Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3b5c1d2-4d20-429e-93f6-4d1f30e8b964.roa
File: d3b5c1d2-4d20-429e-93f6-4d1f30e8b964.roa (raw, json)
Hash identifier: CSbuhQqLUKibiW1LAKwY5t3iOqCbMRWw4w+hgHIUYF8=
Subject key identifier: 54:F3:3D:66:34:C8:3B:75:1F:EE:1C:F7:6F:F7:B1:16:ED:E2:61:D1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 34378A22BB88AE6715A9ED40D454301DB26ED3A6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3b5c1d2-4d20-429e-93f6-4d1f30e8b964.roa
Signing time: Mon 16 Jun 2025 20:41:31 +0000
ROA not before: Mon 16 Jun 2025 20:41:31 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:a040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:37:8a:22:bb:88:ae:67:15:a9:ed:40:d4:54:30:1d:b2:6e:d3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:41:31 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=df382b53cad07c7d4bf5b7de4266c2f1f72467b3d5873ca0ee59de2c688c0eb7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:ad:00:e1:f9:89:93:a4:f0:42:c5:14:7b:
56:53:21:18:e3:e2:31:2d:27:a9:fd:95:75:a9:8c:
43:23:64:a5:fc:54:16:b7:34:36:41:d0:52:2b:da:
ba:3b:44:b7:78:19:62:06:54:ca:59:3c:e4:01:d7:
06:ba:71:e4:39:74:f1:87:7b:98:ab:de:9a:15:69:
9a:c7:5e:a6:c3:7f:2b:78:2d:be:93:dd:43:48:a1:
03:a6:5f:d0:d3:e4:15:d6:00:06:0e:99:d9:f1:73:
24:33:5d:83:70:cf:36:40:38:3b:2a:dd:5e:fd:d5:
67:68:c4:a7:96:6e:5d:ed:15:5e:a4:9b:08:81:5e:
73:17:78:48:88:b8:23:1d:57:d5:6f:4d:e5:a2:d4:
3c:70:7a:38:ab:05:6f:66:50:b2:d2:6d:42:fa:c5:
8f:8d:7c:2d:b0:4b:57:95:aa:03:98:cb:71:13:e9:
c6:33:0f:73:50:e4:be:37:db:9b:31:e9:a8:09:29:
bc:b8:ef:fb:73:b7:f5:4d:d5:68:ec:aa:06:d0:65:
87:c6:71:13:cc:b2:0d:e7:20:51:45:69:c4:51:f7:
46:82:0c:38:f0:d7:30:8a:44:35:4e:5e:fc:e1:2a:
66:2a:d0:a5:58:a2:b9:48:47:b1:91:b2:a5:6f:d9:
f1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F3:3D:66:34:C8:3B:75:1F:EE:1C:F7:6F:F7:B1:16:ED:E2:61:D1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3b5c1d2-4d20-429e-93f6-4d1f30e8b964.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:a040::/46
Signature Algorithm: sha256WithRSAEncryption
96:57:0d:1b:cf:89:d6:f1:eb:bc:33:00:f6:c6:01:eb:4d:d1:
2b:6e:04:78:f8:ce:f4:b9:ac:42:27:6f:a7:d5:d3:76:a1:cf:
5c:d4:05:eb:7e:b4:a1:f1:da:12:0c:af:76:c3:7c:f0:2c:3d:
47:a1:93:5a:24:e4:eb:93:db:4f:f1:15:41:62:91:cf:32:a5:
e7:40:22:06:f6:36:af:74:bd:c7:02:9a:88:0f:c9:47:ba:02:
3a:82:52:56:a3:0b:ad:0b:74:54:a0:1b:82:40:79:99:42:44:
df:8e:d9:9c:11:35:6d:fe:52:3e:cf:d9:f7:e0:68:4a:6b:74:
9d:15:7a:91:40:5c:c9:97:8f:e7:6f:c4:0c:84:e4:ef:8b:db:
d3:26:45:60:ea:cf:b2:fd:e0:c3:3b:a3:aa:77:8f:84:ca:ca:
dc:06:cb:38:5e:43:cd:84:09:85:44:9d:c6:54:10:04:58:cb:
2e:65:7d:5f:e3:e1:f2:3a:cb:d5:a6:34:01:26:8e:da:03:3f:
da:67:c9:fb:4a:71:14:89:78:16:f7:94:f1:90:3c:d1:cf:dc:
08:fd:d3:ca:b0:07:a6:eb:1d:77:06:c0:d1:19:91:5e:1d:ff:
b1:2d:1c:88:79:a8:6d:74:ce:3e:d8:ae:6b:d3:5a:5a:3c:f8:
36:f8:3b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:50:15 2025 by rpki-client