Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa
File: 61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa (raw, json)
Hash identifier: F6aTuXxtE8Dxhvz3Lov7l/JlHgCgfBLsY8LVv3nP2io=
Subject key identifier: DA:84:7D:8C:FA:7C:A6:E7:68:2F:28:84:19:E9:5D:8D:FE:24:FA:C0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E98850EDD9ED6BA115872C6BF4BEC269788AF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa
Signing time: Tue 20 May 2025 20:10:11 +0000
ROA not before: Tue 20 May 2025 20:10:11 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:98:85:0e:dd:9e:d6:ba:11:58:72:c6:bf:4b:ec:26:97:88:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 20:10:11 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=0b38ceef6005a852f39892d0ab0188c619ad02e98e0a400c3a27c6239ce7b858, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5c:55:d6:24:64:dd:bf:4a:8d:32:e5:41:13:
ee:06:17:19:60:bc:a0:b3:19:10:e5:32:1b:02:70:
0c:16:40:53:ff:84:f9:4f:32:b8:65:ee:66:62:cf:
0d:2f:1c:ed:02:7f:94:9c:29:28:62:5b:5a:33:c7:
22:07:7e:1c:5f:18:8a:d9:08:89:1d:43:9f:b1:bc:
fd:19:3a:e6:ef:0e:79:7f:04:94:9f:ce:4f:14:ca:
75:06:ba:81:f7:12:f1:ff:f8:99:37:4d:59:fc:91:
da:44:d3:e8:38:f9:9d:80:2f:64:75:f0:c4:2f:9a:
84:be:62:9b:98:bc:09:64:1b:63:98:cb:3d:a2:0b:
4f:8d:bc:79:b7:e0:57:4a:6a:b6:eb:8e:63:88:17:
20:3f:0d:ec:c1:df:ec:0e:da:67:27:b8:5c:a4:e9:
eb:9b:ff:16:e8:d0:68:56:7d:f8:5c:f9:db:eb:36:
ec:33:1f:b1:c0:2c:4c:a3:33:e6:49:0b:b4:46:28:
50:cf:18:e3:4f:78:e8:0a:47:74:85:df:fe:8c:b8:
ef:bc:22:02:c0:73:92:a4:e4:50:ff:90:6d:28:ce:
18:f4:8f:77:4f:7b:4e:6c:48:99:75:14:12:aa:cd:
c6:00:bb:a6:0a:ca:ed:de:e4:0f:7c:f4:1d:de:a3:
ff:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:84:7D:8C:FA:7C:A6:E7:68:2F:28:84:19:E9:5D:8D:FE:24:FA:C0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:a000::/40
Signature Algorithm: sha256WithRSAEncryption
7d:61:a0:32:0e:e5:ef:fe:44:de:06:20:a4:bc:06:bc:db:60:
f2:84:a3:07:38:75:94:f2:59:cb:89:bc:5b:76:75:a4:e6:8f:
77:5a:01:29:00:23:97:df:27:99:1e:5e:67:49:9c:fa:44:6b:
92:d7:81:65:04:8b:c4:f4:d0:d7:99:52:61:51:79:55:34:4b:
43:d4:6a:02:42:ba:77:d3:e1:98:87:30:34:0b:3a:a4:92:de:
1f:e6:89:37:9a:e1:18:90:b8:41:05:92:44:84:c3:46:59:b1:
46:97:a2:31:e1:76:ba:09:a7:43:a1:31:ff:82:38:3e:fd:3b:
ce:e7:01:00:b2:88:b4:11:9f:c6:2a:50:9a:4f:09:1a:7d:d8:
37:c5:aa:ae:77:ea:65:b0:4f:a8:56:06:1d:11:80:24:c9:64:
2c:04:39:0a:a4:ff:4f:08:0f:55:6d:d0:7e:0b:4f:87:68:f0:
ca:19:b4:37:a6:97:7f:88:80:47:a8:6c:d4:ab:e5:de:ac:5f:
01:5b:8b:68:26:e1:8e:9d:93:5a:e1:5c:e5:64:3d:9d:35:1d:
53:9e:be:ab:f4:39:81:e9:65:dc:5d:c9:74:9b:48:be:63:47:
84:6b:53:11:e9:83:09:81:2b:91:eb:28:a3:1b:a1:fc:f5:39:
f2:4b:1f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:36:51 2025 by rpki-client