Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa
File: 1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa (raw, json)
Hash identifier: K/0js2Mc7PNMHFTpTYv16rr9QCJDyaajU72y9ixcncU=
Subject key identifier: C3:CB:B4:3C:16:26:2F:74:96:45:85:06:5D:11:53:0E:2F:4D:CC:2C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7B138832EBC9C670C77ECE0BDECE2051BDC09653
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa
Signing time: Fri 06 Jun 2025 15:10:15 +0000
ROA not before: Fri 06 Jun 2025 15:10:15 +0000
ROA not after: Fri 11 Jul 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:13:88:32:eb:c9:c6:70:c7:7e:ce:0b:de:ce:20:51:bd:c0:96:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 6 15:10:15 2025 GMT
Not After : Jul 11 23:59:59 2025 GMT
Subject: serialNumber=141604b61f3023263ba7964d363101fa715ea0a109fd7733952f548ef534a3b4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:df:c0:22:53:08:5f:6e:8c:f0:83:91:33:
0f:ad:dc:47:78:59:cd:75:bc:14:2c:58:7e:fe:79:
d8:b8:41:54:bb:06:94:aa:37:13:30:34:80:8e:89:
43:88:87:2a:b7:29:f3:cf:ff:5f:c8:71:9f:24:e8:
d4:05:fb:91:b5:08:0f:f4:4a:b6:a1:a6:2c:a5:bc:
05:52:ec:55:35:2d:db:b0:49:1e:ee:db:5a:bc:23:
64:07:6a:40:33:a5:85:df:dc:18:ed:f4:a5:c7:b3:
57:fe:9b:1a:0e:46:dd:ab:dc:e1:09:59:ad:80:3a:
ab:17:cb:88:57:54:ee:2a:3f:de:9b:ae:d9:cf:1a:
b8:47:43:b5:41:ba:79:1f:f7:84:08:6d:ea:92:5b:
06:02:5d:ae:e5:77:67:07:ee:2a:a2:b0:da:fd:a7:
ad:dc:04:85:c1:ec:cf:ec:fb:31:71:b4:71:c9:c9:
17:b9:c7:a1:1e:cd:f8:df:f7:09:e4:9c:46:3c:cb:
14:3b:60:21:0d:79:95:e4:c6:f5:4f:2c:87:c7:96:
15:95:01:7e:ba:c1:8e:c5:ef:26:d4:5d:83:3f:c2:
b5:b8:14:fe:35:60:92:ef:15:43:9d:65:d3:86:18:
72:2e:25:12:71:d0:a2:9a:67:97:df:c2:f4:ab:1a:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CB:B4:3C:16:26:2F:74:96:45:85:06:5D:11:53:0E:2F:4D:CC:2C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:2000::/40
Signature Algorithm: sha256WithRSAEncryption
09:9b:e5:ea:37:8f:ed:29:12:5d:38:4e:f7:51:0f:80:28:ac:
48:9d:53:e2:d1:55:60:bf:73:07:1d:cb:a6:a2:4c:8b:a3:93:
c6:53:d4:c4:de:27:ad:ce:f5:85:cd:2e:65:ed:c3:b4:0c:01:
71:c7:9d:5c:b1:8d:45:2f:68:3f:a9:23:6f:8f:c1:20:ef:ba:
58:66:f5:fa:00:b4:8c:00:d0:e5:76:91:5b:b9:58:70:e5:24:
25:c0:ed:90:78:97:c1:e8:0e:f0:9d:1c:32:a6:63:06:7e:e9:
0d:e6:5a:c9:2d:dd:bc:72:c1:fa:2a:0e:10:cb:55:11:45:e0:
f1:da:65:17:b5:09:84:02:81:57:6d:4e:1b:5d:96:b9:79:9f:
51:d3:1b:00:ce:69:29:49:9d:78:ab:2c:44:56:93:d8:3e:75:
59:14:5f:f9:a8:73:97:43:7b:93:73:ac:9a:c4:aa:df:63:e6:
0f:11:35:a3:e6:79:14:89:88:ee:f8:29:6b:82:4a:f7:90:3b:
0f:c9:d0:34:af:1a:53:c1:23:85:24:7c:34:8f:db:79:92:ab:
ff:f3:11:eb:c5:9c:4a:db:72:08:6a:69:3d:10:2c:8c:33:7c:
ef:8b:0a:fd:e2:3f:a2:40:d0:f0:a5:91:ee:b5:d3:8b:c3:11:
3c:65:33:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:57:12 2025 by rpki-client