Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5238c13f-b2a5-43d9-9624-d2e714a9bf53.roa
File: 5238c13f-b2a5-43d9-9624-d2e714a9bf53.roa (raw, json)
Hash identifier: R2w6q+i+Y42/MEsH/gyyLAtW4KctKpV0JZWsFaboKx8=
Subject key identifier: A9:33:1A:D7:48:14:C3:AD:2C:32:D1:EC:4B:46:63:A4:7A:13:F6:92
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2A0CD8E3C945B8C2BD617D006E2CD0129BFAFDB8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5238c13f-b2a5-43d9-9624-d2e714a9bf53.roa
Signing time: Mon 26 May 2025 15:10:34 +0000
ROA not before: Mon 26 May 2025 15:10:34 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02f:800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:0c:d8:e3:c9:45:b8:c2:bd:61:7d:00:6e:2c:d0:12:9b:fa:fd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 26 15:10:34 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=5690f0e564748ca06acb570cb36aa31f57177a27410fd562ae44c993f4453160, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:58:2d:9d:9b:20:ca:eb:92:10:4a:6e:a9:ce:
8f:70:5d:c0:ef:b2:8f:31:b9:99:11:3c:2c:d3:c5:
ca:86:71:c2:45:07:ec:be:e0:e9:3a:d8:97:c9:e2:
be:29:cf:62:e8:17:ce:c1:b0:4b:a9:e6:7e:9f:ea:
91:99:3e:94:e7:49:f3:4b:1a:5d:89:36:33:b2:3f:
d7:d4:01:76:f6:30:a2:38:34:21:ed:cf:16:cf:55:
1e:cd:7d:80:2a:96:e4:99:1a:10:21:fc:02:e4:95:
82:99:b6:fe:cb:4f:5b:53:a9:ed:28:db:8b:36:90:
8e:0e:61:14:ef:c3:8b:89:0f:e1:85:ea:99:cd:40:
1e:e8:e6:a3:ea:b8:f3:9f:85:73:ed:1b:9f:c2:cc:
9d:34:85:b2:b4:d1:4f:bf:6a:57:fd:0c:3c:9a:77:
40:65:5f:0c:7b:ae:d5:09:3f:02:bf:29:2e:cb:e4:
4c:5b:0a:80:1f:bc:4f:9a:b4:37:3a:5c:01:83:e2:
13:66:a2:f1:ab:35:8f:cd:38:bf:65:6b:a4:6f:9b:
82:60:cb:f1:ef:67:6b:cc:e5:10:e0:ff:46:28:55:
d8:b0:8a:d5:c4:95:77:9f:af:00:62:36:e8:7e:e9:
47:5d:27:d4:c0:09:21:53:d5:1c:8d:84:43:b7:15:
7e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:33:1A:D7:48:14:C3:AD:2C:32:D1:EC:4B:46:63:A4:7A:13:F6:92
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5238c13f-b2a5-43d9-9624-d2e714a9bf53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02f:800::/37
Signature Algorithm: sha256WithRSAEncryption
77:f4:a8:f1:ee:c1:21:bb:8e:d6:ca:a5:5a:e1:74:5b:55:f6:
97:09:e8:0a:12:81:67:f2:5e:a8:40:af:22:ac:d7:66:b4:55:
cc:66:2a:3d:2b:e4:c6:1d:9e:8c:61:47:03:67:fd:35:17:12:
fc:4a:9e:b6:2d:1b:24:d4:1f:50:4b:37:96:66:f8:68:8f:32:
aa:c9:a7:8d:ef:93:d2:85:09:f1:2a:d8:34:df:6a:cc:e3:4f:
b5:4f:dd:f1:e1:fc:ee:cd:74:99:98:04:06:5b:b2:78:2f:6d:
b7:9a:9b:7c:d6:6b:38:96:fa:5b:d9:c7:9b:92:36:69:b5:d7:
07:c2:06:c9:05:ea:93:6d:39:68:61:22:56:41:2a:dc:76:f3:
ea:21:cb:85:4b:2e:f4:f6:9a:2d:3d:2e:fc:a1:47:52:6c:c2:
8c:f2:06:6d:74:31:5c:7e:2a:d9:6c:28:55:d9:e3:69:76:a6:
38:72:83:f8:1d:7b:70:93:8c:a8:0e:1d:98:5c:df:4f:c3:64:
f0:2b:c4:54:e9:68:74:b0:06:7a:bd:ef:1d:43:4c:c7:e8:2b:
07:7b:c3:50:02:f3:77:73:fb:8f:99:97:73:bc:8a:66:34:4a:
11:d2:78:6f:d7:39:07:38:ae:1f:50:a3:37:20:39:68:d3:f2:
7e:88:20:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:40:25 2025 by rpki-client