Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/af44b98c-fcdc-4a0d-b9ac-dbcbc7685c49.roa
File: af44b98c-fcdc-4a0d-b9ac-dbcbc7685c49.roa (raw, json)
Hash identifier: mfVmIMho0rsctVjxZHDR+haMAzsvZeCOhzK9jHaF3Ss=
Subject key identifier: 71:EE:0A:22:F9:B2:A3:2F:7C:52:D3:23:39:B0:B6:C1:C6:D2:38:35
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3E26749B56B47A0D5AEF4CF0476F529345BD03FD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/af44b98c-fcdc-4a0d-b9ac-dbcbc7685c49.roa
Signing time: Tue 20 May 2025 19:21:00 +0000
ROA not before: Tue 20 May 2025 19:21:00 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:c0c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:26:74:9b:56:b4:7a:0d:5a:ef:4c:f0:47:6f:52:93:45:bd:03:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:21:00 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=23aa3502aa1eff7e81adbcd903ae5b5f27137b2683567e63a05ceb4d39b6c30a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ff:a3:c7:26:18:ca:73:7e:7b:22:94:d5:c9:
de:20:dd:39:8b:1a:a6:6e:b0:7c:9e:94:99:98:71:
10:e8:a8:22:3c:10:55:df:37:6b:61:77:35:57:30:
f2:7d:6c:18:5f:14:cf:28:82:57:0d:82:3f:44:44:
35:fc:62:8f:ec:01:5f:02:40:7c:8f:d9:5a:bf:44:
b1:14:91:5f:29:ba:ad:ce:29:30:82:55:54:dc:e7:
7c:f5:82:67:ed:11:d2:b4:52:f0:ca:7a:42:1d:17:
3c:c7:3f:18:34:43:77:ab:49:fa:af:df:aa:b4:9b:
f1:c5:83:72:a6:4b:7b:d6:bf:89:52:13:4b:e9:42:
96:0f:13:5f:52:43:95:28:4e:78:c7:f7:c5:6f:08:
82:87:bb:32:37:d0:ce:6a:7e:dd:0c:0b:d4:f9:e5:
78:ff:c9:53:62:43:84:6a:1c:f7:36:41:36:3d:2f:
fe:2e:1a:27:2b:58:14:1e:94:c5:54:ed:e1:86:7a:
ab:c1:97:af:6e:97:52:9c:d6:d6:6f:50:c1:25:3f:
ca:fa:bd:eb:20:6e:0f:8a:71:7a:42:ae:20:fa:a4:
e4:86:d7:db:9a:e2:e7:09:5f:8f:0d:06:10:f1:31:
2a:7c:10:38:3c:17:b7:3b:7d:83:34:0f:ca:33:81:
7d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EE:0A:22:F9:B2:A3:2F:7C:52:D3:23:39:B0:B6:C1:C6:D2:38:35
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/af44b98c-fcdc-4a0d-b9ac-dbcbc7685c49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:c0c0::/46
Signature Algorithm: sha256WithRSAEncryption
05:14:ea:93:2d:3e:53:53:f5:e0:04:2a:6e:2e:97:c0:5c:cd:
ba:ce:12:ca:1c:a6:46:76:12:38:20:a7:b2:c3:f5:a5:2e:ab:
59:06:f3:af:bf:bd:0f:38:d3:ad:57:78:9e:f0:7b:96:bf:c7:
ce:9e:9b:98:32:c1:b2:23:4a:58:db:66:0d:4c:00:81:65:5b:
d6:5b:d3:0c:c4:46:02:05:af:39:da:f9:56:7e:28:94:fa:17:
08:64:d4:31:c0:90:7c:90:11:c0:c2:a0:96:24:35:22:d7:b3:
b7:ab:b3:5b:7f:b5:44:04:5e:30:b0:b9:0e:c7:02:36:76:91:
18:c6:57:5d:04:f0:cb:c2:e6:3f:a0:55:8d:d1:29:b1:1a:74:
a3:00:cf:a9:e2:7f:80:56:0e:a0:5e:d0:71:54:58:74:c8:cd:
5d:76:9b:56:65:34:23:3e:6c:d5:cd:7b:41:7f:e1:78:6b:55:
43:6c:1a:c9:6b:f9:1b:85:cf:6c:da:7d:b3:89:89:3b:71:1a:
42:6d:d2:6d:f4:a2:1f:f9:08:83:7f:03:13:93:8d:a3:d2:5e:
f4:9e:ab:68:bd:57:1a:ee:0c:11:bb:f7:22:4d:d7:54:ed:b2:
46:c3:f6:18:92:8d:d1:7b:f9:44:aa:86:6e:b1:ce:12:cc:17:
61:59:55:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:35:35 2025 by rpki-client