Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2270e26b-c2b1-4cc3-800b-33825c0d723b.roa
File: 2270e26b-c2b1-4cc3-800b-33825c0d723b.roa (raw, json)
Hash identifier: HFpvcEvQKWyX/eC6Qwt8b2dGkUzJMyCYaaFOYT2SvdE=
Subject key identifier: 52:09:1E:60:EB:96:3D:41:D8:DD:4B:B2:56:54:FA:43:C2:8A:72:3C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6E20D4B42BFF0D6AA30ED77EDE6C66C668AE4C2D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2270e26b-c2b1-4cc3-800b-33825c0d723b.roa
Signing time: Fri 23 May 2025 00:40:50 +0000
ROA not before: Fri 23 May 2025 00:40:50 +0000
ROA not after: Fri 27 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:20:d4:b4:2b:ff:0d:6a:a3:0e:d7:7e:de:6c:66:c6:68:ae:4c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 23 00:40:50 2025 GMT
Not After : Jun 27 23:59:59 2025 GMT
Subject: serialNumber=97095789e35715c3e725bdbd5ae948c77aeaf6d8e4a41240b57354a68df4d0de, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:49:85:13:a2:9c:54:48:1f:f2:92:0d:5e:26:
7a:37:ee:45:20:53:0b:4c:d9:3c:5e:d0:88:65:44:
5b:65:68:8d:34:3e:c6:af:77:74:7a:91:99:fb:3c:
15:d8:79:5d:f8:24:ee:fc:92:54:d8:58:76:f7:3e:
14:27:2e:6a:77:87:3f:9f:02:5a:e9:59:01:e8:e6:
3c:aa:df:bf:fe:16:1b:7a:43:b4:08:62:e9:a0:3c:
41:68:cc:12:8c:01:b6:d2:36:d1:2b:06:63:02:24:
fb:57:37:a5:7b:4f:2b:b8:0c:fc:19:74:9c:5d:0b:
df:12:c9:6d:96:6f:77:ae:3c:06:6d:bd:29:05:48:
5d:cc:76:0d:a1:8a:20:63:95:da:07:66:53:84:29:
26:7c:c6:ce:5d:ab:a6:af:ea:0e:0e:a1:ff:b2:41:
7e:d6:20:5d:06:72:35:4c:ea:5f:09:87:d2:cf:6f:
0b:79:3b:a2:09:b1:06:21:e9:d6:51:39:86:f5:a8:
c1:e7:ad:38:10:80:ba:fa:85:ef:8c:08:e5:f8:c9:
d7:95:7e:67:fd:72:77:0d:b6:79:85:6c:0d:14:58:
33:3f:5b:ef:ba:e7:ac:29:b4:d5:78:7c:f6:56:13:
5b:55:3c:02:5e:f6:37:d6:b1:0e:cb:9a:5a:0b:0f:
fb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:09:1E:60:EB:96:3D:41:D8:DD:4B:B2:56:54:FA:43:C2:8A:72:3C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2270e26b-c2b1-4cc3-800b-33825c0d723b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:b000::/40
Signature Algorithm: sha256WithRSAEncryption
6a:f3:10:07:f1:b1:18:5e:6e:ba:d2:49:03:21:dd:c7:a5:8a:
61:42:ae:c8:95:01:a9:3a:6c:47:00:59:be:35:86:8b:f7:0d:
c9:eb:ef:7d:fc:62:d1:c9:8f:cc:1c:17:51:52:f1:34:af:73:
5f:f0:5a:69:e4:4b:db:cc:79:33:f8:04:ec:c9:44:b1:d6:52:
6c:32:56:54:81:0c:00:c7:35:73:dc:56:83:87:7c:92:ce:4d:
b4:24:0e:f7:c1:23:b6:99:b4:42:24:8b:63:66:5f:06:b8:02:
2e:37:11:23:5e:3e:59:a7:71:12:a7:de:ea:c9:62:4d:8c:47:
59:e6:c0:90:bf:7f:d1:df:93:24:0c:8f:f8:5f:0a:ee:1c:ca:
db:6b:aa:04:bc:05:6c:cb:64:04:a1:e1:c5:95:36:ee:b4:7a:
53:bd:73:2e:a8:85:ea:ce:11:cd:13:93:48:36:d4:2e:82:f1:
c2:7d:4d:86:a4:c7:d7:db:f6:51:ff:a3:76:f9:58:e2:01:a9:
36:63:5e:9a:0d:97:56:de:31:79:ff:00:94:06:45:43:37:78:
00:a8:b2:f8:d3:23:9c:18:b4:6d:28:4b:07:c3:92:35:e2:d8:
c9:bf:15:40:c7:1d:8c:33:b1:e2:43:ef:c0:35:16:1c:f7:e5:
00:5f:24:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:40:26 2025 by rpki-client