Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e84166dd-4497-414d-9864-983017c7c326.roa
File: e84166dd-4497-414d-9864-983017c7c326.roa (raw, json)
Hash identifier: jjr2I2Qs9Z9mH7XBm3P0m5iXMwdPukxUVyCMxiBPifw=
Subject key identifier: 7F:4B:85:85:40:72:3D:18:4F:D8:EE:10:A5:34:38:79:B6:6C:A3:59
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4F171E270C55887A3A913B8A3BE03C621D387CE3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e84166dd-4497-414d-9864-983017c7c326.roa
Signing time: Mon 16 Jun 2025 21:20:04 +0000
ROA not before: Mon 16 Jun 2025 21:20:04 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:17:1e:27:0c:55:88:7a:3a:91:3b:8a:3b:e0:3c:62:1d:38:7c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:20:04 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=636ca0ed422adee6ceca86857127653631286c71275aa54ff545df95b6360567, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:da:f2:62:0b:ea:4d:86:e4:c2:9b:3e:30:92:
48:ff:94:54:70:d2:7c:9a:42:c6:6a:1a:1f:61:b7:
59:be:ee:34:56:61:05:85:f0:00:ee:5b:05:f0:4b:
f3:c2:42:85:3b:58:33:08:41:4f:20:36:4a:18:9a:
30:eb:65:cc:86:a6:8b:86:f9:70:b8:99:57:33:9d:
fe:e8:38:9c:c5:2d:bc:73:85:03:5a:43:e2:40:e0:
33:4c:42:c7:f2:65:2f:6a:36:f3:10:00:18:6f:39:
3b:7e:89:6c:2c:d5:0f:43:48:af:cd:7c:9c:45:b2:
f8:55:4d:fd:b4:14:0b:b9:46:01:5b:e8:72:3b:58:
43:2b:ee:1d:ef:ef:27:5f:06:25:59:67:c6:8f:b2:
fa:ca:82:5f:93:3e:8c:ac:2a:5e:53:31:99:7d:e6:
07:f8:a6:37:3e:ed:bc:75:ea:b7:6a:20:4d:35:0b:
fb:38:c0:97:e9:da:16:0c:f5:1e:8f:09:8a:50:49:
32:a0:98:ca:0f:b8:29:f5:b0:cf:17:e3:4e:1b:21:
70:e8:e2:b5:85:de:38:8d:d1:92:06:48:e6:35:12:
e3:60:d2:11:af:a4:b9:a9:b7:4e:42:3c:26:f4:41:
a0:b8:96:12:92:42:37:b9:79:3f:5c:17:00:ce:6d:
99:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4B:85:85:40:72:3D:18:4F:D8:EE:10:A5:34:38:79:B6:6C:A3:59
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e84166dd-4497-414d-9864-983017c7c326.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:5000::/40
Signature Algorithm: sha256WithRSAEncryption
02:84:03:cf:ce:fe:83:b7:ac:18:42:27:87:ac:fb:a1:40:46:
27:5c:95:f5:41:01:a5:51:d1:58:c8:25:5a:08:4d:84:96:f2:
50:fc:97:ce:3b:51:aa:6d:d6:b4:72:03:3b:ea:e5:ab:82:09:
3a:79:ac:fe:36:cd:e7:5a:ae:45:f0:e3:70:32:43:23:db:7c:
ca:03:c0:54:bb:b0:d4:75:45:b3:ce:9f:1e:df:1f:e3:71:f6:
04:17:9b:0c:a0:47:20:3d:07:27:b7:c2:0b:b4:7d:c3:24:e7:
5f:c2:bd:03:0c:50:2b:ac:27:be:58:27:1c:8a:d5:d0:9f:d8:
b3:47:4c:d9:2d:fa:18:c6:fb:25:d1:81:dd:69:47:61:28:01:
68:e9:a8:3a:71:7e:97:8d:79:e7:7d:be:12:0f:c0:ef:a5:2b:
fb:db:47:e8:86:42:44:48:21:2f:d9:07:9b:ec:a4:8c:17:24:
52:9b:b5:a6:90:45:57:04:8f:c9:3b:cc:7f:6f:d2:21:06:b0:
b2:37:47:a4:b6:0b:ba:e8:12:3e:47:01:3b:dd:c2:cb:bf:ac:
ad:f1:e2:06:37:77:a3:9a:d4:f0:5c:ea:58:15:09:75:5d:df:
12:d7:60:ce:73:a0:69:17:b9:57:a0:77:2f:f3:5b:60:4d:0e:
3d:77:29:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:49:30 2025 by rpki-client