Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee98048-5141-4b16-8b8c-269a397f53ce.roa
File: 6ee98048-5141-4b16-8b8c-269a397f53ce.roa (raw, json)
Hash identifier: WPJ26mOYs4UejE6gl5BNQhvWBZgPwlvCBPADlNmk3M8=
Subject key identifier: 05:5A:66:AA:85:18:60:D0:96:2D:24:30:9C:FA:5E:D0:59:97:DE:46
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5AF117532C67EA16E770C0BE7D0BADF7AB071CAA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee98048-5141-4b16-8b8c-269a397f53ce.roa
Signing time: Tue 20 May 2025 18:50:14 +0000
ROA not before: Tue 20 May 2025 18:50:14 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:4080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:f1:17:53:2c:67:ea:16:e7:70:c0:be:7d:0b:ad:f7:ab:07:1c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 18:50:14 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=f0a3d21b6fe7f251dfe9d4e981523f82481ffaf31e804351f0bbb8871e06cef2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a5:cb:85:70:79:45:21:80:00:5c:40:e6:e1:
f6:1c:db:9e:57:90:74:a0:8b:12:26:09:2e:79:3d:
f6:61:8d:af:77:5f:da:28:d1:5d:a3:0e:f2:c3:df:
22:45:44:48:d1:11:8a:26:a3:16:f0:15:70:84:2a:
91:8f:30:c2:dc:12:d5:4e:35:f8:d5:2e:65:f2:90:
78:4f:42:a0:a7:a5:f1:96:2f:7b:c6:96:fa:98:11:
39:37:6b:ba:91:9f:dc:2e:41:bd:7c:9a:3e:61:19:
fd:2f:0f:af:70:f6:56:fa:d0:3e:4d:a0:47:9b:6d:
61:3d:07:26:8d:ab:aa:29:1e:df:68:07:fd:5b:f2:
0d:b1:c2:7e:cd:d5:45:7c:78:c7:d3:63:69:94:99:
d4:2d:1a:06:f1:24:75:01:95:64:ba:a8:15:78:21:
f8:3c:5b:fd:3a:59:45:b9:b9:a8:90:0c:de:34:02:
33:10:a6:33:a8:ab:7c:d2:c8:55:4b:7c:11:de:0b:
83:a0:b4:0d:e1:c4:ad:1b:44:41:ae:8b:6a:0b:75:
ed:c5:65:49:a7:39:99:65:02:91:87:f3:23:11:5c:
de:31:01:f3:27:d6:01:ce:ed:fe:d7:e4:57:c6:28:
db:75:3f:68:f4:96:06:7b:f9:8d:50:7b:5a:5d:cd:
6b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5A:66:AA:85:18:60:D0:96:2D:24:30:9C:FA:5E:D0:59:97:DE:46
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee98048-5141-4b16-8b8c-269a397f53ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:4080::/48
Signature Algorithm: sha256WithRSAEncryption
88:85:3a:0f:99:48:f8:c3:10:dd:3c:6f:63:dd:93:a2:71:7d:
9a:e4:02:41:28:dd:bc:87:8f:ac:16:ba:5a:a8:e0:f8:ba:58:
c8:e6:fb:37:4c:05:42:fa:87:ff:ff:cd:ec:e4:57:2b:07:81:
b7:e2:99:1d:45:8f:61:8e:8b:a1:36:60:2b:d7:ad:24:c0:3f:
60:1e:23:86:1c:8b:ea:3f:c6:68:27:5b:b1:72:6c:e2:4b:66:
37:7e:2e:da:1a:af:2d:62:0b:ed:70:ed:ca:42:8e:02:c4:a6:
5f:d3:07:f4:18:77:af:68:a2:2c:de:0a:32:df:5b:64:8d:6b:
cd:d3:a6:28:f5:f0:39:5b:e7:0c:77:cf:bd:da:16:9d:00:9f:
ce:22:0b:24:b0:d0:ce:c6:79:41:9a:57:68:26:ae:a3:98:e0:
9b:72:64:34:c8:b5:08:06:0f:94:07:9b:ee:fc:fa:af:f8:99:
b6:e9:4c:17:31:70:fd:4d:60:31:d7:c8:a9:1b:81:e2:ac:c5:
05:b5:06:2b:e0:16:ad:32:d7:12:63:6b:a4:00:1f:16:a3:1e:
6b:89:ae:4b:1c:81:09:70:da:13:99:3c:2f:68:15:4c:ca:53:
d8:17:a5:5f:f2:30:fd:ce:14:c0:cb:e4:13:6b:a7:a7:f0:36:
e9:8f:45:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:40:22 2025 by rpki-client