Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/533769c8-002c-491c-9b99-324fe9f5743c.roa
File: 533769c8-002c-491c-9b99-324fe9f5743c.roa (raw, json)
Hash identifier: +zkOTjCkBFZbYhx4UJ0shLiKTtZOzbEY16IU6m9zFqE=
Subject key identifier: 43:83:8B:01:89:92:A6:EE:76:C9:44:B0:4B:F0:09:6F:E7:91:B8:26
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0A3BF1551157730EAD93F3A9E1F7A7AF0DDA6135
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/533769c8-002c-491c-9b99-324fe9f5743c.roa
Signing time: Tue 20 May 2025 20:30:25 +0000
ROA not before: Tue 20 May 2025 20:30:25 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d022::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:3b:f1:55:11:57:73:0e:ad:93:f3:a9:e1:f7:a7:af:0d:da:61:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 20:30:25 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=1659a9b7258a0111f1b528baab7250d12d36ab303b4e8d6a5983f47af2f608de, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:e5:72:ef:08:84:d6:ae:92:2d:8a:27:e0:
f1:ca:5e:22:58:08:fc:ee:56:07:ce:e2:f5:97:32:
af:c4:74:92:f6:d7:9b:bb:a7:35:f2:69:97:e8:a1:
e7:47:f9:10:49:58:df:63:37:7f:bb:6e:da:ef:44:
8c:28:c8:60:38:69:f6:99:05:0d:af:a2:c6:dc:82:
45:e7:10:21:8c:59:43:e1:53:dc:f6:89:bf:87:88:
54:69:86:b5:3f:1e:bb:1e:5e:e3:0d:9a:b5:b7:e1:
16:7d:23:de:f5:e7:ad:37:cc:7e:a0:ec:37:5c:eb:
8d:7e:52:ab:fc:f5:9e:aa:5e:f6:e0:aa:1a:80:5b:
8b:8b:01:8f:69:55:10:87:50:dc:c8:11:ca:fe:aa:
97:61:d1:53:5e:58:03:dd:98:bf:ff:aa:0a:76:41:
dc:a0:d7:15:86:bf:29:12:a5:2f:33:09:7c:ff:83:
6b:ea:8c:93:1e:6d:a0:26:69:11:c7:f9:10:41:d0:
64:63:47:66:2a:45:43:08:98:b3:e1:2f:94:f4:a9:
7c:ff:da:ec:32:c9:ff:f0:9c:83:a3:db:85:f3:35:
ae:8c:7a:6b:76:22:6e:f8:d7:fc:87:e7:9c:e9:60:
2c:7f:e9:23:e7:b0:a3:7d:bc:a9:b4:3a:21:97:6c:
6c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:83:8B:01:89:92:A6:EE:76:C9:44:B0:4B:F0:09:6F:E7:91:B8:26
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/533769c8-002c-491c-9b99-324fe9f5743c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d022::/36
Signature Algorithm: sha256WithRSAEncryption
a1:4c:37:37:4e:6c:bd:e3:52:cf:ee:fc:15:e4:43:ad:b3:9f:
ae:46:66:14:6e:c2:61:f0:43:7d:0e:e0:1f:f6:4a:b7:58:ea:
2e:91:8f:9d:9e:ba:51:c8:98:54:ff:a5:37:aa:3b:64:bb:46:
60:72:e0:56:04:28:d2:6a:33:c2:ca:89:a2:0a:2c:b8:99:4d:
83:27:3d:39:b5:d4:99:57:cf:11:45:a9:c2:91:2d:12:23:a9:
44:3a:5a:d3:46:89:38:fa:8f:16:68:61:30:87:24:74:26:c2:
9f:70:b0:ca:a5:97:92:e2:cd:2e:b6:f0:7c:5d:98:7d:cb:45:
3f:bb:56:89:78:7f:e9:6b:92:25:6c:36:7f:55:6c:69:37:89:
9b:69:1f:1f:c3:e0:be:05:97:bd:29:2a:a2:c6:b6:0b:44:54:
ee:28:71:b7:25:71:2e:61:1b:0a:d0:de:67:ac:bb:42:e1:83:
b0:f7:9c:2b:2d:f6:38:53:18:bf:93:fa:24:a7:30:a1:59:21:
e5:7b:da:a2:ce:ae:63:c0:68:7a:8b:56:62:8e:43:61:61:2e:
8c:94:07:ba:ea:6f:7f:a8:29:9e:ea:76:1b:09:9c:06:73:50:
9b:cb:d9:96:36:9f:c2:76:e9:fd:f2:e2:2c:4d:74:9d:3c:c1:
2c:37:0f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:37:46 2025 by rpki-client