Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/232e4c5b-5853-4200-81cf-438555b951ff.roa
File: 232e4c5b-5853-4200-81cf-438555b951ff.roa (raw, json)
Hash identifier: 2hc3Y/UCWSuFeGfP9n6CwWgIUnrbbL7e0erxRo+g2Ec=
Subject key identifier: BB:7A:C0:7E:09:04:23:89:28:BA:05:6F:D2:7A:27:15:D6:A4:D5:4B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0D00034CBF9E511E77AF64E2BFDA04AC03B62426
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/232e4c5b-5853-4200-81cf-438555b951ff.roa
Signing time: Thu 22 May 2025 01:22:15 +0000
ROA not before: Thu 22 May 2025 01:22:15 +0000
ROA not after: Thu 26 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:00:03:4c:bf:9e:51:1e:77:af:64:e2:bf:da:04:ac:03:b6:24:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 22 01:22:15 2025 GMT
Not After : Jun 26 23:59:59 2025 GMT
Subject: serialNumber=bf40fd934cf372c5686de7eeff8bc4dfd1694c01955739a28bd465236ab3d93b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:84:77:e8:41:44:60:c9:cc:2c:54:b3:e6:
9f:53:c1:50:90:99:fa:b4:c2:73:d0:70:00:09:64:
49:bd:78:52:d8:2e:6d:7d:29:54:22:1c:e7:4a:c8:
44:f3:ca:1b:cf:70:7f:51:7e:18:38:ef:e2:e6:3e:
e8:4e:66:ed:1f:8f:49:d6:7b:a9:cd:2d:fc:0b:be:
73:45:71:d8:c9:dd:c9:ff:79:77:bf:04:7b:ff:58:
4b:87:7b:aa:39:7a:4d:7e:f5:2c:23:09:d4:3c:d3:
e5:b4:4c:38:5d:ab:0c:d5:e3:29:3d:18:7a:2b:71:
96:22:d6:87:f5:20:16:a8:56:27:61:b4:7b:27:71:
fb:4a:c8:4c:79:cf:eb:06:12:f7:6f:c2:e5:84:cc:
89:c6:0e:10:6c:aa:10:4c:f5:1e:67:53:9d:da:62:
1f:33:b9:c5:4a:f4:d7:3c:91:a5:33:14:49:3f:bc:
dd:6c:1c:1e:65:89:39:1a:dc:54:79:c6:ec:e5:a5:
72:69:7c:4e:68:db:7b:ea:73:f1:83:91:a1:f6:87:
4c:53:80:ad:46:8a:0c:33:7c:ed:d8:a3:74:36:ab:
2c:c2:85:30:fc:f4:a9:fb:ab:ab:35:1f:26:8d:7f:
fe:6f:ab:c2:52:dd:0a:09:f6:b5:f0:cf:b7:a3:4c:
a8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7A:C0:7E:09:04:23:89:28:BA:05:6F:D2:7A:27:15:D6:A4:D5:4B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/232e4c5b-5853-4200-81cf-438555b951ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:8000::/40
Signature Algorithm: sha256WithRSAEncryption
b8:2e:9c:80:84:8b:bf:bc:2a:92:ee:7c:1c:20:0c:81:1a:68:
5b:a2:e1:a6:f2:96:ef:60:6a:bf:88:00:d1:bd:b1:8c:63:f4:
c0:15:19:7d:31:a1:38:2c:27:c1:a0:8e:e3:61:8c:44:5a:2e:
73:70:db:ef:40:71:f5:ac:17:f9:00:0f:75:14:20:43:db:15:
c9:c8:b5:ac:bc:33:da:58:14:8d:15:ea:5f:59:34:e3:61:84:
58:24:df:5e:95:b5:1f:7a:db:04:bf:cd:41:c5:3d:b6:e6:54:
a9:08:71:3a:a3:0d:32:9a:26:3e:51:5b:81:6f:7d:98:b7:6b:
4a:62:33:02:27:3f:bf:b0:b4:55:f7:ce:02:9f:a7:f4:29:6b:
b8:fd:03:3d:68:de:e8:55:cb:88:ce:05:47:3c:65:6a:e3:b8:
fb:bd:d8:09:69:f2:0a:a5:d8:eb:88:79:41:6a:a3:8b:0d:9e:
92:66:86:c1:fd:19:0c:d8:56:65:3e:12:05:71:68:c5:9c:49:
76:57:5b:a1:da:31:ad:5f:55:dc:ef:46:77:17:39:37:9f:53:
f7:2e:57:a3:6f:53:4e:d9:d5:fd:94:36:11:53:8c:97:80:8b:
35:69:2d:46:c3:ef:64:8b:d0:0b:39:d3:1f:37:9f:75:f0:f1:
22:f0:49:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:52:51 2025 by rpki-client