Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1aeed91-7b62-4371-b8f3-245485e1bf21.roa
File: a1aeed91-7b62-4371-b8f3-245485e1bf21.roa (raw, json)
Hash identifier: n3Jo7eXQT6+IZGOl1eS7M46F1dxgnWdbl8YJzIO1BZg=
Subject key identifier: A3:8C:E9:BE:09:13:7E:87:DA:34:17:D0:AF:1E:3E:51:74:F2:BC:B2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0B5C9135024B05D1F2E47FED0A7B1443DF9DBA14
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1aeed91-7b62-4371-b8f3-245485e1bf21.roa
Signing time: Tue 20 May 2025 19:30:19 +0000
ROA not before: Tue 20 May 2025 19:30:19 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:e0c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:5c:91:35:02:4b:05:d1:f2:e4:7f:ed:0a:7b:14:43:df:9d:ba:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:30:19 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=ce2e6cc8f77fdad184773f17cd558a8d0203b72da8bc0a0eb5bf2e5d05af4f0f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:8d:a2:86:41:33:3d:a8:c0:b1:11:fa:cc:
c7:b8:9b:1f:2c:4a:b0:8e:d1:87:01:9d:47:59:4d:
99:51:9f:1a:8a:66:84:ca:fb:37:5e:17:8e:45:77:
77:d9:58:cc:4a:dd:36:48:f6:97:d2:96:92:2b:ea:
90:2c:f6:53:3c:50:dc:40:32:6a:ea:5e:e8:36:d6:
f0:77:e7:86:11:bb:5f:e7:26:b3:8c:2c:d7:c5:73:
14:f8:f4:96:7b:03:8d:5d:2a:d8:3f:18:19:f7:26:
82:f4:6e:6d:3e:73:4f:6d:51:ee:5f:4a:9a:cd:4e:
5e:50:cf:ad:15:7f:1e:84:9c:9a:5a:a5:df:9b:e7:
b1:b5:ad:1f:60:88:e5:f5:6d:94:a4:bb:ba:6e:33:
8b:eb:c6:a1:68:1d:a0:71:14:9f:4c:cb:61:6c:64:
c9:f4:80:9b:a7:a3:99:ee:40:c1:b0:7d:06:5b:5c:
cb:51:7a:c3:8b:6a:2d:e0:a8:f0:d0:8b:40:42:54:
d7:97:f7:96:c5:9a:2e:87:71:f0:5b:ae:d2:04:c2:
e5:01:9a:0a:c0:3f:e9:69:86:d3:30:19:fe:d7:1a:
45:38:5e:02:91:4b:b8:74:20:14:94:c8:d3:0e:cb:
1f:42:fd:c6:bf:8f:50:40:5c:4c:8e:b8:ab:71:d3:
5f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8C:E9:BE:09:13:7E:87:DA:34:17:D0:AF:1E:3E:51:74:F2:BC:B2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1aeed91-7b62-4371-b8f3-245485e1bf21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:e0c0::/46
Signature Algorithm: sha256WithRSAEncryption
85:ca:ef:ac:41:58:ef:ca:85:c3:02:7b:44:07:bd:7e:cc:b5:
26:30:3b:18:c8:b0:a3:1a:c4:4c:e7:58:6b:fe:c7:b3:a4:4d:
b8:34:60:e4:7b:ce:fe:64:22:89:f5:d7:11:32:77:84:61:9d:
db:12:3a:18:e4:58:f1:16:85:91:3a:17:39:f2:31:cd:9d:e2:
c4:54:de:25:f8:48:e1:9a:61:3c:dd:fd:85:ac:84:e8:3e:8e:
ac:6a:ae:39:92:16:9f:03:b4:55:86:d1:e8:ce:b4:fd:61:72:
c1:cf:4e:67:7b:ea:51:33:28:96:e0:cd:3c:37:b7:88:1f:1c:
e2:bd:75:f7:6a:15:00:aa:11:70:a4:70:16:a9:82:c2:b2:63:
c9:3a:66:f9:67:ac:16:26:cf:b9:ea:00:c1:c4:d1:69:0f:91:
2b:8a:4e:21:06:cd:27:0a:94:b5:d7:31:10:ec:97:ef:53:35:
ae:1b:22:1a:a5:f3:4b:f8:ae:c7:86:7d:87:98:92:9d:ca:bb:
a3:57:54:24:4f:a9:b2:1c:b8:39:21:93:7c:d3:96:fc:58:11:
b1:bf:59:0d:c6:fe:a2:91:35:51:82:ad:72:05:0f:2f:55:22:
6b:e9:6b:9d:ea:1e:80:0b:5a:de:d9:24:26:e2:4b:a2:1f:d7:
2c:74:08:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:51:42 2025 by rpki-client