Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/216e1c1f-35c3-4c02-a0c3-0b5815c016d7.roa
File: 216e1c1f-35c3-4c02-a0c3-0b5815c016d7.roa (raw, json)
Hash identifier: gQfI/F0dnEQ6OIkBwi2dDqvjHwNu5fK9Igo9Pkj3CrE=
Subject key identifier: AC:AB:2C:78:86:78:EC:42:15:26:1E:62:85:A2:86:24:72:10:8E:95
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 07EAE882896E30C7A97C54066FD11F3E35604E28
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/216e1c1f-35c3-4c02-a0c3-0b5815c016d7.roa
Signing time: Tue 20 May 2025 18:30:19 +0000
ROA not before: Tue 20 May 2025 18:30:19 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ea:e8:82:89:6e:30:c7:a9:7c:54:06:6f:d1:1f:3e:35:60:4e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 18:30:19 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=d152507cff44c431839de3eac092b5a310160ae9b599992f4aed61f29413dc12, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9c:38:b3:14:02:e9:81:b2:60:a9:51:c8:8f:
28:d6:6d:03:d5:ee:78:93:5b:b0:fb:23:f6:00:49:
b1:31:a2:db:12:53:fb:8c:01:e8:76:c2:ac:b3:2f:
61:d5:78:c2:0a:9b:66:17:5a:d7:81:21:24:38:93:
fd:b4:09:a6:a0:73:f0:9b:81:19:11:f8:4e:a3:84:
f4:89:ee:89:23:b1:a3:4a:1a:e5:0c:b9:29:22:3c:
6b:40:7d:b5:f4:d0:79:75:cf:f2:b4:31:48:c2:8e:
c5:37:3c:d2:f4:19:fd:f0:f5:bc:a5:3f:b8:8a:d4:
10:61:7c:5d:cb:b3:80:0b:e2:1b:97:5c:6c:c8:a3:
9b:26:46:43:13:71:dc:83:9a:53:60:2a:8a:6d:74:
5c:58:5b:61:a3:f5:f3:30:bc:b6:22:a6:b1:3f:b7:
0d:0a:07:10:c0:d9:00:ff:05:1e:e5:38:24:a4:d8:
ef:3c:32:64:ef:1f:bb:f2:c1:6e:80:42:56:89:03:
56:89:fc:cd:a1:f1:60:99:f3:6a:6f:4b:71:d0:f0:
53:63:0e:bd:2d:fd:04:c3:cd:8d:a5:50:dd:8c:f6:
9b:17:ec:d8:86:09:e3:84:ed:ed:b5:75:64:fb:aa:
99:ec:fb:a7:ae:5a:9f:be:4f:56:14:f4:60:50:07:
72:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AB:2C:78:86:78:EC:42:15:26:1E:62:85:A2:86:24:72:10:8E:95
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/216e1c1f-35c3-4c02-a0c3-0b5815c016d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
62:94:32:31:54:7e:54:3c:d6:86:cf:15:76:6b:84:ec:0c:5e:
69:9e:45:84:6b:fd:e1:cc:b9:94:51:54:02:00:75:2b:c5:d9:
f7:11:6f:96:b1:41:07:19:49:49:8a:d3:81:dc:ab:4e:32:ec:
fa:3d:56:51:2e:50:8f:b0:03:69:47:40:cc:5b:3e:49:e3:33:
48:89:3c:ac:ec:9a:eb:34:46:fb:d4:d2:63:13:b9:67:d2:5a:
d6:f1:f0:03:f5:60:f3:53:62:2b:5a:67:31:46:88:67:e2:5b:
17:c9:57:b8:a6:65:71:fe:ce:55:01:2c:6b:29:77:e8:65:13:
aa:b9:fa:e4:9f:5d:e1:bf:eb:3f:d5:37:5b:e0:1d:74:23:59:
45:7a:7f:bd:1d:51:32:4d:a3:57:18:74:6e:11:4c:8b:80:38:
bf:f1:48:e9:a0:d6:8a:c6:e7:5d:39:1b:a7:cc:54:be:e3:74:
d2:f4:6b:7d:c4:ef:ea:8a:f2:4a:ef:ba:ea:73:70:ad:24:fd:
24:da:f1:33:5e:0c:ec:fc:68:5c:f8:2f:dc:cf:2e:66:37:d5:
a9:e3:21:de:84:02:97:a5:9b:44:6e:00:03:b3:3a:ce:17:21:
2b:4c:73:53:a5:4a:13:0b:e3:a7:f3:e9:84:50:ed:e3:6a:15:
e8:c9:72:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:39:23 2025 by rpki-client