Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cfb4167-bb34-4b3d-8c92-bcd5cab97a46.roa
File: 7cfb4167-bb34-4b3d-8c92-bcd5cab97a46.roa (raw, json)
Hash identifier: v7JUgrYvzvb1sr5nGeDusXttj2zuRMai7gt1VhSWvjA=
Subject key identifier: B1:5C:17:3E:8A:F5:F0:E3:BA:29:52:E4:B7:FD:89:4B:78:29:90:12
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 54E8F907AE3460B860F64EF227D4E33413B206A4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cfb4167-bb34-4b3d-8c92-bcd5cab97a46.roa
Signing time: Tue 20 May 2025 19:40:40 +0000
ROA not before: Tue 20 May 2025 19:40:40 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:1040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e8:f9:07:ae:34:60:b8:60:f6:4e:f2:27:d4:e3:34:13:b2:06:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:40:40 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=432d21bf4c1944fa92ea895558ea807f359015a515a7338fb3415ce629f025bf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:86:e5:08:47:1d:05:8d:1f:af:53:72:1e:90:
3c:47:0b:d0:b0:f2:63:2c:b4:d2:01:59:5b:06:b1:
88:6a:7d:16:a7:f3:08:ff:21:b3:e7:66:29:ca:33:
42:58:65:f7:5e:7a:09:f4:99:61:0a:8d:61:d2:70:
5d:fe:a5:e9:b1:ca:a3:5d:e3:dc:54:89:23:a8:4d:
99:94:52:cb:e4:06:d2:d2:8e:8d:c3:58:b0:e0:43:
b0:7a:d3:25:d0:20:c4:ec:aa:d0:89:d5:55:6f:fb:
91:52:b1:16:62:ae:c6:57:fd:96:2d:59:1a:84:20:
a1:28:e9:10:79:8e:12:cf:5f:52:92:ef:38:68:b2:
22:41:6e:ea:b6:5a:6e:c3:71:8c:93:e2:25:54:94:
43:08:14:a4:a3:e2:56:89:9a:5c:a7:96:6e:68:b4:
ab:d9:7b:bd:a1:b8:79:09:cc:c2:13:94:d6:23:3b:
24:25:b2:e1:c7:dd:ca:72:28:e8:bc:41:3e:3c:74:
ef:c0:48:37:4f:b5:f6:5b:f4:ab:19:17:a0:05:99:
9a:1f:65:43:21:e2:58:57:47:3a:da:e6:d9:cb:ac:
8f:1c:fc:c4:4d:5e:a9:aa:ee:d1:a7:98:e1:fd:61:
b3:33:d2:23:24:66:fe:0c:da:8d:1b:76:31:c2:1a:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5C:17:3E:8A:F5:F0:E3:BA:29:52:E4:B7:FD:89:4B:78:29:90:12
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cfb4167-bb34-4b3d-8c92-bcd5cab97a46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:1040::/46
Signature Algorithm: sha256WithRSAEncryption
90:7b:90:46:e6:30:06:b3:09:4c:a1:81:b1:24:a7:36:03:02:
39:b6:08:e8:8e:04:9c:e2:af:7d:41:f1:d9:b0:32:6e:14:e5:
23:f4:b4:fd:b0:a8:c9:90:9d:c6:6c:47:e3:1f:ea:11:a1:c8:
aa:3b:d4:42:f7:c0:b1:0d:66:35:26:af:31:26:a9:5d:32:af:
63:d1:6b:4a:c3:1e:91:0a:ee:b4:37:7a:4a:58:22:44:39:50:
65:81:7c:10:ee:b3:f4:44:57:f4:99:32:75:3c:42:38:bd:2e:
32:cf:e6:5b:73:94:1d:a0:6d:08:02:f7:92:c3:6d:b8:71:98:
c2:b7:67:2a:ff:f3:7b:41:ee:22:97:c5:ee:40:23:ae:8e:30:
54:bd:5a:79:b5:bc:7d:c5:f7:86:41:de:7d:fc:f0:f9:45:74:
e2:33:0b:16:0a:4e:5a:ef:92:96:cc:d9:03:81:d7:38:7a:43:
e7:ee:01:29:fc:dd:c9:c9:2a:be:9d:f4:e8:a8:7f:86:4b:e8:
30:a7:e4:8d:e8:c7:9b:57:ed:e9:93:2b:28:db:e9:0d:7d:ea:
a4:65:ae:8b:7e:52:e0:46:bb:9d:86:c0:69:2f:eb:05:f3:5d:
28:db:f2:a8:b5:65:35:10:d6:89:81:75:63:50:db:3c:ca:1d:
3a:a1:74:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:42:21 2025 by rpki-client