Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a8cd111d-bddb-47e0-af43-fc5a8d930376.roa
File: a8cd111d-bddb-47e0-af43-fc5a8d930376.roa (raw, json)
Hash identifier: CSBTy+iOeMQ1KxjMlzz+q9vwaYCOPXwHxi+FJewCVnQ=
Subject key identifier: D5:13:9C:27:7C:45:4D:F3:63:CB:1E:8A:BC:34:CF:C8:9E:8D:C6:1E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 656DE7F692FDBEFFB668F0542E64223940D63BA8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a8cd111d-bddb-47e0-af43-fc5a8d930376.roa
Signing time: Tue 20 May 2025 18:50:41 +0000
ROA not before: Tue 20 May 2025 18:50:41 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:6d:e7:f6:92:fd:be:ff:b6:68:f0:54:2e:64:22:39:40:d6:3b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 18:50:41 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=96d3c60ce2fd2ebdbc3796fc39dfb9332fea3505100897b725757d6d026e0817, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:8d:77:bd:ef:6d:2b:64:8e:c1:14:63:35:
a8:05:10:09:39:3b:6b:48:1e:9c:7f:83:b7:8e:5b:
33:41:77:98:21:1d:95:b0:64:6a:21:bc:0e:b6:83:
89:7c:d1:ee:b9:89:0f:6d:b1:95:bd:f2:47:82:74:
6a:f4:95:19:4d:0f:3b:ab:18:1d:ff:20:42:38:26:
65:a8:0a:a9:ff:fc:5d:7b:44:bb:dc:33:03:de:5c:
83:64:4b:6a:ad:96:a8:1f:5f:d1:a3:79:c3:b5:a5:
1d:fe:a4:f8:4e:1f:f4:c1:3e:f0:c4:68:d8:bb:e5:
07:5e:cd:2f:15:76:84:97:32:16:55:cd:cd:a1:2c:
ca:d7:be:b7:bd:7f:dc:c4:89:9e:6a:ef:2c:3a:46:
8a:4b:35:42:16:53:d4:8b:3e:f3:6b:a8:81:d1:f7:
e0:ad:d4:35:28:60:94:ab:81:54:89:b1:53:6c:17:
8e:03:8f:33:95:56:ed:9c:2b:d8:bf:9c:7f:23:94:
10:1f:2f:b8:c2:94:bd:0e:cf:6b:1f:d8:35:4c:2e:
eb:73:77:bc:9e:1a:0f:98:77:17:71:38:32:15:2c:
9e:3b:6c:a2:05:a7:57:2e:a0:4f:37:27:a6:ff:31:
36:8e:2b:b3:6d:bf:01:11:10:e6:07:ec:22:2d:78:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:13:9C:27:7C:45:4D:F3:63:CB:1E:8A:BC:34:CF:C8:9E:8D:C6:1E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a8cd111d-bddb-47e0-af43-fc5a8d930376.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:1000::/40
Signature Algorithm: sha256WithRSAEncryption
64:a3:4d:83:f8:ec:49:ce:43:d1:7f:d4:1c:b9:33:18:04:fe:
ed:48:c2:ff:b6:54:81:7a:b9:66:32:e9:d9:fd:5d:ed:15:26:
17:6e:57:3a:77:1b:49:8a:65:39:55:b1:d8:30:40:ba:e5:50:
6b:d7:a8:17:5c:6d:c2:79:c4:69:2a:83:5f:dc:c0:98:e0:23:
09:8e:03:12:69:b9:e7:b8:54:c4:50:8b:37:95:d7:ee:45:b5:
7b:84:7e:02:87:06:97:ee:a5:eb:59:43:9b:d1:94:4c:ea:73:
bc:b0:61:ba:97:9b:27:71:11:a2:ea:18:bc:4a:04:ad:47:17:
7f:6b:d1:dd:f5:68:b8:7d:93:aa:f5:9b:e2:37:a0:fd:34:54:
c0:34:2f:f5:ff:f5:ed:d6:ea:e3:12:34:4e:d8:8e:e8:ee:73:
a6:21:55:da:c6:81:2c:0c:0c:7c:0d:28:d9:44:3f:ae:6e:9f:
8e:9c:4c:36:51:e3:7b:53:37:e1:b6:0f:52:d1:7e:35:5f:2f:
40:3d:28:08:d6:bc:d7:31:70:cd:d1:0d:5d:be:df:64:ee:a1:
53:de:78:28:1a:69:1e:23:07:60:00:1c:eb:12:cf:55:42:94:
7b:a8:5a:7b:a3:2d:67:7d:92:18:a8:74:1f:99:61:2f:b9:87:
1f:c1:80:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:40:24 2025 by rpki-client