Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b940c44-168e-4976-b17d-778e9341611b.roa
File: 8b940c44-168e-4976-b17d-778e9341611b.roa (raw, json)
Hash identifier: 4aHyRb+psb/kS1I+Veif9aHn41D1lW7YFniHPwWi3qE=
Subject key identifier: 61:4E:D1:8C:B7:B8:7B:E5:4A:43:5C:AE:BE:A8:A7:E5:B6:58:1A:50
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 780D55C94A3A63F117830C4906451A89A3F384ED
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b940c44-168e-4976-b17d-778e9341611b.roa
Signing time: Tue 20 May 2025 19:11:11 +0000
ROA not before: Tue 20 May 2025 19:11:11 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:0d:55:c9:4a:3a:63:f1:17:83:0c:49:06:45:1a:89:a3:f3:84:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:11:11 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=1d0bc0ecb842b7b338ac58b5c7e5d451c788ac256c5df68a82f059efebf006a2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:b6:bf:ae:e3:2e:11:69:58:6c:bc:25:a4:
0c:ba:c2:d5:5a:18:86:db:21:5d:ee:f0:12:46:15:
6b:00:a8:21:bd:ce:2f:e9:bb:f7:e3:76:9e:5e:cf:
fd:7d:a4:3d:e4:36:bc:66:d4:a2:bc:0c:da:09:b4:
80:ea:f8:45:a7:36:a2:9d:d2:3a:c5:e8:66:90:c4:
0b:4c:e1:dd:69:da:11:c2:b8:6b:c7:bc:16:30:8c:
8f:79:7e:f7:46:27:fd:84:09:4d:d0:25:fa:d3:09:
e6:d2:84:8d:bb:3b:89:21:63:1c:82:38:a5:2e:7a:
fb:6e:8f:ae:94:43:e9:b8:cb:8a:99:8e:7a:78:04:
ed:d0:c0:ba:72:8d:8b:77:ca:60:60:0a:ea:41:2b:
43:9f:4d:55:4b:c3:38:52:6a:be:b9:92:89:49:a8:
f7:07:1d:73:95:bf:fb:86:31:a6:52:df:45:39:69:
7d:b5:f8:80:ac:43:27:8e:a2:d2:c9:16:91:48:48:
76:a8:f2:ef:08:6b:59:92:3a:4f:23:a6:ff:2c:83:
f7:dc:99:2c:17:a8:26:8f:78:ce:ff:8f:bb:03:7f:
e8:fc:bb:28:e6:53:e3:9b:39:4d:46:5b:35:f6:98:
e2:20:90:52:10:a6:6e:46:46:22:be:5b:a4:b5:df:
53:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4E:D1:8C:B7:B8:7B:E5:4A:43:5C:AE:BE:A8:A7:E5:B6:58:1A:50
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b940c44-168e-4976-b17d-778e9341611b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:1080::/48
Signature Algorithm: sha256WithRSAEncryption
6a:06:cf:9c:75:df:1d:33:5b:91:ca:a7:51:8e:72:be:11:16:
9d:ea:56:42:c5:3d:35:65:9a:e0:7f:30:a9:38:df:e4:bb:3e:
59:43:bf:64:c1:31:84:c7:d7:0f:ca:d1:30:7e:e6:c6:18:5d:
54:a1:cf:66:d6:15:be:e5:e2:42:f8:44:40:22:2d:8a:a7:15:
4e:5a:1f:18:55:62:4c:a6:c2:2c:16:47:d0:52:b7:b4:13:38:
7e:e0:ad:48:52:5a:71:eb:ab:3f:2e:91:7d:f3:9f:06:9a:43:
a4:09:29:bc:18:66:20:2a:42:a3:a1:46:34:1e:67:e1:67:a9:
50:6e:e2:ee:e7:cc:e1:40:13:cb:80:3f:e6:1e:f8:75:29:b7:
95:56:b5:43:d4:b4:58:7d:e2:c4:f1:a8:c5:62:e8:6d:22:e0:
b5:a9:d4:6c:ab:77:10:bc:be:c2:36:5d:57:5e:17:8b:0b:56:
8f:d5:af:26:00:04:49:79:d4:8c:ca:ba:da:57:51:a3:1a:85:
8e:6b:c1:1f:04:c8:f0:58:e3:05:40:8b:61:6b:69:89:80:2b:
bc:77:61:3c:be:c5:b2:5d:5e:fd:d9:64:47:f1:7b:5e:6f:38:
98:37:dd:fa:48:1f:35:80:c0:76:a2:0b:95:31:cc:e1:0c:a1:
0d:11:72:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:39:16 2025 by rpki-client