Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa
File: dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa (raw, json)
Hash identifier: BBEPyVFofCXQVB1oKcfPRKdmQO3U4DuR83ZuAaAKbzM=
Subject key identifier: 33:37:AB:D1:C7:85:37:3E:45:EC:DB:73:79:78:9C:0A:E1:BD:67:96
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 44349DBF692F82360FD37BD3C048E41D15D19BD9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa
Signing time: Mon 16 Jun 2025 20:21:07 +0000
ROA not before: Mon 16 Jun 2025 20:21:07 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:9040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:34:9d:bf:69:2f:82:36:0f:d3:7b:d3:c0:48:e4:1d:15:d1:9b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:21:07 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=612097074007c19a82b6d503fdc092d318504938960d30dc8781edf6bdf99978, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:58:8d:b7:66:4f:e6:0e:ff:98:92:ed:03:
47:f2:b9:9a:60:cd:0d:eb:39:b3:a1:2a:be:20:b3:
47:40:5b:4b:ad:43:74:c2:2d:a5:38:83:3b:08:b4:
8c:c5:af:1b:5d:02:3b:a0:56:e9:da:0d:90:6b:ea:
a6:41:5f:ff:7a:e0:8b:d3:3e:3a:68:01:96:1e:cb:
f3:35:ff:11:b5:47:12:1f:99:96:57:7c:b6:f5:f1:
68:b3:41:72:f1:9d:8e:04:4c:d2:22:67:9e:a7:df:
78:43:8d:32:94:50:93:84:84:69:e7:f2:44:bf:09:
60:b2:aa:70:e0:eb:2c:7c:e1:cf:be:cf:00:0e:e0:
d4:fc:e8:3b:8c:09:e8:a0:25:52:7e:03:aa:be:d1:
46:18:50:8d:0f:41:c5:7b:41:3b:62:4d:9a:b9:6e:
b8:6b:50:5a:91:04:46:41:40:54:12:8e:a4:57:12:
9f:9c:0f:97:b3:59:81:ec:98:1f:ba:14:bd:a1:37:
66:99:d6:28:65:d4:2c:e2:ff:f9:60:4a:92:db:ff:
48:ba:b3:6b:0b:6a:32:06:eb:8f:32:c1:cf:87:2c:
fd:51:0d:d7:53:6b:38:b3:be:9c:29:60:be:18:be:
74:85:20:99:72:5b:4a:cc:61:c4:bb:7f:65:a2:5a:
c9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:37:AB:D1:C7:85:37:3E:45:EC:DB:73:79:78:9C:0A:E1:BD:67:96
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:9040::/48
Signature Algorithm: sha256WithRSAEncryption
88:0c:d3:17:95:5b:2f:56:d5:4b:58:ac:ca:0c:a7:a9:8d:5f:
40:1d:ab:4a:ab:2c:e3:6f:ad:33:2d:65:5a:e9:28:16:5f:6d:
0b:6d:d6:8b:da:0a:02:58:74:60:17:56:f5:47:50:68:2c:99:
dd:f8:57:5f:73:d0:87:dd:36:f3:36:de:dc:0a:69:a9:97:ea:
ad:be:2e:bd:3c:c7:79:29:85:47:b0:98:36:95:42:a2:f9:ba:
4a:85:c4:59:e8:22:94:f7:be:60:4f:5a:34:d2:cb:32:b7:e0:
89:df:d2:81:e8:fa:1d:6d:df:27:88:7d:ae:7b:ec:b3:d4:e4:
14:21:1b:d8:46:b3:35:18:23:06:5a:03:45:1a:89:69:16:33:
b9:cf:d9:82:dd:2e:7c:ef:7e:c0:c4:a8:eb:97:b1:f9:b7:f8:
e3:98:93:80:c8:07:88:9a:05:d8:44:8c:0e:c1:49:55:86:e1:
2a:bc:67:8a:4f:b8:09:f2:d9:36:de:fa:2b:ee:be:23:18:67:
39:f1:29:c5:93:0e:d4:29:4d:55:bd:45:4b:2d:e6:96:5e:b2:
60:a2:3f:67:90:46:3b:3d:5a:fb:ac:cf:15:7f:9e:b9:c5:6e:
1a:0a:57:fc:70:0c:b5:29:df:6c:72:65:df:8b:83:9c:1f:72:
e9:1f:20:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:23:08 2025 by rpki-client