Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e437969a-a36c-4417-88bd-c48ac88d9a5c.roa
File: e437969a-a36c-4417-88bd-c48ac88d9a5c.roa (raw, json)
Hash identifier: Hj7MNJOHI5AePwdAkJ/GHh6tYZwlqLUnwWVuyzVp8YI=
Subject key identifier: B6:74:AB:5E:E8:F3:1F:4B:E1:5C:9E:D0:F6:58:AB:1C:0D:CA:8F:81
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: C404CCB21CEDED7EAD91E787AEA0FB83499806
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e437969a-a36c-4417-88bd-c48ac88d9a5c.roa
Signing time: Mon 16 Jun 2025 20:10:57 +0000
ROA not before: Mon 16 Jun 2025 20:10:57 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:b080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
c4:04:cc:b2:1c:ed:ed:7e:ad:91:e7:87:ae:a0:fb:83:49:98:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:10:57 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=a9472ecbc5fe637223b010720231d2b926997cfdd5f2d396a240f30cf1c198b3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0d:8f:7d:31:cb:72:b1:97:8f:12:d7:b1:66:
cb:2f:70:a8:3c:f0:93:3e:3d:63:12:c1:bd:54:2d:
09:56:74:ab:9e:7c:11:c2:5e:49:dc:18:d8:b0:c2:
0b:47:d6:9c:30:3d:da:ca:eb:43:35:29:9f:3b:2a:
a8:e5:d1:13:1d:ed:ce:70:80:bc:6a:7a:0a:e2:4b:
c6:64:45:63:11:27:1c:2c:2a:43:3f:b9:36:f8:b1:
7f:26:92:fa:b7:2d:3a:b6:52:8b:6b:4f:5d:cb:b5:
ef:6a:5f:88:f2:ba:ea:eb:42:35:3c:d4:d3:18:a2:
3f:14:73:9a:d0:f6:a3:78:f3:10:10:47:13:a5:21:
23:bd:f6:e1:d9:ae:85:98:0a:d3:37:cb:df:51:8c:
7b:b7:56:12:c9:51:81:aa:53:75:fe:dd:7b:9f:6f:
65:d2:06:e4:5f:fd:4c:c0:24:f4:03:39:2b:52:10:
96:ef:3f:ca:f4:1d:35:44:2f:98:b6:49:7c:60:41:
f5:7f:a4:75:cc:0b:08:44:33:a8:99:4d:0c:53:44:
7c:e2:e1:74:6a:db:fc:24:2a:1a:92:6d:cb:f0:31:
cb:c0:54:0a:48:d0:a6:85:c5:bc:e7:5c:c7:45:6f:
8b:66:e0:b3:a8:7f:b4:46:9d:1f:94:39:5d:cc:d3:
12:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:74:AB:5E:E8:F3:1F:4B:E1:5C:9E:D0:F6:58:AB:1C:0D:CA:8F:81
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e437969a-a36c-4417-88bd-c48ac88d9a5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:b080::/48
Signature Algorithm: sha256WithRSAEncryption
16:33:e3:09:6f:e2:ab:81:cd:cc:47:69:81:a8:df:9b:f2:d8:
88:38:ea:07:99:91:e8:c4:24:ae:6f:c4:a7:d8:3d:14:c7:c9:
ec:7c:99:3d:19:33:ed:3d:52:4a:ee:c1:e3:0f:4e:9e:a1:ad:
d4:06:fc:15:f3:d0:be:76:83:60:d5:50:c7:54:6d:cb:0f:96:
75:f5:46:30:ab:01:86:f5:84:0c:35:0d:4a:23:0d:03:20:c9:
fa:38:75:38:34:dc:16:b9:a2:cf:d3:f0:b4:7c:79:86:47:be:
ef:57:d7:6b:93:23:23:8e:6b:07:fc:c5:e0:18:0f:fa:58:8b:
cb:74:68:d9:03:f9:b8:2a:a5:da:0a:c8:da:99:f7:a0:5c:d0:
8c:80:f1:d6:37:9c:f4:2f:50:cf:fb:34:67:99:8c:e2:4f:59:
57:ba:97:d9:da:f4:3f:9b:a6:c9:8f:c5:19:ce:b1:89:9a:81:
a5:ff:80:a8:df:8b:89:82:57:10:5f:81:09:8f:6f:2a:4a:bf:
65:1b:ad:36:1e:ef:09:8e:40:fe:45:a3:00:45:2d:09:ab:15:
64:e2:56:d5:9a:13:26:19:cf:5b:df:b2:07:ac:b5:b6:7b:3c:
81:f0:91:9d:57:01:a9:c8:54:ac:8c:a2:85:04:b3:ee:f4:02:
3c:9b:40:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:24:07 2025 by rpki-client