Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/45c6591c-1ba0-4769-9e6a-11566f006613.roa
File: 45c6591c-1ba0-4769-9e6a-11566f006613.roa (raw, json)
Hash identifier: 0VsYc024MKmn1lZsiy8QBlrhmXbKoKgB+IN7zZUg4WM=
Subject key identifier: 8A:CA:F5:3A:E2:0E:5D:BB:7C:35:E0:45:AB:5D:3F:A4:F3:5E:A8:B0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7F12ABB46F4B156F3FAEA77D64D6ED23D2F69F50
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/45c6591c-1ba0-4769-9e6a-11566f006613.roa
Signing time: Tue 20 May 2025 18:41:04 +0000
ROA not before: Tue 20 May 2025 18:41:04 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:90c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:12:ab:b4:6f:4b:15:6f:3f:ae:a7:7d:64:d6:ed:23:d2:f6:9f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 18:41:04 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=52c9cd5ba8759f128fb75eb477bf484a8ba2caff7c78017a1bc9b97dab1dd76f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e1:72:31:f5:33:9a:68:b1:c2:df:52:30:2c:
9c:6b:5b:a8:e1:92:59:ab:d6:51:3f:1a:4b:99:5f:
81:cc:39:32:ed:82:c6:ad:f5:60:33:73:a7:0d:70:
52:25:e2:31:69:b2:9f:7d:e3:2c:d4:53:e1:6d:61:
a0:3c:57:b9:11:87:bd:8b:73:c3:a3:3b:27:0f:6d:
9e:0c:a4:75:48:e8:09:14:49:e5:f3:a7:6e:fa:7c:
72:de:c5:f8:22:68:e1:15:9a:da:7b:03:9e:c3:71:
fe:6c:3d:c7:53:ba:02:f2:e9:47:67:19:5d:54:33:
e7:ec:f2:cc:6b:6c:59:10:bb:bf:a4:af:44:ad:bc:
06:e1:fa:fc:d4:c9:63:b0:23:ea:fb:fb:55:47:80:
f4:70:14:31:ef:e2:50:0b:0f:5e:a8:3f:8b:04:1f:
fe:0b:ae:da:60:d4:14:18:31:a0:21:bc:25:0b:28:
9e:ab:f1:27:31:da:61:53:4a:d8:9e:20:41:f0:f5:
c3:89:19:37:9b:53:f8:39:55:15:3c:a7:20:f1:aa:
50:dc:be:e6:7d:49:db:0b:91:c9:fe:44:ee:76:57:
86:9b:11:0d:a6:1f:3a:b7:c3:fe:dd:d2:d0:0f:1d:
90:b0:d5:e3:d0:cb:e0:e5:a5:0a:db:fc:43:6a:80:
5e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CA:F5:3A:E2:0E:5D:BB:7C:35:E0:45:AB:5D:3F:A4:F3:5E:A8:B0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/45c6591c-1ba0-4769-9e6a-11566f006613.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
c5:8d:53:97:51:fc:47:da:58:a1:84:9f:fd:7f:a1:cf:7e:e2:
de:1f:f6:04:7c:9d:80:36:43:65:ed:69:05:12:2f:1e:03:4c:
49:50:0d:82:a9:4d:34:df:99:fc:91:69:4d:b9:d2:cf:f6:d3:
27:20:55:51:41:a9:e1:23:b8:3d:fd:f2:2d:1c:03:29:b3:89:
8a:45:fd:31:df:dc:cf:61:d6:8c:94:71:4c:b5:0e:d6:d3:76:
f4:64:36:34:ab:a7:6a:59:4e:24:4d:a5:db:a0:5f:3f:81:a9:
78:51:30:62:5f:c3:fd:70:a2:8c:95:05:05:97:fe:33:da:b0:
1f:81:1a:64:e8:2b:17:74:7e:5b:7d:29:43:10:52:58:28:a3:
b0:d3:79:3b:a6:13:80:d6:33:45:89:41:52:1e:ef:c5:a4:e5:
a0:9c:ea:b8:6c:9b:6f:65:40:4b:51:66:5c:58:9f:36:03:11:
8f:cd:e9:a4:70:34:35:4a:b4:de:7b:f7:af:30:3d:b3:15:82:
50:78:d8:c2:9f:75:3e:8e:51:fb:21:69:73:40:82:e3:5b:4d:
98:7e:69:e1:5b:68:5c:1d:3e:7f:6e:5b:1f:63:1b:76:3a:9e:
e4:7f:6a:dd:1b:cd:14:d7:82:16:b4:b5:75:ef:c9:bc:3f:0c:
ab:ed:50:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:37:47 2025 by rpki-client