Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/245b62a3-aba6-4bec-8e4d-d798fd0e1a73.roa
File: 245b62a3-aba6-4bec-8e4d-d798fd0e1a73.roa (raw, json)
Hash identifier: fKDl9gjgiomnzTfgXxTK8j1fG6SO2PZ9/8ZXPFgh4Kk=
Subject key identifier: 19:3C:5B:F9:5B:67:BE:18:1D:9C:F9:4D:E0:E4:46:A3:B9:6A:C7:57
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 025D6BC2D9C9849595A249DAB2AFF0AA4127B6F9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/245b62a3-aba6-4bec-8e4d-d798fd0e1a73.roa
Signing time: Tue 20 May 2025 19:20:20 +0000
ROA not before: Tue 20 May 2025 19:20:20 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:80c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:5d:6b:c2:d9:c9:84:95:95:a2:49:da:b2:af:f0:aa:41:27:b6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:20:20 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=6b90c618e93a8b5c1ade5a2b8aab6bc376d32ab8e5b0ad67b3753aaf4f760b15, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d2:2d:7b:65:4f:fa:6a:b7:f0:85:12:11:f8:
3b:41:73:01:9e:6b:5f:85:1a:74:a2:04:34:a1:79:
88:78:a2:3d:1c:d2:b7:61:46:26:df:ed:da:8e:11:
28:3d:e5:3c:18:5c:93:00:71:fe:7e:2e:23:2a:f4:
84:21:47:3b:04:14:e6:a1:44:68:82:26:15:82:27:
1a:18:36:93:e3:0a:1a:e1:54:7d:b1:41:20:fe:59:
91:f8:05:01:bc:59:27:25:73:d1:bf:b5:d9:64:a0:
2d:0d:21:10:71:b5:49:40:09:79:b2:6c:58:4d:a6:
22:15:e8:45:61:3a:b1:f8:7d:aa:ca:ff:f1:59:ff:
fa:c9:93:15:49:bb:90:e7:77:05:66:46:29:20:d6:
f3:b2:02:57:55:25:d8:b9:63:44:b1:32:42:7a:d3:
f6:af:16:d9:c6:9a:e7:e4:b1:e1:13:49:4b:cc:c8:
97:e5:08:25:3a:51:ce:25:c1:0d:93:87:90:1c:9b:
84:20:06:09:a5:cf:6d:0c:28:b2:02:e3:e7:0a:ef:
2f:75:1e:7b:99:16:e1:80:9c:58:ab:be:6d:09:ad:
d9:da:7c:0f:c3:58:cc:e7:3b:03:75:97:1d:88:cf:
fb:a7:59:37:8f:e6:cb:f6:60:ba:cd:5c:fd:97:bf:
c9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3C:5B:F9:5B:67:BE:18:1D:9C:F9:4D:E0:E4:46:A3:B9:6A:C7:57
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/245b62a3-aba6-4bec-8e4d-d798fd0e1a73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:80c0::/46
Signature Algorithm: sha256WithRSAEncryption
92:ed:3a:9c:be:df:1a:47:23:53:fa:8e:8c:b9:33:52:78:e4:
f4:59:87:2d:03:f0:be:f1:b8:5d:92:e0:d7:3a:82:ea:a5:c2:
79:d7:04:12:90:62:46:aa:b6:bf:cd:fb:fe:ff:2a:46:98:62:
3c:ad:eb:7e:ae:64:30:b3:dc:67:0a:d3:50:73:51:0f:b0:65:
82:2e:85:92:5e:03:63:c4:af:79:a3:c2:9e:87:62:4f:6a:9e:
b9:2d:61:ab:b7:3e:65:2d:05:04:32:f2:33:bd:57:ae:87:2d:
64:f4:ea:6b:c6:55:cd:48:33:f9:00:5d:84:6d:23:d8:20:6d:
84:44:e7:fd:62:03:c3:6d:c4:5e:82:29:18:77:55:7f:4b:e3:
02:c2:17:82:c9:08:0f:57:d0:ad:5a:70:74:f7:5e:ff:45:73:
f9:74:f2:48:4e:01:4c:26:2d:25:2f:e7:6e:3e:ce:51:52:39:
d6:8d:3f:0a:56:26:12:fb:f6:70:3f:bc:b3:5e:68:53:9a:f2:
e0:4c:22:e3:da:1c:00:59:4d:84:67:c5:56:e2:d4:eb:a8:82:
11:a8:17:6c:dc:1e:c1:3b:57:01:c1:6c:4d:1b:36:25:e9:05:
0d:0e:8f:e6:a7:9b:f4:40:a2:c1:dc:7c:6d:69:35:2b:c5:ad:
67:23:06:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:39:13 2025 by rpki-client