Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c2cf7b6-3fbb-4d74-886d-21c58b347f58.roa
File: 4c2cf7b6-3fbb-4d74-886d-21c58b347f58.roa (raw, json)
Hash identifier: ymm7HFXVMHKplpXejXkgu98oEQuDsFQtto9uXjR+9XY=
Subject key identifier: 0D:F0:10:07:AA:3D:87:E2:03:88:20:94:29:5D:46:3B:29:9E:77:D8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6AD25C0688907A8A1039680487ADD7005FB764B5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c2cf7b6-3fbb-4d74-886d-21c58b347f58.roa
Signing time: Tue 20 May 2025 19:50:12 +0000
ROA not before: Tue 20 May 2025 19:50:12 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:d2:5c:06:88:90:7a:8a:10:39:68:04:87:ad:d7:00:5f:b7:64:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:50:12 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=5eb2d9ef13eb6a1b791548b16bf99cb6b9daf141465123ac43d1dbb64259df6d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:dc:47:b4:3f:51:1f:3a:ab:c8:89:05:63:
23:fc:69:98:67:81:7e:12:f9:3a:42:48:fb:be:c1:
f2:e1:9e:2d:fc:c8:68:77:7e:bf:d4:88:ef:82:4b:
70:9e:4c:d9:b4:a4:3c:e1:a5:c3:af:0d:52:fc:96:
66:54:73:2e:6b:ea:1e:34:a9:85:86:e1:04:32:6f:
42:b9:3d:1e:21:49:77:bb:f0:ef:c5:f2:8c:51:74:
32:72:ec:96:66:1d:4e:04:98:4b:51:f6:fc:35:b5:
1e:67:a8:f9:a0:65:0b:1c:72:cc:47:c6:cf:c7:5e:
e0:cb:3b:e5:99:42:37:8f:61:03:68:27:54:52:cc:
d6:7a:71:79:e6:3d:a0:83:5a:07:0d:34:ed:ab:c4:
52:43:45:f2:af:00:6a:2b:bc:7a:31:e0:77:ab:fa:
8b:7d:20:1d:2b:04:4d:d6:3f:c7:e5:e0:5f:57:59:
1a:81:aa:23:45:d4:01:d7:3d:d9:1b:5c:a9:f0:f4:
73:68:a7:bf:d5:51:26:05:d9:a4:2d:55:28:f6:47:
b9:8d:4f:42:11:ff:b0:92:46:32:b9:e8:d0:45:57:
9d:09:8f:3e:50:62:6b:bc:0f:1e:a6:3c:a7:6a:3a:
d0:08:f0:c4:a1:d6:8f:6f:74:b3:46:a1:d7:6b:de:
48:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F0:10:07:AA:3D:87:E2:03:88:20:94:29:5D:46:3B:29:9E:77:D8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c2cf7b6-3fbb-4d74-886d-21c58b347f58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:8000::/40
Signature Algorithm: sha256WithRSAEncryption
1e:4f:88:46:8e:51:a9:0c:90:1a:d8:eb:f7:cd:fc:32:86:f6:
cc:e2:25:ab:1e:79:80:72:5f:e4:48:07:a5:d3:77:ec:ca:83:
9d:a5:e8:7b:74:df:26:f4:53:88:e4:e7:1e:48:8b:d4:95:78:
64:6e:4b:a1:56:22:8a:8f:82:48:9c:c7:58:84:d1:79:b0:39:
4f:dc:38:55:74:3d:32:1a:14:04:ed:1b:32:e7:df:8a:ba:59:
54:f9:48:8a:b7:3d:dd:d1:63:27:b4:5d:3d:52:fc:19:13:42:
92:58:ef:85:ea:f8:95:da:0b:4f:48:52:b7:07:c9:cc:92:69:
64:ef:b6:da:e1:2b:ea:09:f6:1e:2d:71:65:4f:9f:7e:f8:b3:
8b:d8:ed:ec:cd:d1:e5:e1:43:06:b0:c7:cd:0e:23:9b:6a:ab:
3d:30:1c:a9:9f:81:c8:9a:8b:b4:04:f1:9f:39:59:6c:91:5f:
54:2e:66:f8:f8:f7:76:d7:37:bb:de:3f:d8:20:e3:8e:f1:c3:
d1:a7:25:2d:bf:2e:e3:1f:2e:f9:0e:26:c5:92:9a:da:f5:ed:
79:3f:23:95:c7:32:a5:ea:72:36:f8:b7:2a:95:b6:97:ce:21:
13:0b:64:cb:f0:75:13:93:f2:d4:ce:60:8e:42:99:62:c1:d3:
29:a9:69:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:39:17 2025 by rpki-client