Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf464545-0601-4fd5-a3a2-f4f3c022f248.roa
File: cf464545-0601-4fd5-a3a2-f4f3c022f248.roa (raw, json)
Hash identifier: QQ/AJTU7E8w02aT4pAhXB1gmDQz+oKSuQwPn8MaD9l4=
Subject key identifier: CB:91:EC:98:49:C9:00:2D:5C:92:DB:A4:F3:D4:59:B8:3A:75:09:54
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 591BC31C4BBBDC21C5E5BB87499697C9EFB0CA12
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf464545-0601-4fd5-a3a2-f4f3c022f248.roa
Signing time: Mon 16 Jun 2025 20:40:54 +0000
ROA not before: Mon 16 Jun 2025 20:40:54 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:8040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:1b:c3:1c:4b:bb:dc:21:c5:e5:bb:87:49:96:97:c9:ef:b0:ca:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:40:54 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=0c952435621aca969297df22b4523ecee22e7109c075836541236d909f0a4b45, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3b:7a:65:f1:48:c1:df:69:36:37:ea:b3:25:
8a:6a:d9:bb:b0:71:32:83:c4:8d:fe:05:c1:d0:ad:
64:e3:ca:ac:cd:c1:5d:6e:ba:b5:1e:0e:4c:93:dc:
41:9e:ff:49:a6:e6:d3:47:cf:08:e1:d7:ae:1d:35:
d7:52:63:b3:5c:47:db:2b:00:5b:d3:3a:3e:c9:74:
fc:56:26:65:df:c9:84:0b:cf:d0:a3:91:81:fe:91:
00:15:5d:91:30:ed:bf:a7:89:ae:71:3c:5b:dd:2c:
da:27:46:43:ca:61:9f:49:9f:97:9d:b9:c0:92:21:
32:0f:c3:f3:2f:af:cc:cf:ac:3e:c8:47:5e:87:5d:
f3:02:19:88:d7:37:ca:3b:f2:67:32:d2:c4:b8:44:
9f:df:42:21:85:52:d5:9c:14:ef:5d:ec:4f:60:38:
c8:d9:13:7b:4a:f1:85:17:0b:55:8e:b7:c5:df:a7:
3b:4f:b5:74:fd:67:17:b8:c9:7d:8b:b9:13:48:ca:
d3:1e:63:4c:37:c1:d1:44:78:4e:64:e1:5d:20:1f:
bd:de:bf:d1:47:9e:ab:20:44:18:29:5a:1e:48:b6:
2b:ba:45:c5:3e:8e:34:38:ef:6c:d7:e6:08:9b:40:
5b:76:bf:a7:09:3d:89:05:1e:80:b1:30:ce:18:66:
28:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:91:EC:98:49:C9:00:2D:5C:92:DB:A4:F3:D4:59:B8:3A:75:09:54
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf464545-0601-4fd5-a3a2-f4f3c022f248.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:8040::/46
Signature Algorithm: sha256WithRSAEncryption
07:fc:3a:42:35:5e:dc:06:18:5f:82:60:c0:34:09:77:8f:bd:
ac:a8:a1:36:ba:ec:e5:a1:6d:9a:00:1f:7c:3f:4c:bd:62:da:
37:ac:29:bb:cc:a1:fa:3c:ac:d8:c3:09:da:a1:4d:ad:98:fa:
d5:8f:ab:0a:fe:7c:18:c4:0f:6b:94:2e:fc:54:99:6c:60:46:
af:f9:a8:71:66:0e:15:95:e0:6b:55:85:a2:64:34:35:08:0e:
dd:6e:89:9e:2c:ad:97:c0:c1:4a:f3:34:4b:c5:e6:b9:ef:53:
a9:37:73:e9:c2:15:c6:f0:1e:9c:40:cb:34:f6:b2:64:0b:46:
32:3f:64:8b:b2:57:69:21:aa:7c:e7:ab:5a:ce:59:9b:f5:bf:
e0:3e:9f:8c:6f:7e:bd:26:80:e8:cf:96:af:54:08:1e:4a:d4:
41:5f:fe:15:2d:f2:0f:1a:df:8f:90:9c:ed:23:70:1b:4d:69:
9f:e8:f7:39:7d:94:e5:ab:27:89:c7:47:8b:6a:8d:63:54:80:
8c:a7:05:a8:de:5b:7e:0d:b5:ea:48:e0:10:c0:e0:ac:1c:28:
28:f4:87:a1:06:d2:a1:8a:cb:b1:79:19:8a:0a:ee:40:3b:4a:
c8:7a:d9:a7:e3:5d:f4:db:c7:61:63:9b:2e:38:76:40:f0:42:
d8:b1:59:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:53:42 2025 by rpki-client