Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/41abc6c7-a6fb-4666-b503-a8a0784797a1.roa
File: 41abc6c7-a6fb-4666-b503-a8a0784797a1.roa (raw, json)
Hash identifier: eTFDc1mdLZPMS9+LqdP9HIVwVp3I7LM/nSOB0hB1UF4=
Subject key identifier: B5:79:F7:37:A3:14:06:30:9B:E9:9A:B1:56:29:54:F0:47:54:BA:E9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4BF68AD07442C5C85AB2BFBE334C2A83E9235E4D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/41abc6c7-a6fb-4666-b503-a8a0784797a1.roa
Signing time: Tue 20 May 2025 19:10:15 +0000
ROA not before: Tue 20 May 2025 19:10:15 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:f6:8a:d0:74:42:c5:c8:5a:b2:bf:be:33:4c:2a:83:e9:23:5e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:10:15 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=d716b5bc2b5bc6e75552ad1f2dea0ea198c502c80563d18f6c6dcb79c7533786, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:2e:7c:44:32:6a:b6:97:e1:4a:00:97:3d:
f0:65:62:52:e6:f1:f7:d6:67:84:c0:2c:36:eb:65:
94:cb:45:6e:89:f7:8a:e0:28:9d:df:4c:3a:a6:ad:
bb:c9:d4:39:1f:05:38:12:d7:1a:1b:47:29:06:54:
81:fd:dc:19:a8:5b:62:44:5a:14:55:fd:7c:36:e4:
11:f8:32:29:0c:9c:0e:60:ef:1c:af:f1:d3:09:2b:
82:cb:44:ea:43:4a:d4:54:4c:09:37:f9:75:d0:e6:
33:9e:f5:55:ee:7b:f3:81:d0:44:74:90:64:77:df:
e2:f1:9e:5b:2f:5b:4d:7f:f0:25:7b:58:61:4a:64:
d9:ee:8b:89:1a:64:6a:e6:5c:1a:56:50:12:9b:4f:
d7:74:9f:6f:36:6b:12:5e:74:18:65:02:0f:5b:23:
80:34:a9:eb:00:10:62:d6:4e:75:6e:df:ce:83:8e:
85:06:d5:e8:0c:26:ea:ec:4f:ff:12:f9:2d:cf:eb:
e4:ec:0b:f6:61:db:96:05:67:e0:ad:36:19:1c:a2:
8a:5f:3b:98:cd:23:9d:76:79:aa:7d:f2:bc:a7:de:
57:25:1a:47:62:81:ec:2f:2b:4a:fa:59:a6:1d:a0:
83:9b:ca:42:6c:e8:9d:61:d6:fc:eb:8f:7f:5f:7b:
58:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:79:F7:37:A3:14:06:30:9B:E9:9A:B1:56:29:54:F0:47:54:BA:E9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/41abc6c7-a6fb-4666-b503-a8a0784797a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8000::/40
Signature Algorithm: sha256WithRSAEncryption
00:0f:9b:1a:fc:8f:ba:fb:78:0d:49:53:be:58:23:fe:2c:62:
4d:f6:63:3c:21:b8:87:59:db:64:ca:86:8c:2b:58:67:d1:17:
d1:2d:9b:4b:de:38:c2:4e:99:68:25:fc:2e:e4:b5:ad:e2:7c:
dd:06:03:49:c4:dc:3d:8c:26:c7:5a:ee:46:bc:47:aa:8d:82:
50:67:0f:94:71:e5:c1:b5:8a:1e:87:2e:d4:9d:31:a3:5c:be:
a6:5b:a5:52:33:09:f9:50:54:38:07:d9:75:bd:c0:81:2a:98:
77:fd:7e:99:72:bd:c2:1a:43:47:88:43:5d:42:07:a2:51:66:
6a:ef:4d:dc:d7:5a:c0:db:6d:60:e5:7d:59:ab:88:5f:a7:05:
94:53:f3:4c:64:e0:1d:d2:27:5e:8a:95:5d:16:e4:af:a0:04:
ab:58:d4:54:52:04:e7:3f:fb:a2:6f:71:db:cf:2b:d3:f3:5b:
74:58:43:83:49:b0:ea:cb:67:94:9f:ce:ca:c7:8f:11:3e:d4:
0a:c1:aa:38:2d:dc:94:a4:11:25:f1:b3:e0:14:72:eb:04:ec:
74:9c:76:79:a0:d8:b9:8e:4b:50:9b:cc:bd:25:3f:08:d3:ad:
95:84:4c:4c:79:56:94:37:56:2e:1f:46:0c:46:64:f8:fc:fa:
3f:bb:59:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:35:33 2025 by rpki-client