Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5bcb770-7e3d-4ccd-bf1c-4cc17ea01c1d.roa
File: a5bcb770-7e3d-4ccd-bf1c-4cc17ea01c1d.roa (raw, json)
Hash identifier: gvFPO630eZF8PzGcMHhkHbjHPsVYaCbdDdDu5mhTEkQ=
Subject key identifier: 03:13:3D:51:0F:E5:2C:1D:2E:4A:4C:F3:D8:E6:CA:E4:5C:00:93:B1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1C388DC06B0A47BA6FB502347F21483CD2E9FD87
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5bcb770-7e3d-4ccd-bf1c-4cc17ea01c1d.roa
Signing time: Tue 03 Jun 2025 18:51:52 +0000
ROA not before: Tue 03 Jun 2025 18:51:52 +0000
ROA not after: Tue 08 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05b::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:38:8d:c0:6b:0a:47:ba:6f:b5:02:34:7f:21:48:3c:d2:e9:fd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 3 18:51:52 2025 GMT
Not After : Jul 8 23:59:59 2025 GMT
Subject: serialNumber=a938beb80618772c9416c8768fd459cbcdd3747d099f9b5faec2f82862f57526, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:43:25:19:e4:7f:70:d0:cb:55:3e:c3:ef:35:
26:20:3d:bc:a1:32:d7:4a:d2:a8:a0:13:87:79:42:
92:a3:14:33:f6:ac:97:98:98:bb:d3:90:90:7e:fc:
23:5a:20:fa:da:5d:ff:70:e9:d9:3d:07:50:77:c7:
ea:f4:f5:7f:4d:b1:c6:ce:19:7d:1b:f3:bf:4d:70:
a4:05:88:cb:4b:10:2f:1a:e2:e3:b4:0a:0e:9f:4d:
c5:f1:bf:cc:02:11:41:6f:eb:51:0a:f7:26:cf:f5:
65:b7:2b:ac:75:6b:68:d3:64:83:05:10:3e:6a:4c:
52:26:04:78:c6:e8:ce:f4:fc:2f:2d:b6:8a:52:e2:
41:b3:d8:61:cb:2f:4e:fc:4f:28:f3:e9:85:7c:04:
5e:f7:f4:5f:f5:89:10:9b:3f:ac:3d:ea:6f:79:7d:
ed:a5:40:18:7e:df:e1:0d:fc:61:07:b2:b6:a8:9f:
80:3d:00:a5:1b:59:af:67:3d:10:d4:76:14:e1:65:
37:a6:24:17:30:7a:e9:f1:56:49:08:22:1f:93:29:
40:88:b8:7b:9c:09:60:2e:b3:ed:71:58:ec:9e:09:
d7:dd:f6:22:8c:6a:64:3e:ec:72:7d:38:41:ec:a0:
d2:29:69:11:7a:07:2d:00:ce:5d:ff:13:90:07:9e:
17:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:13:3D:51:0F:E5:2C:1D:2E:4A:4C:F3:D8:E6:CA:E4:5C:00:93:B1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5bcb770-7e3d-4ccd-bf1c-4cc17ea01c1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05b::/32
Signature Algorithm: sha256WithRSAEncryption
10:33:e5:05:7a:c6:0f:59:14:9b:70:30:65:7f:b1:04:db:46:
3f:6c:46:be:a8:54:b8:e8:5f:2f:db:33:63:11:d2:d8:7f:d6:
59:2b:f8:1f:63:5e:6a:d3:34:d9:e7:21:79:6f:11:85:7f:00:
cf:69:de:a2:e9:91:8a:06:87:3f:97:a5:00:4a:15:bb:5f:c3:
69:b4:7a:fe:a9:66:19:ec:a8:fa:bb:79:37:18:f6:96:eb:2b:
c8:fe:c7:10:87:df:0e:8e:92:32:59:68:fb:37:51:f7:c5:6f:
ef:30:30:7b:10:b4:92:7f:0e:5a:9e:f1:20:c3:5a:22:ee:2c:
46:e9:71:26:0d:b7:4d:ce:05:bf:cd:88:a1:a1:77:24:b3:9f:
76:6c:7c:66:1a:c2:9c:5e:21:7c:4a:47:f8:ab:64:8f:f2:96:
6f:63:10:08:4f:39:8a:af:de:be:ec:ea:99:7d:17:c9:e2:23:
ab:26:e0:3c:73:16:a9:3c:26:bb:e5:4e:9e:f6:94:ce:10:df:
57:dd:30:7a:ab:34:5f:29:85:75:ef:6a:4d:e4:5c:a5:d1:02:
29:de:a2:75:f8:8e:4d:06:65:38:a9:e1:cd:3d:9a:04:c1:c5:
24:4d:42:96:da:ae:4d:bd:0b:cb:6f:51:32:b6:78:80:9c:fa:
99:90:19:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:35:28 2025 by rpki-client