Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ee4d823-9869-449e-9541-10a647125e4a.roa
File: 4ee4d823-9869-449e-9541-10a647125e4a.roa (raw, json)
Hash identifier: mZlHCC4i6/W+q43LaaagDyUkf58qIQ1+mx82zfcRQZo=
Subject key identifier: 2F:FD:5F:94:D1:F0:D1:9D:AB:2F:42:B3:AA:31:B5:83:12:0A:D6:25
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 48E7673DF099005E4C367E02B54332E4D1421C13
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ee4d823-9869-449e-9541-10a647125e4a.roa
Signing time: Tue 20 May 2025 19:10:47 +0000
ROA not before: Tue 20 May 2025 19:10:47 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:e7:67:3d:f0:99:00:5e:4c:36:7e:02:b5:43:32:e4:d1:42:1c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:10:47 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=3bc6025b5c328a8a9ab487426f7d44a3772e00b5758cd1b7e25a6ae35161782e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ce:ae:5b:65:bf:54:70:eb:1f:65:94:1a:26:
3c:18:f0:ef:c2:7a:08:ce:25:b3:53:3e:38:22:eb:
5b:af:0e:e4:9c:b0:a6:e0:90:64:ca:01:e1:7b:2d:
6c:e6:f1:6e:53:c2:e7:7a:2e:51:00:3a:23:54:bb:
0f:7f:99:1e:54:03:c7:92:18:bb:f7:c0:53:dc:2b:
5c:29:3f:9c:e5:68:18:ba:6b:94:b3:77:06:1a:78:
de:c6:9c:ac:db:e2:5f:3a:86:f4:81:be:28:46:6a:
ba:b2:44:3f:5f:3e:06:12:96:e1:0a:92:60:59:e1:
f6:f9:b4:65:8a:28:fb:1d:90:8a:cf:38:06:82:82:
51:1f:cc:4a:71:44:44:bd:e0:96:cb:f8:ff:a9:01:
a2:3f:45:61:b3:0c:6f:36:3e:bd:9a:8e:4a:7d:78:
6d:d8:62:8a:3d:62:59:ec:9e:16:9e:20:c4:51:00:
33:fa:15:51:e5:62:e5:e0:58:f4:52:3f:e3:d3:a4:
b7:05:b6:d9:0c:f2:35:50:c1:22:d8:bc:77:d3:76:
81:fd:fd:0d:f7:0d:af:0d:80:be:cc:a7:1f:aa:e5:
e5:de:d9:e6:0f:09:1b:1a:1d:17:3f:51:47:7d:88:
ee:b1:3e:19:1f:37:ca:a0:32:c7:42:9c:95:66:dc:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FD:5F:94:D1:F0:D1:9D:AB:2F:42:B3:AA:31:B5:83:12:0A:D6:25
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ee4d823-9869-449e-9541-10a647125e4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:c000::/40
Signature Algorithm: sha256WithRSAEncryption
bd:e8:d9:54:9b:4b:18:53:e2:a6:3a:c4:f4:9a:a1:37:22:b1:
01:bf:74:1b:1a:06:c5:5e:ec:48:2e:a5:5d:2d:81:6e:1b:63:
7c:40:39:9e:1a:aa:51:4d:9e:fb:4c:70:e3:ef:f9:97:72:26:
79:2c:f7:a6:fa:34:67:ca:39:7f:a5:c2:3a:ad:a4:d1:fe:07:
40:b6:98:da:c3:97:c8:87:67:ea:0e:84:87:9c:56:5f:57:5f:
86:d7:f2:40:d4:a1:45:b9:20:0c:b5:33:f2:85:9c:16:60:2f:
b6:12:11:4b:d6:1f:31:81:fd:01:19:03:db:9b:ba:ef:d3:fe:
76:cc:61:c5:3e:0d:91:ff:cc:99:af:ab:cb:f7:5b:f5:64:51:
57:3d:ab:b5:84:40:8e:94:93:b0:bc:09:32:65:98:16:bf:64:
ac:fa:1e:04:ad:3f:4c:1f:4f:fe:2c:12:54:e2:cb:cf:ec:a0:
69:6b:2a:81:90:71:d5:58:08:74:d7:ec:9b:a3:78:29:a2:58:
48:f2:43:d7:a4:28:9d:35:5b:a5:e4:8a:ed:92:97:0a:60:0c:
d7:f9:4a:83:bf:7a:0b:0b:d3:f5:02:d3:d6:de:68:a1:9d:72:
ad:e8:fa:55:67:16:39:c3:7c:fe:93:ff:9f:a9:34:6f:51:88:
93:91:27:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:42:29 2025 by rpki-client