Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddbe6491-8b72-4a7b-a538-1d2f7866c8e3.roa
File: ddbe6491-8b72-4a7b-a538-1d2f7866c8e3.roa (raw, json)
Hash identifier: PqId81cmMcQxV6YHyjkMhN5Av/HOMaAp5lOugb+G+tE=
Subject key identifier: 66:60:FD:D8:87:B2:DD:14:A2:80:6D:CF:A4:49:F1:36:96:65:AB:47
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1F1DF635BF5723F59CA41DD20FC9B9C650B24FA8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddbe6491-8b72-4a7b-a538-1d2f7866c8e3.roa
Signing time: Mon 16 Jun 2025 20:51:08 +0000
ROA not before: Mon 16 Jun 2025 20:51:08 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:1040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:1d:f6:35:bf:57:23:f5:9c:a4:1d:d2:0f:c9:b9:c6:50:b2:4f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:51:08 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=08f1d5d2016cf02ce58fcbb916ca2417c9b091d73ad6c0a9fb7bf323fe6bd8bf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:86:03:4a:fa:90:02:ca:6e:aa:4c:e8:71:
57:f4:43:62:ec:83:60:67:53:1d:48:29:b9:5d:cd:
52:97:8d:92:15:98:96:32:cc:02:b0:19:ee:82:b2:
1f:1d:d5:70:8e:7e:8f:1c:62:a2:cc:b1:95:75:eb:
d4:41:e6:53:f6:ca:31:dd:65:1a:5b:dc:c7:a6:0b:
95:07:76:bb:b7:21:2d:42:8b:01:7b:82:37:04:56:
a1:d5:1a:27:f7:4f:6a:85:8c:d0:04:20:d2:c5:1e:
c3:29:1d:0e:1c:2b:8b:45:f3:b0:8f:42:b1:82:fd:
d6:2f:15:ae:3d:d3:a0:47:7a:2c:ed:47:84:f2:7e:
48:08:6f:9c:70:fa:4e:9c:a2:02:7f:df:06:96:39:
26:c9:37:57:90:a7:da:75:ae:c4:ab:68:5e:26:67:
e8:d1:26:5c:ce:b9:77:c6:d3:75:18:f3:cc:3e:40:
eb:ae:ed:14:d6:92:1b:53:e3:40:35:04:bf:26:68:
3a:84:92:12:3c:f9:ca:09:72:6c:22:0d:e9:df:53:
df:4e:32:f1:50:b9:fb:f5:7a:04:52:fb:45:44:06:
c0:50:91:aa:48:7d:b6:58:ec:7d:a9:9b:dd:dd:e2:
cc:df:40:cd:02:16:73:0b:09:07:66:ef:a5:cc:6b:
c8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:60:FD:D8:87:B2:DD:14:A2:80:6D:CF:A4:49:F1:36:96:65:AB:47
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddbe6491-8b72-4a7b-a538-1d2f7866c8e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:1040::/46
Signature Algorithm: sha256WithRSAEncryption
0e:8e:65:64:47:6f:0a:87:68:ed:7e:80:3b:6a:25:d6:5b:02:
1d:67:80:05:e0:78:70:1e:5d:c7:a8:fd:7c:fc:c8:b5:09:b7:
cd:ca:a9:a8:5b:24:93:c1:16:32:05:ad:13:57:ab:08:9b:1c:
a4:ac:a2:3e:5e:f6:64:6d:fe:ce:ac:20:2d:dd:db:3f:3c:4f:
9b:20:c0:87:58:00:f1:57:58:6b:81:29:be:d9:70:c9:90:ec:
b9:f5:5d:e8:90:41:a5:90:3c:16:09:e6:bd:cf:53:bf:fc:38:
60:0a:cd:bb:64:73:08:99:d5:4e:2a:d3:0e:00:0d:8e:cc:4a:
29:21:98:9c:e0:d7:ba:fe:9e:6e:15:c1:cf:f3:2e:54:cb:26:
63:87:09:a2:61:2e:92:17:72:d1:5c:80:82:f5:d3:d4:cb:7b:
c4:d3:26:b1:07:63:63:24:7d:c6:be:ec:04:2e:90:f9:ed:f1:
cf:61:23:11:de:de:9b:5e:1a:80:0d:a6:f9:60:dd:dd:20:e5:
bb:f6:20:84:09:53:82:80:16:32:02:88:07:44:6a:48:c1:e2:
dc:5c:7c:5a:95:6b:d6:6f:a1:03:90:5a:bf:72:38:f6:a2:2a:
38:da:0f:7b:6d:7d:5f:cc:ce:e2:80:85:b1:4a:00:12:bd:ee:
9c:6d:39:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:51:11 2025 by rpki-client