Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/356f05f3-9814-4715-9f58-bf044bf5d10f.roa
File: 356f05f3-9814-4715-9f58-bf044bf5d10f.roa (raw, json)
Hash identifier: I+2s5Zeok5guEZUcF23e5X1t+54OXt4rcLfqjdEVeM0=
Subject key identifier: 60:B1:D5:94:FC:D9:AC:17:74:38:F8:47:71:D7:AC:47:E0:1D:91:94
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5F6A50498659333934E536D4B58D3443E043B145
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/356f05f3-9814-4715-9f58-bf044bf5d10f.roa
Signing time: Mon 21 Jul 2025 16:51:28 +0000
ROA not before: Mon 21 Jul 2025 16:51:28 +0000
ROA not after: Mon 25 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:880::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:6a:50:49:86:59:33:39:34:e5:36:d4:b5:8d:34:43:e0:43:b1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 16:51:28 2025 GMT
Not After : Aug 25 23:59:59 2025 GMT
Subject: serialNumber=ed7aeb0433871faa4bd4ceecd6d27625d6509f2b283433e10d92afd30d3b2a80, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:fc:24:03:7e:6f:3c:59:9f:97:1d:a4:32:
a6:ae:f6:b2:30:77:4a:b0:e6:96:28:14:80:40:de:
dc:a3:d2:c8:34:48:ee:52:9c:31:81:30:14:81:c2:
20:88:de:06:cc:a3:c1:15:35:7c:4f:cb:27:94:a9:
51:4d:7e:59:1f:e2:5f:1f:d1:07:78:46:38:bf:2f:
ba:12:76:e2:ad:da:c7:fb:52:17:29:7e:34:b0:e2:
24:77:bf:cf:90:ab:94:c5:b7:07:75:3a:28:2f:14:
3d:b5:ef:73:80:e4:7e:e5:dd:6b:bf:83:23:85:3e:
df:80:a9:bb:30:37:2a:c9:91:de:fd:34:4d:55:3b:
fd:65:9f:2c:cf:6e:fe:0b:6a:ff:d0:38:bc:82:8e:
c5:5a:1c:a2:bc:3e:ee:c4:30:c7:59:aa:2f:e3:22:
8f:fc:c6:8d:f7:79:84:44:07:80:cb:b6:4f:72:d7:
95:80:c3:5d:6d:74:4d:1e:c5:2e:57:ed:ba:8d:9c:
8d:44:79:df:b7:7f:cb:60:d0:3b:aa:ed:6d:c9:e9:
96:ac:3c:b2:a2:7e:d5:88:f2:1f:da:db:fb:7d:59:
15:8d:46:0b:b8:c1:1a:5a:4e:b0:a5:3a:3f:bf:5d:
b4:de:79:4f:8e:12:8a:08:ba:57:65:46:56:66:1c:
ef:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B1:D5:94:FC:D9:AC:17:74:38:F8:47:71:D7:AC:47:E0:1D:91:94
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/356f05f3-9814-4715-9f58-bf044bf5d10f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:880::/46
Signature Algorithm: sha256WithRSAEncryption
6d:94:fa:7c:cb:72:9c:cb:a3:38:29:03:81:db:52:3d:1f:07:
40:df:03:ed:0c:00:8c:1b:eb:19:ba:ec:b0:56:0c:06:1c:a5:
dd:be:74:7b:a9:37:82:16:a2:a0:3c:91:2c:ca:dc:9c:03:e8:
a4:63:49:a3:17:10:05:b4:40:1e:dd:99:c8:ef:4b:ad:a7:44:
1e:01:07:20:2f:d4:dd:cc:d2:dd:4c:88:e7:3f:37:ee:c6:18:
32:c6:d1:b5:98:e2:a8:b8:ea:6a:4f:4f:fe:63:f9:ac:af:bc:
92:04:ee:75:b2:45:d4:f1:f3:4b:0a:b7:e7:a3:50:4a:ed:68:
0c:89:bf:3e:ff:d0:c3:f4:4f:31:7c:e2:1c:7b:dc:04:53:45:
22:e7:62:46:33:db:11:0d:16:73:89:54:ba:9d:53:2c:1f:27:
a8:e9:5b:3b:7a:cb:d8:8f:9b:aa:bb:af:90:07:6a:54:a4:0d:
94:77:26:3f:97:7e:f4:d8:8f:80:51:61:20:dd:65:ec:cc:c9:
2e:25:6f:e3:d3:40:d5:b3:09:53:ea:df:57:76:4a:ce:d3:25:
dc:c4:53:05:f3:a0:be:14:62:b5:45:e3:08:e1:f3:08:c9:c3:
4f:7b:bc:b8:f0:b3:00:71:63:aa:de:c9:cf:ec:6f:2c:47:ec:
63:96:bd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:59:19 2025 by rpki-client