Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c0520c80-698f-4538-b32e-e9663caeb979.roa
File: c0520c80-698f-4538-b32e-e9663caeb979.roa (raw, json)
Hash identifier: fUHVkkt4XzPGfHtvYL65eIGBC9bewFd/cXsR0q6eruM=
Subject key identifier: D3:00:3C:BA:66:FA:78:DC:8F:F8:D9:84:89:0D:C8:37:2D:D3:26:2D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1A5696F87070F88BE7FA1E89BAB6684E4D633796
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c0520c80-698f-4538-b32e-e9663caeb979.roa
Signing time: Mon 16 Jun 2025 20:11:24 +0000
ROA not before: Mon 16 Jun 2025 20:11:24 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:8050::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:56:96:f8:70:70:f8:8b:e7:fa:1e:89:ba:b6:68:4e:4d:63:37:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:11:24 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=698359a66afcf88565c0eae5692cc4b264381dc5416bf93a4d1c6e3dfb5d2568, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:b7:b1:ac:3c:46:ed:cb:d0:d5:7e:79:74:
8e:c1:c4:2e:57:a7:f8:8b:a1:b8:76:4b:08:70:da:
90:15:cc:34:13:ba:0c:97:35:34:6f:e8:3b:1a:f6:
a5:ca:16:9e:61:6d:a1:27:8e:5f:68:8e:f2:8a:d1:
23:1d:0b:29:48:72:a4:2c:4c:84:30:4a:18:c4:c1:
cf:f7:9d:59:26:cc:c7:d0:5e:0f:8f:46:7b:44:ba:
f6:ec:61:d9:cd:84:e2:48:8f:53:f5:6a:1b:d0:5a:
98:b2:d8:8f:6f:9a:6b:59:66:15:b6:5b:a7:4f:09:
f3:eb:23:bf:e4:08:ce:9a:c4:06:0b:b0:00:18:06:
f4:70:bd:2e:f8:c7:44:e6:08:c2:cd:6b:34:3f:e9:
81:0c:cc:3d:cf:c9:b1:8a:4e:70:fe:0e:85:51:0a:
c2:06:44:a8:e9:c2:7e:b3:b1:dc:31:67:b6:e1:f6:
4e:ae:9d:b4:8f:15:48:48:56:bb:ed:df:e3:4d:58:
09:e4:d5:7c:74:81:cd:a5:40:86:c5:04:40:00:3a:
c5:8a:a2:1d:82:5d:01:92:e9:38:c8:04:10:a4:c9:
46:9b:ce:f4:fe:b3:9e:17:75:78:78:15:a7:5b:6a:
20:e4:41:1d:83:b0:d3:f9:a1:0b:4f:61:e0:50:8d:
2b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:00:3C:BA:66:FA:78:DC:8F:F8:D9:84:89:0D:C8:37:2D:D3:26:2D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c0520c80-698f-4538-b32e-e9663caeb979.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:8050::/48
Signature Algorithm: sha256WithRSAEncryption
7a:ff:ce:8a:fd:71:fe:87:7e:0c:d2:85:a4:17:3e:61:fe:9e:
50:d5:d8:30:f6:88:24:1c:93:01:8e:22:7a:0b:da:68:cc:7e:
60:c2:d0:d0:7b:48:c6:2c:76:83:27:33:e1:29:8a:60:01:f1:
b7:c8:73:56:29:80:a6:3b:0c:98:4b:89:9d:c5:0f:78:0c:63:
80:2f:f7:f4:96:d4:1c:95:11:dd:e0:c2:cd:e9:bb:41:20:8a:
21:51:73:95:36:13:1c:85:5b:57:88:bc:c9:f0:bc:c0:c7:64:
2f:40:1f:67:d0:4e:bb:fd:c7:c0:bd:23:cf:d5:2f:fa:64:fd:
d9:c6:c5:12:f1:c5:8d:a9:4a:a9:fa:a1:26:6c:6b:06:42:31:
f8:fe:1f:c2:84:fb:ab:54:91:35:72:fa:c9:7c:fe:5e:d6:43:
2e:9c:43:66:50:07:23:70:22:29:68:f5:9d:76:02:d3:92:1c:
4e:02:8d:43:76:2f:0c:1e:45:8d:dd:7a:ba:b9:eb:61:91:81:
06:6e:4e:2a:2b:60:12:51:aa:72:e8:fc:ef:8e:63:4a:c0:2b:
19:66:36:15:7d:d0:c8:19:2b:8a:6b:ae:d3:d8:36:1a:78:0c:
6e:11:be:03:a1:02:e7:b9:a7:46:7c:46:f6:68:2b:fd:17:f8:
5e:43:10:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:50:11 2025 by rpki-client