRSAEncryption
0d:97:b7:cc:c8:a8:c7:ee:72:7f:d2:af:53:c5:46:9d:f9:08:
e2:28:00:be:c5:8f:1f:5c:ba:eb:14:fc:24:cd:75:88:2d:0c:
78:af:7d:5c:ba:f3:f5:3f:d7:39:db:4e:63:da:c1:d0:07:a8:
b7:e0:f3:ee:97:cb:c2:54:16:99:67:49:bb:0e:e4:66:64:6f:
99:cd:ae:fc:14:6a:95:a5:27:67:3f:26:b9:59:61:2b:51:fa:
17:53:bf:7d:4d:e1:29:93:94:4b:d7:17:3a:83:7c:03:f8:88:
9c:73:ee:07:53:c0:19:ba:31:7b:de:d7:30:5e:b1:53:01:30:
15:8d:d6:53:ed:7f:d1:f9:53:24:da:65:7f:1d:8d:88:31:73:
b9:09:24:1f:6e:22:54:91:48:a6:12:54:33:c4:df:60:e9:c3:
e1:0a:84:4f:9a:4c:1a:fd:96:ac:98:3c:f8:67:18:28:d6:5c:
47:30:b5:e3:15:7d:0d:7c:17:06:92:74:63:f2:1c:2e:56:8d:
8d:37:d7:80:f8:40:5b:9d:9d:3c:77:d7:bf:3f:4d:f0:aa:ef:
fb:64:f9:cf:60:97:ae:04:1d:d5:8e:27:e0:91:74:aa:76:fa:
8d:92:eb:19:0f:0c:12:64:18:0f:a8:be:f3:75:14:85:41:b6:
21:ee:91:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:00:19 2025 by rpki-client