Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9119a01e-2bb4-4d69-9325-5f4aa8fb8be8.roa
File: 9119a01e-2bb4-4d69-9325-5f4aa8fb8be8.roa (raw, json)
Hash identifier: QFlwuivK/mr4ZL8vYOOPGYRp5IORvOn1HCTirMzfDNE=
Subject key identifier: A2:C7:49:16:BC:2E:E3:88:F0:A8:FA:7E:84:20:78:95:A6:8F:E6:23
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7CC738ADB6E2730952BDC7BFE8BB2FCF7703A05F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9119a01e-2bb4-4d69-9325-5f4aa8fb8be8.roa
Signing time: Tue 20 May 2025 20:40:09 +0000
ROA not before: Tue 20 May 2025 20:40:09 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d070::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:c7:38:ad:b6:e2:73:09:52:bd:c7:bf:e8:bb:2f:cf:77:03:a0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 20:40:09 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=c42f69d133b460be0b1c7c7c605374cb5c1354467c8f5024f4182bae862e6a3c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c0:7a:ae:35:48:cd:ce:31:ff:6b:15:8a:c4:
3a:a4:24:52:31:43:4f:3e:68:2d:8c:fc:ee:d7:89:
21:a4:ef:05:4c:a2:fb:46:37:42:12:7b:59:ca:7b:
a4:be:66:e4:18:28:87:8b:34:8a:c1:08:d3:d6:38:
fd:21:8e:59:49:2e:0e:22:8d:72:ed:e1:99:08:21:
21:6a:1c:b7:eb:80:43:66:a4:ae:1f:8a:ce:91:70:
ee:14:27:44:7d:1a:4c:40:6f:e8:21:97:9b:a6:13:
5f:90:d0:62:93:48:24:f5:72:fe:b9:d7:b3:70:63:
76:74:b2:12:ba:6b:13:66:a4:22:38:eb:f0:e3:9f:
db:80:90:6c:f7:6e:f4:4f:f4:bc:ec:52:64:34:9b:
c1:d4:98:42:38:82:3a:3f:00:15:12:12:dd:e5:e7:
f8:66:7f:49:be:d0:34:41:c2:dd:76:54:be:48:6e:
31:9a:01:dd:80:cc:e4:7b:0a:1d:29:29:59:fe:dd:
17:50:0f:0c:aa:e2:79:ff:a4:ba:80:73:8c:1f:04:
f2:9e:74:14:04:14:55:f2:72:1f:3d:54:f3:d4:49:
d1:7e:bc:b7:52:f9:4c:ee:79:c6:ae:36:93:b6:fc:
50:42:9a:43:58:92:79:3a:8b:c9:15:7f:03:26:bd:
20:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C7:49:16:BC:2E:E3:88:F0:A8:FA:7E:84:20:78:95:A6:8F:E6:23
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9119a01e-2bb4-4d69-9325-5f4aa8fb8be8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d070::/32
Signature Algorithm: sha256WithRSAEncryption
0c:71:ae:64:b6:0c:36:c8:8d:58:db:fc:2a:8e:cc:cf:a9:a6:
48:ba:c3:5c:9c:66:23:1f:40:8e:d4:bf:1d:2c:6e:9b:a6:fa:
97:5c:39:5c:da:a1:08:5f:b6:6c:86:be:74:e7:40:0d:7b:b0:
43:48:b8:c5:81:66:5a:48:a0:08:e0:1d:f4:7c:bd:1c:65:ba:
5a:36:2f:92:23:e8:e7:6a:74:5f:9d:26:5d:22:9c:9b:64:0b:
97:16:52:07:28:fc:8f:92:58:ba:40:1f:f4:90:75:fa:20:a8:
ad:31:b5:0c:a2:90:3e:5f:d5:8f:13:b2:19:50:08:f9:df:ca:
35:9e:34:c0:cd:9b:b3:62:b5:d7:19:e9:d5:f2:2f:00:36:f5:
7d:10:ad:6e:01:16:a6:a2:72:6f:bb:07:69:e7:96:06:a1:13:
1f:00:ff:e1:be:2d:15:e4:c7:3e:35:23:d9:fe:1a:9d:fa:94:
6b:e6:fa:cc:07:96:a5:27:77:7d:ed:66:25:3c:87:32:75:65:
46:62:0a:21:4d:f4:ae:70:c7:59:64:b0:3b:94:3a:a6:f7:3b:
8d:36:9f:4f:02:1c:f9:16:e5:74:e9:37:8a:0c:12:f1:26:dd:
90:97:93:7f:fd:30:3e:02:8f:14:53:95:91:e2:e6:2f:25:71:
1a:99:a4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:36:46 2025 by rpki-client