Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0de92d9-9b14-4323-b2e0-a464f60f76b6.roa
File: f0de92d9-9b14-4323-b2e0-a464f60f76b6.roa (raw, json)
Hash identifier: sndRIgtTMor/Ega4s2o3uxCNMBgPw7Y72UeMkn5a2Bw=
Subject key identifier: 9B:64:5A:97:B3:3B:AC:02:F2:32:3D:1C:52:10:B6:DC:9C:81:F3:E0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2D2FD14C8B8E7B214F60A0C5CFF5C1A55D53134A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0de92d9-9b14-4323-b2e0-a464f60f76b6.roa
Signing time: Mon 16 Jun 2025 20:51:09 +0000
ROA not before: Mon 16 Jun 2025 20:51:09 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:2f:d1:4c:8b:8e:7b:21:4f:60:a0:c5:cf:f5:c1:a5:5d:53:13:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:51:09 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=723b80cb322a24821f7a2241f2adc519f6565c41102b0779ed25336cab51ca3f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:f3:cd:85:e2:02:16:81:f8:b2:30:74:66:
32:9f:d2:10:7c:13:49:3b:58:32:99:5b:8d:b9:31:
8b:8f:df:6b:3c:16:bd:38:b6:23:22:58:a3:9a:e4:
8c:64:53:96:54:d7:94:84:b1:49:c6:b3:bd:3c:ca:
f9:f4:04:2c:7a:dd:d4:72:e3:54:63:d3:93:e1:c3:
90:77:5a:75:2e:a5:ec:74:e7:81:8f:29:fb:ec:0f:
d1:2e:38:40:c9:e2:96:09:96:e8:e5:63:93:39:15:
6d:41:9f:a5:83:94:ab:a8:87:7b:4d:dd:9a:3f:2d:
36:a8:e6:fc:ae:55:11:fe:ac:62:ab:0d:b1:fd:fa:
05:6a:6d:04:af:4e:a6:45:63:21:53:c0:53:79:02:
54:c5:6d:39:db:ef:68:bd:6b:65:8a:a9:ef:df:03:
1c:42:52:93:97:da:96:42:e0:d8:85:a6:ae:58:d7:
dc:f6:56:a0:54:cc:20:e9:76:50:7b:7a:03:d1:46:
12:08:4f:59:f6:76:23:1f:76:ae:55:80:d0:72:6b:
00:5d:cc:7c:69:03:0d:4a:1e:4e:1e:03:d4:6a:d7:
c6:24:2a:51:0d:1e:7c:ee:8c:9e:47:b9:80:cb:27:
ab:2e:f9:88:0b:21:97:09:74:33:70:3f:c2:f5:83:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:64:5A:97:B3:3B:AC:02:F2:32:3D:1C:52:10:B6:DC:9C:81:F3:E0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0de92d9-9b14-4323-b2e0-a464f60f76b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:1000::/40
Signature Algorithm: sha256WithRSAEncryption
48:0a:30:55:c2:a6:6d:9d:82:bc:e4:b7:cf:0e:e8:1f:ce:d6:
a0:61:0e:82:6b:bb:1c:bc:72:94:3e:d2:ef:66:39:06:f1:fe:
29:8d:9f:11:66:2c:bb:82:2c:2a:e9:18:73:ad:98:1c:b7:2c:
64:56:50:0c:8d:31:89:20:98:c7:35:13:94:17:43:39:80:8f:
a1:86:a1:94:35:92:fa:b8:2b:24:f0:e6:d4:c1:62:6d:f1:05:
45:34:8f:6e:51:09:82:c8:2b:31:76:15:94:d3:fe:01:fc:b7:
29:8a:5f:9e:f3:76:62:bc:2e:04:a5:f2:00:e6:6c:5e:5e:12:
2b:45:74:8b:a6:87:5b:46:49:1a:33:c8:cf:5c:9d:31:8c:55:
cf:72:63:ca:fe:6f:82:61:06:a4:1c:a3:62:f3:aa:e2:24:b4:
77:6a:33:68:04:1d:51:31:6f:da:ff:9a:4d:80:fa:3a:ab:0b:
ca:6e:3e:c2:82:ed:25:6c:c2:1b:ed:c2:b0:96:4b:36:7f:1b:
34:61:8d:03:a0:c1:cd:9e:30:6e:4f:0e:42:d0:55:3e:c4:2a:
58:0b:61:ef:fc:2b:a2:c2:dc:f9:16:33:13:0c:66:31:f6:86:
38:ce:10:1c:d1:6f:39:82:28:bf:ac:42:71:00:03:da:24:63:
83:ef:1d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:51:10 2025 by rpki-client