Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
File: b92d2073-fe74-4c3d-87a9-37106f766cba.roa (raw, json)
Hash identifier: uy2moV9/U4ePuZoi4aTfNCKeWCPEDIF7BNX6FfajSZ8=
Subject key identifier: F0:D3:39:71:6D:13:7C:2D:C8:7A:B9:0F:F8:EF:02:65:1A:26:60:64
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2D10996AD514DBE42140C7DBC099D8C7E448E6AE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
Signing time: Mon 16 Jun 2025 20:00:40 +0000
ROA not before: Mon 16 Jun 2025 20:00:40 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8060::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:10:99:6a:d5:14:db:e4:21:40:c7:db:c0:99:d8:c7:e4:48:e6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:00:40 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=6cc25e512f55ad4a1905c4503f3b3499c7d602582a0bb4018c518614034cdc82, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:1b:b9:c3:2b:da:8d:38:29:e0:3f:2e:21:
70:91:c8:fb:4b:32:46:26:e3:e2:2a:b9:9f:d8:98:
9e:32:5e:1d:e6:d0:03:8b:d6:71:5b:4c:67:e6:34:
b4:1b:a9:d4:56:a7:9c:9d:01:79:63:16:0b:ff:c7:
55:3e:9b:28:71:7c:4e:c6:4d:c5:d1:53:16:a0:1b:
85:91:94:b1:4b:c7:7b:14:a6:30:75:b2:d2:23:a6:
c6:73:2b:e2:f6:b9:de:5d:c2:fc:cb:25:0f:26:85:
68:61:fd:6f:48:0c:5c:56:88:85:20:0b:9e:8a:ae:
1f:0d:7b:04:78:f8:95:bc:c4:1d:82:3a:7e:8c:f9:
c4:e1:5b:d3:0a:c1:6f:62:6c:d8:33:24:66:ef:28:
84:d5:b6:63:09:e5:af:1b:98:d3:9a:28:50:d6:96:
dc:48:bf:ba:a4:44:eb:f3:d6:e3:cd:73:9b:e6:1b:
23:53:58:e9:80:6b:70:28:dd:3d:a4:37:cc:40:0a:
d6:f5:b2:b9:06:09:39:28:bf:ea:46:e8:cd:80:17:
eb:6c:05:00:8a:4d:fd:86:c4:ed:30:58:68:f9:8f:
b6:9d:05:86:3e:c7:e4:75:57:8b:8b:7c:9b:f4:d8:
20:6a:1d:a8:78:94:ae:e4:7f:b3:40:93:6c:61:7a:
88:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D3:39:71:6D:13:7C:2D:C8:7A:B9:0F:F8:EF:02:65:1A:26:60:64
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8060::/48
Signature Algorithm: sha256WithRSAEncryption
1c:35:55:39:e4:8f:12:9d:aa:cf:45:fc:25:6a:49:34:5f:81:
55:15:d6:02:f2:15:4d:f2:13:19:33:d6:c7:94:c1:5d:f2:0e:
61:af:46:1f:e7:34:17:e7:17:14:20:d3:97:d2:58:69:57:55:
ab:24:e3:9c:54:06:11:e7:80:12:2f:4f:f3:52:9b:91:28:39:
c7:84:bb:42:ab:e3:75:75:87:15:58:9e:09:0c:1b:9f:2b:06:
02:7e:57:0b:bd:9a:7e:6c:d3:17:36:f1:a5:55:c5:f9:a3:ff:
63:59:90:1d:4b:cc:4d:5b:eb:d4:a9:46:1d:83:52:c6:8d:ec:
a2:85:33:9b:ba:a8:80:ea:31:33:88:65:96:bc:e6:de:9b:3e:
3f:71:83:52:e2:9b:70:de:27:af:bb:ff:b7:b5:e7:1a:de:1d:
6c:21:bf:8e:e2:5e:59:38:47:6d:6a:4a:c0:5e:94:d1:c1:72:
2c:14:f8:f9:b6:63:16:77:a1:57:2c:14:db:45:a5:85:38:16:
08:a7:f8:a5:ca:d3:23:4d:6f:fd:7b:b8:60:c2:30:06:07:d0:
fa:0a:5c:f8:b3:24:41:b7:33:c7:a7:c7:dc:7a:e7:9a:2b:c7:
72:49:07:fd:08:46:b3:0a:1c:fc:34:43:96:78:96:7e:bd:04:
82:9a:b6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:52:29 2025 by rpki-client