Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ea62d6-dce3-4c74-b931-0cca87ccadea.roa
File: b9ea62d6-dce3-4c74-b931-0cca87ccadea.roa (raw, json)
Hash identifier: NI6y8ykKKYClzZN0RtXFLLqhIBM4jB+TTWOlkGFRqUU=
Subject key identifier: DD:F1:E7:B9:83:E8:07:CF:78:CB:D8:FD:36:A4:65:32:A7:4C:5C:87
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4F97B55A195BC5C45394987B3949093C62D38530
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ea62d6-dce3-4c74-b931-0cca87ccadea.roa
Signing time: Mon 16 Jun 2025 20:10:13 +0000
ROA not before: Mon 16 Jun 2025 20:10:13 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:97:b5:5a:19:5b:c5:c4:53:94:98:7b:39:49:09:3c:62:d3:85:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:10:13 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=5f538f63c5bedf0739c4aea4bd97046f18a81a2cf13e3bede909647df97f4608, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:52:3a:65:51:09:79:e0:e2:22:30:5c:29:
65:de:96:47:b1:07:53:a3:81:c1:5e:5a:e6:7e:35:
b0:a2:59:fc:e7:04:b8:7c:86:c5:14:22:fa:30:2c:
a8:b2:62:30:ec:c0:2f:06:af:bb:4d:c6:3e:ef:2f:
d8:42:60:9a:87:2b:48:7e:37:b2:79:82:e4:d5:a3:
41:9c:00:f9:ce:15:24:14:54:e0:34:97:48:a6:a4:
a4:8f:10:ae:83:d3:8b:42:9f:c6:2e:e0:d5:d2:25:
4c:b7:d5:76:ea:93:e2:d8:a4:f5:aa:e4:41:ef:fc:
6e:3e:00:80:20:ae:a8:42:33:8c:9e:b9:b7:a8:b5:
3e:0d:2e:d2:ed:d4:cf:87:1b:7b:36:3e:61:3b:1c:
64:99:d3:cc:28:d2:a7:68:b0:32:5d:41:d7:4b:39:
ae:a4:8f:ca:7d:3e:20:f2:97:a7:06:3d:bd:42:78:
67:c2:c3:1b:52:e9:e3:8a:67:28:7f:53:85:27:4f:
aa:76:3b:e9:89:8a:9f:0b:05:f4:50:0c:40:49:a7:
d4:f7:d0:81:6a:bf:e3:82:69:3b:ff:89:b5:d9:25:
d5:3e:48:90:b8:0d:fe:32:5f:e8:19:9a:4f:a9:f8:
2c:f3:1e:6e:5c:a5:2b:de:7a:58:81:30:a7:6d:d0:
bb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F1:E7:B9:83:E8:07:CF:78:CB:D8:FD:36:A4:65:32:A7:4C:5C:87
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ea62d6-dce3-4c74-b931-0cca87ccadea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:c080::/48
Signature Algorithm: sha256WithRSAEncryption
84:32:88:c3:b7:06:28:13:f2:5e:f7:38:8e:4f:02:e4:d0:8b:
04:d7:e0:cb:7d:a7:f1:58:ad:d5:fc:ba:72:8c:d0:b3:bc:73:
80:4d:f7:f1:b9:29:48:f0:df:21:d3:ba:9f:a3:f7:24:d4:1b:
65:df:0c:ee:c9:6e:e1:ad:67:75:69:ed:00:a7:4c:05:a7:96:
ee:92:a2:d4:5d:6e:2a:e2:da:04:63:8d:ff:87:96:35:73:63:
9e:ed:f8:24:9c:c9:69:8e:eb:83:61:e7:24:90:13:97:16:31:
ab:77:99:64:75:7e:fb:7d:90:a7:80:49:23:13:45:e6:79:9a:
ab:21:ed:98:05:f2:ab:db:48:7d:f2:54:15:d5:91:51:b3:14:
33:99:ad:a1:e8:b4:91:58:0b:4a:1d:05:06:9d:9f:ca:cb:2d:
80:e3:81:d7:95:c3:b6:72:29:84:5b:86:02:37:55:d6:78:78:
fe:d7:0f:fd:2a:2a:e8:26:09:61:34:7b:f6:25:c1:74:15:c2:
b2:db:91:a2:94:89:e0:7b:bf:4b:5c:40:2d:2b:46:17:97:90:
d2:7f:29:a4:53:a8:0b:a5:fe:d7:85:18:f4:9f:88:94:99:f8:
54:94:41:df:a5:9b:5e:66:40:9c:3e:66:4d:ef:8a:8a:96:7a:
5f:56:e8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:52:42 2025 by rpki-client