Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25e5dc44-9b73-42f2-b6d1-c0f559b533bd.roa
File: 25e5dc44-9b73-42f2-b6d1-c0f559b533bd.roa (raw, json)
Hash identifier: GQDyoP2QiF5y3DvGT9Inj+r4shMlzoCFIjsnahXRnVY=
Subject key identifier: 74:D9:7A:55:78:9C:17:94:50:44:D8:2C:0D:E0:49:AD:75:2E:04:18
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 13729BD0F7B345B05508C05C0C3F6F000EC8D62E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25e5dc44-9b73-42f2-b6d1-c0f559b533bd.roa
Signing time: Tue 20 May 2025 19:20:08 +0000
ROA not before: Tue 20 May 2025 19:20:08 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:20c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:72:9b:d0:f7:b3:45:b0:55:08:c0:5c:0c:3f:6f:00:0e:c8:d6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:20:08 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=6b9bbb6140837d6a5eeb9bd8f9678c5de4cfcde02714ddfab90fa8eef1fae5cd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:c0:20:df:a9:dc:be:78:0d:eb:73:3a:62:
fe:24:72:c0:f3:72:12:9f:e3:e4:84:db:3a:51:09:
6a:cd:f5:01:af:51:df:55:d6:15:bf:83:11:27:bc:
58:ab:78:6d:85:1d:68:44:07:91:09:66:b9:28:7a:
bb:e8:4f:67:f8:71:72:3d:89:51:37:7f:87:22:06:
1a:c9:f3:13:35:67:1b:62:70:39:e5:d8:a5:e4:4f:
18:9f:5d:4e:24:53:c9:ae:5e:03:f7:b7:92:b4:e0:
c4:a7:36:e1:fb:16:07:c6:4d:2e:b9:ca:19:2a:14:
7f:e7:7f:84:47:3c:c0:45:7e:79:0f:27:f7:ac:87:
0b:1f:8f:50:2f:48:2a:c0:c1:78:6a:57:e4:05:f4:
ac:30:cc:97:c0:0d:21:61:4b:5a:a8:4d:07:7f:df:
bf:26:9a:f6:16:49:4c:4e:47:86:93:3d:aa:1d:05:
5e:3a:7d:1f:69:f6:14:ac:e6:1e:bf:85:e5:0c:fe:
95:5d:fc:54:9e:e1:2a:af:13:6a:34:b3:f4:42:02:
13:d8:cd:42:59:90:5c:b4:b0:28:08:20:fe:f4:02:
f8:72:3f:0f:2e:dd:7e:53:68:3c:8d:09:86:ac:d6:
fb:1c:ab:00:00:16:56:95:f7:9c:c1:05:7d:93:a7:
33:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D9:7A:55:78:9C:17:94:50:44:D8:2C:0D:E0:49:AD:75:2E:04:18
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25e5dc44-9b73-42f2-b6d1-c0f559b533bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:20c0::/46
Signature Algorithm: sha256WithRSAEncryption
97:f4:66:7a:52:d9:41:56:84:88:17:7a:39:d3:53:2d:db:a0:
5f:79:78:52:7e:3e:1b:5e:ca:13:20:bf:49:89:13:e7:20:17:
9c:67:1f:45:58:9d:6a:0f:57:93:9a:d8:39:8e:55:3e:85:34:
56:4e:21:e7:08:d0:6c:fd:42:c5:80:89:23:f6:a8:16:14:b9:
0c:b7:91:0d:62:08:b4:78:7a:48:d0:91:63:fa:4f:70:e3:53:
c9:83:c8:36:57:0f:16:af:35:eb:ea:9e:59:57:59:4e:96:52:
f1:12:f7:a2:96:f9:ed:3a:66:17:5d:af:fc:bc:3e:bd:15:30:
37:82:52:e6:fc:cc:6d:7d:c2:5e:db:a7:f8:de:12:6e:c5:0a:
d0:63:ce:a2:51:38:f7:cc:c4:08:ee:0f:de:ba:ea:ce:18:e9:
1b:ee:17:bb:11:47:99:b0:e6:7a:1f:9b:07:47:ab:61:d2:37:
30:53:10:61:04:e2:a0:7b:59:05:bb:f4:11:0c:b9:1d:c2:2d:
74:7c:21:d8:1a:6e:22:65:31:ea:0b:d3:25:6b:43:60:14:61:
d5:3b:e5:f3:4e:28:6d:fe:c0:23:0d:b1:88:ce:88:9d:6c:a5:
dd:10:54:14:33:88:38:7b:8a:c8:ca:56:e4:2b:13:32:09:b4:
2c:f9:77:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:39:19 2025 by rpki-client