Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f6813853-40b9-46d5-be14-0208aaccf095.roa
File: f6813853-40b9-46d5-be14-0208aaccf095.roa (raw, json)
Hash identifier: bSoILAwkLeBLDlAcfgTnd5j/A1jW371CqgORbIVlVvA=
Subject key identifier: 50:25:06:94:8B:C8:74:7C:E9:28:57:00:97:B2:9F:B6:01:18:43:A3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3373B6CBC9553105F05AD10ECDF064D947D2E8B3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f6813853-40b9-46d5-be14-0208aaccf095.roa
Signing time: Mon 16 Jun 2025 20:40:56 +0000
ROA not before: Mon 16 Jun 2025 20:40:56 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:4080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:73:b6:cb:c9:55:31:05:f0:5a:d1:0e:cd:f0:64:d9:47:d2:e8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:40:56 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=7d755b758beb87f05247fab25887d3fe170774e646b1acbbd7a2a729c7de847c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:ac:e4:3b:6b:a2:6e:78:04:2c:9e:dd:f2:
7c:32:5e:f1:e0:a6:f8:4c:bb:7b:68:85:8f:b9:eb:
41:3f:1c:72:35:d1:a1:f8:af:66:a3:75:c4:b3:80:
6a:19:17:70:78:67:05:31:a5:b1:01:ee:63:54:4c:
17:86:55:59:7d:e0:02:46:1c:45:7c:7e:f9:1d:29:
59:5a:6c:03:91:3f:50:63:cd:01:19:c5:ae:f2:bb:
e1:84:9f:62:15:1b:e8:77:e1:48:ba:4d:2b:ff:9f:
d4:fe:64:cf:c8:94:5c:8d:d0:1d:88:39:4c:84:ed:
c4:30:f8:9f:8d:41:7f:89:ca:bc:23:62:e3:ca:56:
26:ff:b2:f5:fc:b8:76:25:6d:89:a6:81:7a:53:f5:
94:5d:7d:d7:a6:5f:6a:f6:e6:3f:0e:48:b1:4b:6a:
e7:fc:36:b1:54:c5:8a:7e:f8:aa:cd:22:fe:50:05:
95:f2:ea:7b:e3:50:26:84:ba:e8:0d:fa:51:f0:fc:
cd:29:1b:da:25:12:c2:41:86:1f:c2:c3:00:a3:79:
6c:62:71:12:2f:32:be:be:90:bb:17:f7:8c:f3:dc:
14:bf:7b:70:20:c1:39:96:98:ca:c5:4e:48:80:56:
91:cf:61:ef:0f:ef:79:f9:5d:5f:e5:40:da:4f:a5:
67:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:25:06:94:8B:C8:74:7C:E9:28:57:00:97:B2:9F:B6:01:18:43:A3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f6813853-40b9-46d5-be14-0208aaccf095.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:4080::/46
Signature Algorithm: sha256WithRSAEncryption
8f:ed:2a:1e:4d:d9:14:cd:e5:fc:19:c4:5f:52:a6:27:57:82:
69:37:25:ab:94:9a:02:0d:21:4a:31:45:09:b0:bd:8f:9e:6c:
fe:46:e1:d6:93:e5:e0:81:8e:7f:8e:3f:47:f3:3f:b7:37:24:
e1:e5:9b:2d:4e:a9:c6:e7:be:c4:74:cc:ce:1e:a7:88:a9:4d:
0a:4d:9c:a8:52:c9:41:5d:fa:5b:13:81:aa:8e:db:48:02:9c:
71:dc:c8:e0:0f:8d:75:c9:d6:3d:0f:3f:6f:f1:cd:25:40:49:
e1:92:27:3a:e8:d0:2d:4f:7a:25:e8:03:dd:a4:ed:27:19:74:
50:ee:02:55:00:3d:56:0d:2c:dc:27:d4:7b:9c:db:5a:e8:7d:
d5:7c:6e:c7:bb:85:cd:50:26:b1:f5:2f:c7:82:f3:5d:f4:e9:
5e:d9:2e:16:05:81:39:c4:de:f9:71:a9:b2:32:59:23:44:0b:
82:be:91:09:8d:6d:38:a3:db:64:d5:e1:1a:62:95:00:ac:20:
e4:04:1d:2f:ab:e8:7d:a9:b7:91:1c:6f:5d:a3:ae:59:7c:b7:
51:58:09:2c:83:c7:11:fa:01:16:57:b5:8a:01:25:ea:c1:54:
78:50:f9:fe:ea:bb:8a:10:c4:27:b3:05:ed:f4:3c:de:df:20:
eb:74:b6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:54:43 2025 by rpki-client