Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa3b401f-ea91-45a9-8182-d567cfac077a.roa
File: fa3b401f-ea91-45a9-8182-d567cfac077a.roa (raw, json)
Hash identifier: hIT4TZHk7nVBzTWoIXMBLMdNtuqkljqtZTiWvF+A5r8=
Subject key identifier: F5:D9:8B:2C:93:C0:D6:85:17:9B:4F:82:49:8B:A4:7E:A3:2E:4B:CE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1AD98CB5377016C306BD0B47910FB2B8C3B7B83E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa3b401f-ea91-45a9-8182-d567cfac077a.roa
Signing time: Mon 16 Jun 2025 19:40:36 +0000
ROA not before: Mon 16 Jun 2025 19:40:36 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:b080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d9:8c:b5:37:70:16:c3:06:bd:0b:47:91:0f:b2:b8:c3:b7:b8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 19:40:36 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=303ee35a910aa3c80053adc98519044b3adbb9098280199d95d5c619a1cfc587, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:29:fd:ee:fc:6e:94:00:4c:07:a5:6b:06:
9d:d4:77:a9:20:0a:81:2c:9e:57:53:29:5c:48:4a:
f6:2f:8c:a1:bc:f9:dc:22:90:c6:e8:1a:b8:31:9e:
ba:28:e1:29:d6:1c:71:64:72:77:5d:5f:a6:9e:8b:
1e:7d:f0:64:6b:17:2f:17:da:cc:43:5b:a2:e8:6c:
5a:2d:c8:7d:db:dd:81:d5:3e:ba:44:6d:f1:c5:ed:
bd:d9:fe:3a:d6:f3:85:0b:36:bb:69:29:c6:75:2d:
17:e5:ec:c5:ea:9f:bc:1c:43:fd:a9:1b:da:dc:45:
56:8d:fe:d6:f8:d3:51:b6:0e:a1:72:50:69:3d:0e:
9e:ae:c7:44:8c:53:c8:33:12:07:e3:8d:a7:39:26:
b5:f4:94:45:81:18:ea:45:33:bd:73:92:0d:04:c4:
f9:11:81:fc:5b:21:4a:1f:b4:d6:e1:ba:a1:5d:30:
4f:76:77:f8:a2:a2:85:14:f0:ad:40:eb:01:90:ae:
95:ac:11:4d:63:c7:8b:59:dd:60:56:e1:c9:bb:6a:
cd:0a:28:0d:30:01:57:d6:23:ba:92:28:bf:c3:bc:
bb:ef:0b:e7:aa:13:68:89:0e:58:ad:b2:5b:4e:86:
1f:bf:ea:0a:67:70:c0:fa:3b:e2:e8:1b:62:9e:79:
9e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D9:8B:2C:93:C0:D6:85:17:9B:4F:82:49:8B:A4:7E:A3:2E:4B:CE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa3b401f-ea91-45a9-8182-d567cfac077a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:b080::/48
Signature Algorithm: sha256WithRSAEncryption
61:dd:fc:d9:be:37:30:2a:9b:1a:67:ce:e7:ea:ce:7e:11:09:
bf:6e:1d:6f:29:a1:f6:09:eb:ae:71:32:5a:07:0d:57:45:91:
11:e9:df:1d:8c:d7:82:e9:13:60:3f:49:33:19:1e:20:9a:e7:
3f:b6:5c:58:69:35:79:06:99:61:fb:21:0d:e8:cf:98:8a:7c:
e9:96:dd:31:26:32:93:ad:57:89:c4:bc:e3:40:5d:4d:56:10:
33:b9:50:ca:b6:55:f6:7d:c9:43:f0:c1:de:3d:1c:04:d7:ba:
f3:fa:96:3a:ed:d7:2a:d9:7f:de:99:eb:8e:35:65:7b:cc:58:
fd:24:ac:ee:e0:be:23:fc:f3:1d:d4:7c:a5:06:52:ba:d7:40:
bf:ec:33:8f:6e:c8:9c:c7:3e:68:1d:c6:01:c3:54:94:9a:61:
ff:16:ff:36:74:07:e7:93:27:45:ae:88:d6:52:9e:91:d0:ce:
70:a1:ca:2a:69:c3:e4:b1:0c:a9:ae:58:79:26:da:5e:08:79:
97:4a:0f:31:91:de:53:1b:e2:0b:62:3a:1a:43:1e:56:e9:0e:
47:dc:d6:6c:3c:86:2f:42:4a:81:00:6e:17:fb:c4:eb:3a:fd:
61:ea:4c:e2:f9:91:57:4d:05:58:aa:7a:2c:fe:9e:78:b9:7f:
ae:f8:cd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:58:29 2025 by rpki-client