Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
File: 4cb86308-98a0-48e5-8825-d398c0ce8099.roa (raw, json)
Hash identifier: ie1EiXZNU2oDQ49cHFy3fZeAOPvl3gllXLlmOsS0/6Y=
Subject key identifier: 8B:0A:6A:66:80:48:E7:93:26:37:E5:E3:26:C9:8D:67:89:ED:9C:39
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5373528A00D2EEE9F4209C7F8DB96CEC4A82C2D3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
Signing time: Tue 20 May 2025 19:11:06 +0000
ROA not before: Tue 20 May 2025 19:11:06 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:5080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:73:52:8a:00:d2:ee:e9:f4:20:9c:7f:8d:b9:6c:ec:4a:82:c2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:11:06 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=d9a6c2d8390fddff0ad48f789e4b1c4a2844a409d677684e39f74a04bb64ecef, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:cb:2e:91:24:5d:d5:a0:ea:af:55:14:2d:
48:21:a8:36:c5:e2:95:67:df:c8:3d:d3:79:f3:4d:
5b:d6:a9:13:14:48:7e:64:8c:00:dc:91:6e:6f:9b:
4d:da:64:92:ce:dd:cd:65:a9:ca:3c:f1:f0:d2:73:
80:12:53:a4:ee:82:86:30:b5:4c:14:37:5b:67:a6:
a3:71:19:a9:17:99:f4:8c:e3:b2:74:e0:c7:fb:4a:
0e:df:03:f5:cb:ee:d2:a0:f9:ee:9c:e4:a1:c5:34:
b3:58:21:b7:d1:1d:3e:5b:7b:4e:32:a4:13:53:99:
e6:5e:b3:d8:ee:47:e4:92:6c:cd:7c:19:72:d6:34:
ef:4c:3e:f8:84:14:ad:63:cf:e1:20:ea:0a:16:73:
cc:86:66:49:b2:76:da:5c:d8:38:0d:dd:da:bb:a1:
95:4f:98:df:81:51:52:4b:b2:3f:e7:0e:8b:d0:eb:
34:6e:0c:53:35:36:f7:dd:b2:27:42:3d:96:07:15:
7d:a3:1f:d9:68:64:53:b7:4d:1d:52:e3:72:55:a9:
dc:ae:01:62:b5:19:e4:82:c7:a4:93:0b:4d:9b:b9:
de:6f:85:d1:c9:b9:bf:72:5b:1e:75:79:74:8c:75:
40:36:5a:2c:af:0f:8e:cd:71:60:da:53:cf:79:91:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0A:6A:66:80:48:E7:93:26:37:E5:E3:26:C9:8D:67:89:ED:9C:39
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:5080::/48
Signature Algorithm: sha256WithRSAEncryption
18:7c:44:83:35:ef:d9:db:4f:d5:8f:25:a9:ef:be:78:25:ea:
c3:b1:2c:5f:20:bf:3e:8e:8f:df:7c:db:a3:ad:08:53:d2:f7:
79:b0:11:9e:8c:37:7b:0d:bf:15:ca:43:cf:55:fd:1d:52:69:
34:b9:9a:4f:2c:22:d9:04:58:bb:87:10:20:2c:00:d1:7c:02:
c5:51:28:1e:55:46:3e:ed:8c:30:3d:e0:cf:99:d0:de:85:80:
60:21:d8:8f:1d:46:5f:9e:b1:a8:24:36:00:26:48:74:2a:de:
95:57:77:9e:5c:5c:77:d6:06:3b:4b:44:1b:5a:cf:66:8c:cc:
59:33:91:ee:d0:8e:c0:cc:40:28:4a:73:da:6b:25:80:93:c2:
50:22:4e:e2:f5:0c:59:fd:54:b2:f5:86:ed:15:a7:8a:88:2d:
55:7b:ea:4c:53:73:0f:6f:3b:67:81:e6:ad:f7:c8:cf:9d:f8:
fe:9a:dd:2c:fe:0f:7c:fb:96:c9:b4:c3:10:cb:d0:f2:a6:d7:
18:e2:33:b8:e6:d2:cc:87:f0:99:53:95:1b:c1:6c:dd:fa:67:
ce:9a:ed:9d:69:03:bf:ae:d1:86:70:3f:25:77:b1:89:e1:bb:
04:4a:da:fb:bf:ec:4a:05:aa:0e:58:be:26:0b:74:f0:16:c1:
98:1f:f8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:43:22 2025 by rpki-client