Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6f399d6-f1e8-473e-9e5e-dbf8e04a6304.roa
File: d6f399d6-f1e8-473e-9e5e-dbf8e04a6304.roa (raw, json)
Hash identifier: sPEfphkrX7kBixIY0n4uG3g8TjUhIEQawXjXYjROVfc=
Subject key identifier: EB:F7:D6:F4:EB:EF:F3:76:15:E8:21:20:63:2E:3A:63:03:55:5C:C0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 73220077112342BE190EC8A447F03C5CD15B6421
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6f399d6-f1e8-473e-9e5e-dbf8e04a6304.roa
Signing time: Thu 26 Jun 2025 19:37:02 +0000
ROA not before: Thu 26 Jun 2025 19:37:02 +0000
ROA not after: Thu 31 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:c020::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:22:00:77:11:23:42:be:19:0e:c8:a4:47:f0:3c:5c:d1:5b:64:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 26 19:37:02 2025 GMT
Not After : Jul 31 23:59:59 2025 GMT
Subject: serialNumber=01510e3ba60c3b0e5145c52383c69ac1deecf7ab0ac22375bb0e6956542a2778, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:61:c5:c7:eb:45:d9:f7:a0:3c:eb:fd:f0:fa:
6f:07:01:10:08:d8:5d:67:2e:ce:cd:c0:2a:37:5d:
b8:35:b4:5d:82:e2:49:7d:d5:3a:61:02:9a:86:55:
15:1d:fa:e9:e2:2e:77:09:bb:e1:ec:ce:e6:7a:1c:
f5:ac:98:66:ba:1b:4a:44:a6:b4:2f:54:7b:84:bd:
7e:f4:17:3d:f9:27:7a:79:11:df:61:31:49:76:2f:
ee:5d:64:e2:f3:35:62:64:fd:7b:6a:25:14:90:cc:
c8:83:64:7c:d1:88:51:2a:55:47:56:0f:f9:e9:dc:
80:f2:9e:5c:6b:97:4e:ea:c1:47:9e:62:8c:82:70:
45:53:a8:f0:b0:fb:b5:d1:c4:4d:33:9c:a9:a1:00:
21:be:61:6b:ae:1e:28:88:ac:4d:fa:3d:22:58:e1:
bd:a7:18:30:19:9d:bb:3e:d2:ff:13:cf:22:24:4a:
67:03:f7:57:a5:76:7b:fa:de:8e:9a:e3:31:70:1d:
bd:13:26:0e:d9:0b:6c:6c:0f:82:11:32:52:49:5d:
77:ef:20:03:f4:72:6c:db:c5:7c:5a:e2:49:ee:0d:
6a:44:51:6e:f9:be:09:de:6e:10:e1:e1:16:0f:e8:
00:e1:1f:62:d7:11:42:1c:e3:c1:0f:6f:fb:4a:71:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F7:D6:F4:EB:EF:F3:76:15:E8:21:20:63:2E:3A:63:03:55:5C:C0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6f399d6-f1e8-473e-9e5e-dbf8e04a6304.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:c020::/46
Signature Algorithm: sha256WithRSAEncryption
af:06:d9:83:b3:89:05:b3:81:72:29:a2:f9:0b:d9:a1:16:1f:
59:b7:15:61:ce:f8:6c:2a:4e:42:7b:3b:a9:14:34:d3:a2:0a:
75:5f:bc:eb:1a:bd:e3:d2:b0:48:b3:18:9b:09:06:eb:3e:b9:
3a:ca:1c:29:94:3a:47:60:f5:a1:c2:3a:12:3d:7c:1e:98:ff:
8f:a2:91:d3:3b:ad:42:b4:f1:19:b4:ee:af:db:98:46:64:07:
69:6b:36:6a:43:3d:bc:9e:03:6a:14:7b:be:cf:87:e2:cd:62:
2e:2f:b7:27:b3:f7:62:a9:95:08:07:81:57:3a:d3:ea:9c:f5:
5d:46:67:96:f4:8b:f9:21:72:7a:cd:f3:71:96:99:90:63:bf:
46:70:21:39:28:63:c0:1b:74:9f:95:f8:be:76:c4:ae:71:2e:
46:11:54:d3:d3:78:c9:be:ca:07:52:8e:e5:7e:2d:68:47:00:
de:58:a5:08:3e:b3:34:4a:19:bb:8a:11:32:36:76:03:a7:86:
71:5d:fd:c1:92:92:6d:c0:d1:13:74:cd:ac:b2:74:ce:fc:b8:
e5:1f:9f:41:86:e0:94:e4:7f:a0:47:38:08:7d:e5:08:32:5a:
05:33:9c:06:c6:c3:5b:9e:92:2b:fb:9e:fe:8c:96:eb:f4:cd:
de:98:d4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:49:03 2025 by rpki-client