Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0588f7a2-2477-4be0-87d6-89d1a4c7df08.roa
File: 0588f7a2-2477-4be0-87d6-89d1a4c7df08.roa (raw, json)
Hash identifier: 6dgJjooF9cMR4OGLcAKxF8PaE7wfjv00y8SwX9V5Guo=
Subject key identifier: 35:7F:50:DA:8D:E2:90:6C:01:66:0D:C4:CF:1B:16:FB:D6:0C:08:0A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7B1118357F2EA1B55012FFD7CFD40B217F861800
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0588f7a2-2477-4be0-87d6-89d1a4c7df08.roa
Signing time: Tue 10 Jun 2025 17:20:36 +0000
ROA not before: Tue 10 Jun 2025 17:20:36 +0000
ROA not after: Tue 15 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:11:18:35:7f:2e:a1:b5:50:12:ff:d7:cf:d4:0b:21:7f:86:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 10 17:20:36 2025 GMT
Not After : Jul 15 23:59:59 2025 GMT
Subject: serialNumber=669c3ad086772279ce230f3ab2d37e1d30d43167111cd6bd076f153ebe61c357, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:68:5c:7b:43:a7:e4:ef:86:39:51:e4:07:
02:25:71:8e:76:8a:b5:e9:8b:2e:de:36:0b:c7:d1:
0e:f5:50:93:37:6d:df:d0:37:60:e8:ca:7c:8a:df:
49:0f:9d:b8:0c:6e:5a:74:0d:a7:94:fb:d0:68:4f:
56:6d:74:68:43:0d:0b:e3:a2:04:c1:f0:4f:52:c3:
bc:75:cd:43:ca:30:f5:a3:de:fd:a8:59:3c:e8:42:
05:4c:7a:72:ec:3a:7a:83:12:52:67:8c:d4:61:96:
22:8b:ad:42:fe:cd:8c:7b:93:aa:4e:0b:5d:b4:c5:
83:e6:26:35:d7:ee:b2:aa:db:7d:39:78:b8:20:fe:
0d:a0:77:cc:af:30:89:6c:94:15:52:27:ea:d2:09:
95:19:9d:d8:ba:00:c7:a0:65:4b:9d:cf:91:ff:7d:
a7:62:ba:7c:68:d5:af:bf:f4:45:fb:72:f4:e2:9f:
f3:e0:71:f7:7f:48:66:d6:a6:80:cf:f3:52:04:22:
37:65:54:2e:3c:3c:8e:0b:ec:30:45:27:23:a1:9a:
89:e7:4b:2d:08:96:4a:00:d8:bb:fe:6e:0e:b9:03:
06:a5:a2:ee:52:fb:2b:77:56:f7:12:3a:50:61:ee:
3b:80:61:78:b8:4c:20:b4:d6:b7:b5:aa:65:22:9b:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7F:50:DA:8D:E2:90:6C:01:66:0D:C4:CF:1B:16:FB:D6:0C:08:0A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0588f7a2-2477-4be0-87d6-89d1a4c7df08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:800::/40
Signature Algorithm: sha256WithRSAEncryption
3f:0e:8c:c8:18:ec:bb:3d:45:99:a6:e8:17:68:ee:a2:bd:1d:
5b:d2:98:7b:e5:31:3e:1a:1e:29:c3:a5:70:8f:b1:11:cb:9b:
36:93:40:ce:fe:04:4c:5a:1c:64:c4:0f:6b:92:98:19:24:fe:
2a:95:67:b9:1a:bd:73:8c:b5:47:13:9d:f0:c2:be:0a:35:5e:
e2:6f:90:74:05:ba:0d:b3:e7:1c:ac:56:05:a0:73:2a:d8:29:
67:38:68:9f:54:8c:8a:50:27:dc:2c:53:7c:03:23:d8:f0:38:
81:1c:ca:9e:20:b8:f8:ad:fa:d0:dd:e7:52:92:f3:17:a2:76:
0c:fd:04:24:d5:a4:ba:0d:88:ce:10:96:b8:f0:de:cb:87:3b:
a3:e6:04:28:25:50:f3:75:d6:3b:f4:1d:33:fe:eb:0a:4f:af:
a7:c3:a5:e6:0c:ff:96:51:cb:04:d2:ee:a8:c9:c1:7b:87:5d:
0d:de:1e:e1:f9:f3:b1:ba:de:1e:6a:09:4b:4a:32:07:a5:ed:
57:62:3d:39:16:10:63:4f:ef:f5:41:0f:d2:fb:7c:dd:3b:a8:
a0:47:58:69:f5:b3:57:70:92:f0:3b:69:9b:82:b8:99:cc:66:
0d:e5:57:05:ba:1f:24:f3:a9:ed:3a:a9:db:4f:b7:9c:df:57:
4a:de:71:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:37:44 2025 by rpki-client