Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/507c534d-189b-43b3-945a-dd040ee200d5.roa
File: 507c534d-189b-43b3-945a-dd040ee200d5.roa (raw, json)
Hash identifier: Cnw0/NJaA0GEUge9DOK1gJoq36pcnTK9GBLgYb33t6g=
Subject key identifier: 4E:A1:E6:44:5B:6C:0F:14:BF:B6:0B:A4:52:6F:96:8C:D0:98:E9:DA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 21112AC6B50A091C42A949BF06D86D96253AE986
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/507c534d-189b-43b3-945a-dd040ee200d5.roa
Signing time: Tue 20 May 2025 20:01:27 +0000
ROA not before: Tue 20 May 2025 20:01:27 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:11:2a:c6:b5:0a:09:1c:42:a9:49:bf:06:d8:6d:96:25:3a:e9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 20:01:27 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=4ae3783da0e03db21fc3ea4532d4ee46816e4d48fde62d768a29f1ee3235a312, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:95:5e:22:21:f5:1c:ee:be:14:93:0a:05:8e:
0b:fb:d9:d5:71:be:a3:66:95:19:8a:a5:ca:31:7a:
27:ee:61:c4:c3:4d:4b:84:0a:69:20:eb:8d:0a:4e:
fc:29:9e:64:28:fa:32:70:88:cb:c3:94:a5:d0:02:
d6:64:6a:48:82:d0:d8:80:53:6d:9f:00:5b:2e:e0:
5e:63:e3:66:20:54:1f:54:38:6c:e6:3e:19:02:e3:
1e:79:83:e9:2c:6e:d2:e3:57:11:de:4b:c9:3c:5c:
56:1e:ae:82:0e:e2:a3:03:cc:d6:36:a9:a7:0d:a4:
e3:e2:42:1f:bf:cc:5e:d5:f2:5a:57:54:14:b1:71:
5a:20:27:eb:b3:86:9d:d4:a0:cb:9f:a7:6b:7d:55:
55:a2:b9:08:a2:f3:76:19:e0:5d:8e:2b:b7:52:89:
79:c7:fd:64:b4:94:f1:60:53:2a:3a:90:a6:ee:ef:
29:dd:e8:db:2a:1c:cd:ec:3d:e9:10:69:3c:ff:2b:
18:a2:70:bc:0c:5b:8a:84:09:cb:2b:fe:e3:6c:b3:
80:60:35:10:a7:d1:40:31:31:72:39:fc:3f:b2:c3:
15:ba:80:bb:45:5e:e4:19:b4:60:19:b4:00:85:eb:
08:58:89:e2:45:24:b9:48:43:6f:94:e5:70:e3:34:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A1:E6:44:5B:6C:0F:14:BF:B6:0B:A4:52:6F:96:8C:D0:98:E9:DA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/507c534d-189b-43b3-945a-dd040ee200d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:9000::/40
Signature Algorithm: sha256WithRSAEncryption
c6:dd:f8:93:2a:83:7d:89:f6:ff:c1:ef:de:59:98:d5:3c:67:
73:c6:ff:5b:50:69:22:db:2b:22:9d:c2:1f:a1:cd:bd:90:4e:
bc:09:52:ec:ce:52:94:6f:fc:9a:f3:c4:04:15:71:89:b3:75:
2f:d1:57:11:55:dc:a0:7c:7b:a2:12:b8:15:88:f2:53:4a:9e:
10:9f:fa:0a:07:49:55:6d:23:86:64:b2:0f:80:30:52:19:a9:
01:04:be:6b:13:ca:0e:d8:b2:8f:01:86:81:b5:d2:56:33:ba:
03:9f:35:8f:83:2a:92:e5:c8:e7:f8:70:8b:f8:d3:87:00:01:
26:af:da:e8:58:8d:a6:85:39:85:76:63:90:bd:24:d1:d7:e7:
da:7a:7f:95:f1:ac:0a:77:41:54:14:e6:b6:27:8b:7f:2d:13:
ee:f4:5d:72:a6:64:23:62:fa:2b:66:ae:2a:5a:d7:a6:04:e7:
90:80:59:09:88:70:d1:10:e6:1f:4f:d8:ba:6d:ae:9d:62:59:
6c:d9:96:0c:5b:36:21:e0:73:5e:79:96:7f:ab:43:2c:32:5b:
01:9d:d4:12:98:87:3a:76:ab:da:1d:64:6b:04:5f:90:25:ad:
71:31:96:42:3f:12:a9:c5:fe:bd:85:71:85:da:eb:bb:64:6f:
c4:d1:9e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:39:17 2025 by rpki-client