Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa
File: e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa (raw, json)
Hash identifier: E+SCO7WswvhojdoWHrfU5FdhOtsj5TSSbsjz3pkhBcA=
Subject key identifier: F6:20:3A:83:BD:8D:C0:A2:E4:AE:A2:C9:FE:96:35:41:80:56:29:A1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 35844A6E56721FA4D48076ED2AED0FC151324937
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa
Signing time: Mon 16 Jun 2025 21:50:12 +0000
ROA not before: Mon 16 Jun 2025 21:50:12 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:84:4a:6e:56:72:1f:a4:d4:80:76:ed:2a:ed:0f:c1:51:32:49:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:50:12 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=628af9ef24ffc8264721f2acb31c5f75f6c54209fae701345f2ed903d3c2ab20, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:21:fa:0e:0f:d0:53:bd:6a:bb:2b:98:b2:
09:30:7a:fb:62:c0:f5:00:cc:86:bc:eb:56:87:94:
76:0b:c8:b3:cb:23:d0:84:73:f1:d9:6c:51:d5:cf:
84:58:b8:90:0c:83:43:3c:95:8d:26:e0:27:7c:3c:
ff:33:a4:5e:79:84:44:f8:36:1b:36:01:f1:e5:b5:
c0:fb:d1:99:e4:be:46:83:d2:ab:fa:8c:9b:5b:46:
cb:c2:20:51:04:c8:2b:ef:ac:93:67:b9:a9:0b:14:
d9:fa:f2:a5:df:8c:c2:25:55:71:e5:97:be:7a:3d:
85:2e:fa:07:19:1a:0f:be:be:3b:10:f4:ea:bc:e7:
13:af:83:ed:d7:31:f6:6c:3a:c7:bb:5f:a9:35:a4:
7e:ce:e8:66:15:f7:f8:48:a8:34:d6:1f:c2:cb:21:
5d:7a:de:25:e7:f7:1e:db:69:bc:05:44:e4:f4:1c:
20:48:f8:30:ea:ed:8c:00:1a:c1:da:1e:05:0c:80:
bd:d9:3f:1b:be:f0:6b:a0:24:00:36:9a:76:4b:ac:
f4:82:e7:68:e1:72:b7:f2:7d:0a:0e:53:af:66:7e:
73:93:c6:96:67:78:7d:25:38:21:51:06:6e:c9:3b:
fc:d4:23:32:ac:4d:e3:9d:1b:3b:2a:d7:0b:94:f8:
a6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:20:3A:83:BD:8D:C0:A2:E4:AE:A2:C9:FE:96:35:41:80:56:29:A1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018::/35
Signature Algorithm: sha256WithRSAEncryption
49:6f:03:25:b6:82:c8:30:e7:6e:3f:de:3e:43:a2:ed:8e:26:
82:b5:b3:52:ba:9b:ea:ec:32:c0:c1:d3:c8:4e:d8:6a:eb:80:
44:03:97:b9:be:d4:3f:8d:7b:a1:4f:8a:38:38:1a:1c:ab:32:
f9:d4:2c:ce:c6:49:25:0b:0c:19:ee:fd:35:04:4e:d2:ee:b2:
50:42:cc:2f:17:1b:eb:bf:70:d1:b6:3a:6c:44:e0:74:81:b7:
71:0c:83:2e:46:bc:92:4d:fd:79:79:15:04:8f:af:a9:ed:8b:
23:7b:5a:cf:c3:7b:06:b2:8e:a4:15:f8:e8:2c:de:d7:39:8b:
80:c7:46:d8:d5:67:4f:91:a5:61:86:11:3b:f4:77:33:e6:0d:
d7:c2:08:ca:ee:c4:82:6a:9b:0a:1d:54:ca:b9:57:cb:76:c3:
a5:65:64:63:91:77:3e:7e:91:6d:66:2e:af:c2:7d:45:00:ef:
37:18:93:6f:e4:97:8a:6d:a8:96:7c:9e:10:0e:d0:9d:0d:62:
32:8b:64:ea:8c:2d:16:60:6e:a7:90:5e:2b:ad:33:52:4a:98:
0a:6a:b1:11:15:2a:ea:0d:29:1d:1b:6b:80:1e:31:e3:0d:f7:
46:f8:07:b2:f1:1b:93:34:b5:cc:d2:ee:4c:2f:f7:19:3a:84:
be:dd:28:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:29:24 2025 by rpki-client