Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce413ad-560d-4eb8-915b-8c6e01d97910.roa
File: 7ce413ad-560d-4eb8-915b-8c6e01d97910.roa (raw, json)
Hash identifier: phMCkO+X1wbY0YER15gfVj9mdv3/Q0zpROXuvZA4fO8=
Subject key identifier: C0:2A:61:17:BA:B4:B3:1E:8E:27:8F:01:8C:C0:15:84:7B:36:54:27
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0D2126CE0667FC60096C32EABB91DE02C40CEC5B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce413ad-560d-4eb8-915b-8c6e01d97910.roa
Signing time: Tue 20 May 2025 19:11:07 +0000
ROA not before: Tue 20 May 2025 19:11:07 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:21:26:ce:06:67:fc:60:09:6c:32:ea:bb:91:de:02:c4:0c:ec:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:11:07 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=7a90419f3e50799284c80fd9499fe9ba2ffebf99686faad76e9bbd03e985c841, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:0d:a5:12:10:26:97:ec:0a:14:ee:4c:64:
92:a6:a0:a1:83:38:c3:ac:08:5e:c7:b9:09:21:a2:
c2:a5:5f:fc:5f:29:86:b0:14:0a:c0:3c:79:95:a0:
bd:2f:58:ee:67:ce:7a:11:9b:8d:8e:3c:6d:a6:6c:
31:53:f5:8d:5e:e5:c2:2e:29:0f:bf:46:10:1f:71:
a6:bf:64:02:c9:b2:0e:95:3c:25:c5:15:74:b8:1b:
f6:8e:15:7b:05:a2:21:87:11:78:8a:19:cd:5d:00:
b5:21:8d:18:81:04:87:ee:5e:1d:34:07:91:71:5d:
9c:fd:db:70:1a:68:38:b0:fe:a2:fc:ee:2d:6d:84:
24:5e:4d:90:2c:12:68:2d:96:c1:04:f2:bd:c8:10:
4a:ed:4e:9e:6b:f2:2e:79:05:da:2b:c9:f7:8a:df:
ee:51:3d:71:03:d1:23:82:e0:04:d6:ba:af:6e:b9:
0c:ea:c5:20:e9:46:48:36:76:96:48:8f:6c:c1:0d:
40:6f:d3:69:5d:5e:12:fa:78:9d:d1:02:04:6c:64:
d6:eb:e7:63:ca:a4:b1:bb:fc:bb:4e:8f:a1:90:fa:
0d:91:c5:74:21:05:ea:af:10:ac:88:58:95:76:d9:
4c:f8:bf:d1:c5:71:4a:eb:5e:66:55:2e:37:8c:ea:
27:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2A:61:17:BA:B4:B3:1E:8E:27:8F:01:8C:C0:15:84:7B:36:54:27
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce413ad-560d-4eb8-915b-8c6e01d97910.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:5000::/40
Signature Algorithm: sha256WithRSAEncryption
75:98:e1:4e:76:a6:b2:d7:d6:b0:d0:be:98:a7:9d:02:e0:2a:
2e:74:0b:b8:ca:38:86:e6:83:d8:e0:7f:3c:e2:93:1a:ae:2f:
fa:cd:3c:0a:71:d0:4c:69:35:4d:d7:94:fc:f9:2e:d1:0f:ae:
cb:8c:87:d9:a1:f4:a3:96:33:0d:06:04:cb:18:00:d2:03:94:
27:3b:44:a4:cb:73:60:c2:2d:7e:44:a5:e9:ae:07:77:50:c6:
dc:ac:20:21:dc:a6:64:ec:21:9d:0d:5a:99:6c:eb:80:ae:bd:
43:7a:7c:81:cf:58:04:8e:df:2b:38:8e:82:cc:67:c0:db:74:
82:54:97:f1:a0:0d:eb:82:b0:0e:b4:6b:ad:82:d0:17:d2:58:
83:96:f9:df:ea:0f:03:2c:5b:73:29:9b:1e:a1:8c:ce:2f:61:
89:6a:81:2d:3e:7a:4d:0d:4f:f5:9e:16:5d:e9:e0:b7:4f:aa:
fe:e5:0a:f8:0e:a3:47:70:ef:dd:bb:d3:ba:53:28:64:17:17:
02:1c:05:c9:8f:ef:fc:df:b8:e4:32:19:55:37:2b:c8:ec:77:
b4:7a:3b:57:8f:0d:ce:93:2e:82:3d:1d:12:02:ac:ed:1b:a8:
b0:80:cb:d2:c0:63:49:d7:e8:89:4d:78:db:bb:8c:76:b3:d6:
d4:a2:a1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:40:15 2025 by rpki-client