Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa
File: 22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa (raw, json)
Hash identifier: UpRANt+0rvezngzUT9dpkFOSIZhTCHMjHdOM2uNkjJg=
Subject key identifier: F1:DA:A6:A1:04:ED:DC:59:B7:AE:A9:F8:76:4A:A8:93:4B:49:59:3C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 65B1C985813D6BFB3273030D9036D94DDE753FBA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa
Signing time: Tue 20 May 2025 20:10:20 +0000
ROA not before: Tue 20 May 2025 20:10:20 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:b1:c9:85:81:3d:6b:fb:32:73:03:0d:90:36:d9:4d:de:75:3f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 20:10:20 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=a302b67dc49d63f5acff8847200cd8a9577e3b82c74cd5e20fd5cf6a88ec4b4f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:09:08:2f:9a:2a:1f:bb:06:81:a7:8f:84:97:
12:bf:06:30:d2:ca:06:cd:73:c8:e4:79:b4:90:95:
cf:26:0a:46:5e:d1:4d:84:52:33:70:89:47:e5:bc:
52:bc:fa:6b:66:ef:88:e3:3d:69:24:9c:d1:c1:14:
b4:e6:c3:1b:4f:53:3c:b3:60:e6:ae:08:ff:a4:1c:
3f:29:94:54:0f:35:09:3e:c7:ea:16:bf:5d:ad:22:
a6:87:89:32:e2:39:b1:69:ec:c6:eb:60:16:33:df:
f7:e2:81:a5:3f:58:e4:04:33:9b:34:ef:49:9b:75:
30:e8:62:11:da:22:16:8a:b0:00:2b:8e:33:a4:97:
4a:f8:cb:a2:a5:94:60:40:de:cc:5f:09:eb:d1:45:
2e:53:85:93:72:6a:76:3a:4e:45:dd:7c:6d:7c:c2:
20:45:17:80:60:65:89:eb:38:77:19:3a:c1:0a:48:
09:0f:bf:9e:02:25:db:d0:f0:b5:97:8a:a7:56:4a:
3d:cd:fa:47:ec:d0:26:67:b4:81:30:34:07:50:4a:
32:bb:3e:4d:a9:4e:d9:04:50:41:5f:fa:e3:29:66:
a5:7c:b0:37:36:62:57:8e:6f:b8:51:10:06:df:1d:
3b:86:8a:eb:04:1c:cd:ae:db:5b:87:2e:ec:b8:35:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DA:A6:A1:04:ED:DC:59:B7:AE:A9:F8:76:4A:A8:93:4B:49:59:3C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:4000::/40
Signature Algorithm: sha256WithRSAEncryption
83:f4:78:b9:f9:06:89:77:85:7f:07:67:0e:ea:b4:d1:dc:1a:
2f:86:e5:03:0c:f6:88:35:0e:bf:c9:89:3b:d5:1e:5c:a2:78:
07:65:38:0f:f9:2d:62:77:c4:4e:4a:f5:91:51:9c:42:66:26:
6f:ed:d4:88:49:49:25:2e:1b:65:4a:20:16:f3:c2:18:41:66:
9c:b9:ee:6b:bc:35:16:44:0c:be:b0:97:25:48:a1:a5:db:09:
70:a8:b6:83:66:b7:be:c3:9a:98:0c:ed:f4:a2:57:88:a3:76:
2f:39:55:7f:1c:85:06:0b:fb:85:31:fb:db:95:14:55:6f:6a:
75:12:78:cf:c9:39:a4:d5:05:2c:5a:8f:d2:e5:32:b3:80:16:
28:7e:28:f0:80:42:e6:a9:c7:e2:04:e5:9a:71:e5:b1:51:51:
0e:5e:5e:f3:b7:7a:f1:13:d6:f8:54:b3:a0:38:b2:73:ed:7c:
cc:78:ae:0e:cb:f8:4f:de:aa:6f:d7:04:4d:f4:be:a5:00:7b:
e1:95:5c:26:8f:6b:d3:f1:8e:f1:be:49:4b:e6:a4:26:3f:1c:
b3:ac:17:0f:cd:15:e1:aa:30:11:ed:9d:66:cb:1e:c2:a1:ce:
85:65:1c:93:67:52:66:28:1d:b5:64:25:f8:38:fb:af:31:d7:
11:42:ba:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:41:12 2025 by rpki-client