Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1acc9be2-9211-4678-96a4-ec65ebb7bc77.roa
File: 1acc9be2-9211-4678-96a4-ec65ebb7bc77.roa (raw, json)
Hash identifier: h6IFYee/Ngylk2mbwhPJ/EZlqM0s7snSD2KuVyGeUpI=
Subject key identifier: BB:DB:E5:06:A3:04:44:B4:38:55:E9:27:D8:A0:59:20:C4:5E:39:86
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5E42A9FDDF335F927581CD390F357E75D09DA063
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1acc9be2-9211-4678-96a4-ec65ebb7bc77.roa
Signing time: Tue 20 May 2025 19:51:53 +0000
ROA not before: Tue 20 May 2025 19:51:53 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:4040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:42:a9:fd:df:33:5f:92:75:81:cd:39:0f:35:7e:75:d0:9d:a0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:51:53 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=b4524e0e4745362807f07357c66a20cee8381679d2eda49acbe0c0413b2a46f1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:79:10:34:c8:44:96:03:a7:d3:df:05:df:73:
24:54:e8:dd:e2:73:86:31:27:3f:64:73:b3:2e:56:
8a:08:1a:f6:a0:7c:32:2b:df:ab:19:8c:fd:be:73:
e1:5f:8c:b4:8b:ad:9a:c9:38:34:b7:bc:ba:b7:ae:
af:6e:d2:da:c9:d6:0b:8e:3d:5e:45:3e:a6:27:ef:
b7:72:62:cd:a1:7c:59:af:de:bf:5c:d6:8c:7f:76:
f0:16:47:ba:18:82:20:6b:3f:46:ad:20:46:1d:7d:
5c:e6:f7:0b:16:7f:43:af:b9:c3:73:72:e9:e9:02:
25:ef:53:cf:d9:e2:fd:c9:64:fb:50:f0:9e:89:2f:
ae:ba:de:9f:ca:e1:19:f5:f4:fc:33:82:6f:c1:73:
bc:6b:02:ab:96:ba:8f:59:02:a8:fa:38:b4:da:33:
1a:c8:80:04:e0:5a:35:07:af:d4:ac:95:a3:1c:56:
f5:d7:20:bb:f2:41:b3:16:b2:b9:27:c1:c4:49:dc:
ac:f5:27:68:d4:e2:c8:35:4c:f7:ba:66:4e:4c:25:
7d:d7:2b:fb:04:92:88:ce:cb:d6:fd:0f:80:77:c1:
00:cb:38:94:98:c9:c8:74:0b:4c:ac:3d:50:17:56:
a5:b4:ff:02:71:2d:e3:8b:09:31:d2:db:a6:a8:bb:
61:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DB:E5:06:A3:04:44:B4:38:55:E9:27:D8:A0:59:20:C4:5E:39:86
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1acc9be2-9211-4678-96a4-ec65ebb7bc77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:4040::/46
Signature Algorithm: sha256WithRSAEncryption
98:10:92:a0:31:11:bd:b7:23:30:fd:c0:e2:41:77:23:b4:f2:
05:33:21:7c:3c:ad:1a:42:1b:23:48:90:8a:c1:2c:94:c2:47:
02:27:8d:ed:45:29:55:49:f6:29:47:c1:ee:05:49:88:ca:0c:
17:07:d1:aa:98:89:28:b8:14:46:30:e1:e6:19:ce:67:3f:e4:
bc:4b:ab:73:6a:b7:34:f7:a6:db:44:f5:fb:9d:d5:a0:6a:63:
0c:f0:d0:63:25:7e:e4:ca:ae:6f:ac:f1:8a:ad:f0:45:9e:59:
d9:3f:e1:75:02:9c:33:07:df:d2:e9:75:c5:27:38:98:5a:47:
86:db:a9:7c:71:83:0e:f6:34:fa:c2:04:dc:10:58:3d:92:23:
7c:41:61:75:4e:43:22:6a:85:08:08:d8:26:5f:91:a0:9c:49:
11:e2:b7:05:3d:d7:20:86:ec:48:48:34:82:f1:12:e0:f4:6b:
23:3b:0f:62:a1:14:51:52:b5:c6:76:52:f2:41:11:06:e1:9a:
61:42:24:9f:13:dc:0b:12:e2:9d:eb:34:f3:e8:13:67:eb:01:
dd:0f:58:fb:70:0f:a0:be:94:b8:d2:e2:ea:25:6f:70:f0:e5:
5e:ed:45:cd:9b:33:18:0e:1c:a0:d6:14:36:22:8e:9a:3c:3a:
17:27:85:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:40:21 2025 by rpki-client