Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa
File: c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa (raw, json)
Hash identifier: 4/B3HxQaEwe5Xu2plGmhmJY9a5i3JdqE51RweeV+xeI=
Subject key identifier: B9:F1:EC:40:89:2D:E5:8E:7B:6C:70:A9:C9:13:FF:52:B9:15:FF:A3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 45F1EBF559EC77ADB938E43BF08140D700CCBB31
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa
Signing time: Thu 26 Jun 2025 19:37:12 +0000
ROA not before: Thu 26 Jun 2025 19:37:12 +0000
ROA not after: Thu 31 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:40c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:f1:eb:f5:59:ec:77:ad:b9:38:e4:3b:f0:81:40:d7:00:cc:bb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 26 19:37:12 2025 GMT
Not After : Jul 31 23:59:59 2025 GMT
Subject: serialNumber=637c58f41b529379429175cbd04da5940aedb8bd8f4ff689973a294a8582641b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:4c:eb:ef:e4:24:47:28:b6:52:7d:f4:3a:
e5:9f:57:1c:ca:ff:5d:4f:6f:98:7d:05:8b:1f:57:
ef:a4:8b:f0:70:ee:94:86:27:ab:40:2f:b4:3d:2b:
7a:76:70:bd:f9:8a:68:fe:85:d8:50:ff:40:f6:04:
93:8b:fb:54:2c:f6:a0:3a:1f:d6:4b:eb:1f:58:7f:
6f:ed:6a:5a:fb:d5:e8:66:74:8f:fa:b9:0f:ae:b2:
9f:7a:f1:5d:5e:19:5c:15:af:99:e2:4e:5c:84:0a:
c1:0f:2f:5d:ae:fe:94:08:86:21:38:ac:cc:3f:f4:
a9:43:7f:f4:24:c6:f9:90:89:d3:9c:22:bc:f5:c9:
05:02:1c:00:d3:0b:3f:26:87:29:af:27:04:22:c4:
16:1d:ea:81:ca:f5:e6:87:e5:67:35:15:df:04:1f:
59:65:8d:f7:ae:cd:8e:28:1d:a3:da:b7:b1:a4:f7:
90:61:ec:40:1f:23:24:83:8c:90:18:99:9f:f3:d8:
53:a9:8f:45:67:45:e5:bd:bf:29:b6:ce:f3:4b:b8:
40:60:5b:52:dc:3a:3d:78:c8:04:8c:d9:61:5f:59:
db:55:4f:53:5a:c4:b2:de:5a:56:55:4c:a6:70:c5:
bc:50:87:ec:bf:40:fd:cf:5b:66:62:d4:fd:fb:dc:
89:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F1:EC:40:89:2D:E5:8E:7B:6C:70:A9:C9:13:FF:52:B9:15:FF:A3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:40c0::/46
Signature Algorithm: sha256WithRSAEncryption
7e:5f:bd:30:44:1c:6f:c3:60:4c:f4:23:3f:86:af:37:d1:56:
72:a8:ae:31:7a:16:8e:13:50:7a:2a:57:e2:51:2d:ec:ab:c4:
2e:5d:8d:6e:31:4d:eb:91:0b:5b:8e:23:82:e3:1b:97:3d:30:
ac:19:a4:fd:58:5b:8f:3c:36:a7:37:11:f0:29:10:c4:cd:8a:
09:d1:26:d8:68:2c:e1:ad:7f:c6:53:78:b8:97:a9:e9:c2:d4:
d3:ed:6a:0b:34:30:f5:b6:02:90:df:90:0a:a0:32:4b:31:bc:
f6:8b:0a:6f:4a:02:e3:c4:51:3b:ca:6e:15:d3:17:29:49:81:
c6:0a:2e:88:23:53:98:7f:c4:82:97:53:b7:cf:5a:c5:96:a8:
35:aa:a5:b8:19:c8:16:66:f4:d0:33:be:47:79:ed:a5:f0:2e:
1a:18:93:ef:a4:0e:a2:90:9f:42:7b:c4:c9:9e:de:4d:c8:ba:
a5:8d:0b:51:a9:14:41:64:ac:28:d6:21:80:1f:e6:e8:4c:33:
3a:ef:e2:59:04:dc:44:1e:3c:b7:91:bf:2c:22:bf:d4:fd:a6:
ec:f1:a1:b0:d2:49:6c:1f:bc:66:45:45:cd:c1:8a:ed:73:38:
f5:8b:c9:42:c5:de:0f:08:fa:45:69:7b:c9:b1:dc:87:72:8d:
a9:c1:65:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:49:17 2025 by rpki-client