Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/06ce6c77-e378-4729-929f-22edcdc281b7.roa
File: 06ce6c77-e378-4729-929f-22edcdc281b7.roa (raw, json)
Hash identifier: KxKv2VpaoII3NlQahXvX1t/vlgwcL2qz8/Y21FmQcbQ=
Subject key identifier: F0:1F:E0:E7:EF:38:40:A0:F8:4D:DA:C2:8D:2B:39:77:03:3E:3F:67
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1A424CFE54EAC09613EB5FA42C91A5C69A799EE4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/06ce6c77-e378-4729-929f-22edcdc281b7.roa
Signing time: Tue 10 Jun 2025 17:20:39 +0000
ROA not before: Tue 10 Jun 2025 17:20:39 +0000
ROA not after: Tue 15 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:880::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:42:4c:fe:54:ea:c0:96:13:eb:5f:a4:2c:91:a5:c6:9a:79:9e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 10 17:20:39 2025 GMT
Not After : Jul 15 23:59:59 2025 GMT
Subject: serialNumber=9ec87e66b80b9ba46d844e0ae3b3b940362e33efc867a2781455f042027b40f5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:d1:b5:48:81:35:dd:ad:d1:89:06:07:61:
e4:3f:78:6d:16:cc:f5:ef:c2:5c:68:c5:7e:6b:29:
84:ee:9f:78:a8:34:d6:01:95:f4:a9:36:25:e5:95:
9f:3f:10:be:41:75:37:47:00:3b:2b:33:b0:e7:1e:
1e:c9:a1:28:60:78:24:37:f2:9b:68:91:0a:4f:e8:
32:a8:48:af:7c:82:11:19:a1:24:26:15:50:ff:df:
0f:cb:9d:78:66:01:20:8e:07:c1:fc:02:b3:a6:c4:
cd:b5:b2:0a:da:d4:3a:c3:2b:5c:e1:60:6e:14:9f:
b6:c8:29:14:4f:44:da:d3:26:74:1c:82:ab:75:56:
7e:fa:fa:a8:84:37:bb:82:00:3f:d6:7e:6a:81:cb:
36:11:38:84:c4:33:e6:59:5e:26:e6:f0:30:90:6f:
7b:18:b7:10:57:2c:c9:10:e5:bd:b1:b3:c8:b5:82:
43:56:87:ed:11:58:88:aa:ff:37:5d:23:f7:ce:ce:
e1:3f:99:70:87:fa:af:3d:22:68:85:d6:d0:82:48:
0e:3e:36:b2:a8:19:8b:22:9e:bf:8e:61:e4:d1:7c:
af:a2:2f:45:e6:7f:7b:fc:b7:af:b7:aa:61:f9:bc:
92:38:e8:2c:97:9d:3d:d4:13:4e:2b:b8:2f:8f:32:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1F:E0:E7:EF:38:40:A0:F8:4D:DA:C2:8D:2B:39:77:03:3E:3F:67
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/06ce6c77-e378-4729-929f-22edcdc281b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:880::/46
Signature Algorithm: sha256WithRSAEncryption
61:07:02:f4:4e:e2:9c:ad:27:25:66:9c:74:6b:6d:c4:c8:06:
64:79:01:05:62:fd:cf:12:a0:84:88:77:99:ed:c2:fd:f0:ae:
36:dd:08:bf:04:65:93:b1:e4:82:51:30:53:d4:11:1a:68:44:
16:e4:1e:47:8e:ef:fa:0c:71:97:54:db:c4:6d:af:68:39:ce:
7f:0d:35:f0:96:46:ac:c7:53:2c:d8:72:f3:72:38:5c:3e:24:
58:56:49:91:95:5c:7c:c1:c6:4f:4d:b0:36:4d:87:9b:5e:c7:
7f:12:5b:f0:31:f1:a0:54:96:41:4c:95:7f:9a:8b:80:e0:36:
80:58:db:1a:5b:1f:4b:c1:d9:fb:dd:6b:4f:10:26:ff:f8:e3:
60:73:85:2c:1f:15:5b:ca:a3:8c:da:ef:37:7f:81:2b:cf:a1:
d4:e4:18:2f:16:f9:8f:d6:ed:e4:ad:1c:4a:ed:14:ab:02:f0:
1d:b4:d6:32:85:07:00:3e:3b:17:41:a6:ce:0e:6f:32:a6:f0:
8b:d6:55:89:89:39:f3:9b:3c:96:0b:0f:d7:ce:42:44:53:47:
d1:a8:2b:d8:c6:66:7c:06:3e:10:a8:da:c7:a9:ec:32:59:94:
68:e1:2c:57:5a:ec:2b:df:8b:96:eb:a6:f6:58:56:0d:3f:f4:
91:31:11:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:42:25 2025 by rpki-client