Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/376be0fe-aebc-4855-80a4-ea95cf413b51.roa
File: 376be0fe-aebc-4855-80a4-ea95cf413b51.roa (raw, json)
Hash identifier: gFb0PBYeAG6i0gZtzTDG2kSxwsAg+DedXJA3VGRURoI=
Subject key identifier: 84:D4:C0:0A:8B:35:2D:D8:B3:B9:FE:E4:97:D6:C9:AC:C7:A6:ED:1B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3932D6E45C961CCD1F89BEDC027CEEE7A5547850
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/376be0fe-aebc-4855-80a4-ea95cf413b51.roa
Signing time: Sat 31 May 2025 00:50:08 +0000
ROA not before: Sat 31 May 2025 00:50:08 +0000
ROA not after: Sat 05 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:32:d6:e4:5c:96:1c:cd:1f:89:be:dc:02:7c:ee:e7:a5:54:78:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 31 00:50:08 2025 GMT
Not After : Jul 5 23:59:59 2025 GMT
Subject: serialNumber=5e6f08bfbe42fff3ed3678f9acf9209b0e9ff1778b5af838f2cf9c58863f770d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2e:70:5b:b7:ce:ad:11:bc:64:91:f7:35:77:
04:57:c2:e0:e5:b7:5e:d2:21:f9:f3:e3:ad:1e:31:
ed:71:70:a6:8a:18:49:68:3a:f1:65:ce:18:ed:10:
16:17:c0:48:e0:6a:b1:bd:13:60:cf:24:bf:80:dd:
36:1d:eb:2d:0a:01:fd:a8:57:12:5b:ea:44:74:12:
7a:5e:d6:a0:92:0a:15:46:1c:14:4b:5e:60:84:10:
fc:71:5a:ea:20:e9:ff:a3:31:d7:d9:ff:5d:52:85:
13:a8:10:36:f4:e3:b0:33:55:10:71:3d:32:52:db:
44:28:47:37:4e:4c:4c:4c:86:c2:eb:d9:61:37:54:
22:8d:fa:5e:f2:4b:0a:09:17:19:81:eb:ae:ef:df:
6d:e3:8c:69:88:c8:c3:27:ba:09:01:72:fa:fe:55:
08:63:7a:61:5a:70:4d:99:8d:48:67:58:86:25:fc:
10:ac:80:04:0a:36:3c:a2:ce:8e:aa:1a:c0:b8:a1:
0c:05:ed:54:a7:cb:17:c6:76:33:b5:cb:98:a2:4f:
8e:bc:56:72:6b:f7:0e:69:72:bb:43:9f:b6:99:30:
b9:25:5d:4d:af:56:bc:2f:b5:c5:90:b2:3f:79:3b:
ba:8c:77:7a:57:6d:ef:a6:3e:82:d4:09:2d:6e:33:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D4:C0:0A:8B:35:2D:D8:B3:B9:FE:E4:97:D6:C9:AC:C7:A6:ED:1B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/376be0fe-aebc-4855-80a4-ea95cf413b51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:5000::/40
Signature Algorithm: sha256WithRSAEncryption
02:fd:ab:cc:bd:1f:1e:28:99:9f:91:a9:82:63:53:70:13:f0:
22:2c:da:c9:6f:2d:d7:d9:68:88:16:3a:1d:eb:0c:a4:fc:96:
d6:35:4f:03:48:a1:7f:f1:70:9e:d5:2c:33:35:fb:a3:1c:d2:
9c:ad:ac:db:99:42:e9:c7:8a:70:4f:e0:ee:13:b8:51:4d:6e:
91:33:66:ef:a5:19:c6:6d:78:00:a5:15:63:99:a8:87:c2:85:
a3:e3:17:bd:4b:7b:3d:dd:bd:45:a0:74:e1:4a:75:20:36:84:
40:01:cf:5a:03:61:b4:6d:b7:dd:63:95:0e:f6:56:e9:f8:f3:
32:a0:26:a1:c3:22:23:4d:2e:d3:e5:d2:72:2d:0e:3d:9e:a4:
b6:7e:96:eb:76:46:b0:a5:66:6b:d9:b7:ca:8d:43:8a:64:ca:
3f:c2:e2:7b:9d:f7:aa:31:aa:07:0f:45:fb:7a:bc:f7:fb:98:
4d:a0:57:5d:92:fe:e0:38:b7:82:6a:ce:37:f1:45:02:f3:c5:
4d:d4:59:7d:be:ca:e1:cd:53:8b:16:8d:fe:be:c9:b6:4d:ed:
20:bd:df:89:66:ba:ba:cf:73:78:49:c8:bd:e1:b0:0b:2f:ef:
16:d1:ab:96:84:77:f1:55:ae:72:b1:d1:b2:8d:b3:2b:a2:7a:
3f:b8:1c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:35:36 2025 by rpki-client