Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b3515426-a058-439f-a8fc-e68eaafc8806.roa
File: b3515426-a058-439f-a8fc-e68eaafc8806.roa (raw, json)
Hash identifier: uhHRPG4tQZTiA8FR0+IAXmNb+XYjriAHvCKEwObQyN8=
Subject key identifier: 0F:50:26:90:75:D4:CA:1A:F4:80:99:B0:02:19:14:CD:3D:2C:D9:D9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 628622FC6077B25FEFF3A2B29B15342EBBF9A82F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b3515426-a058-439f-a8fc-e68eaafc8806.roa
Signing time: Fri 23 May 2025 00:40:51 +0000
ROA not before: Fri 23 May 2025 00:40:51 +0000
ROA not after: Fri 27 Jun 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:86:22:fc:60:77:b2:5f:ef:f3:a2:b2:9b:15:34:2e:bb:f9:a8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 23 00:40:51 2025 GMT
Not After : Jun 27 23:59:59 2025 GMT
Subject: serialNumber=3204913ced9649e94282f0b545966783f9b0bab8acd31d0a966bf0c8ea6eb0fd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:ea:23:18:f4:f6:af:76:6c:7c:cc:71:85:
f1:e2:2e:63:11:48:82:e3:7f:c5:bf:dc:39:99:f8:
5c:58:c5:95:0b:79:02:a7:da:eb:30:ce:62:57:40:
84:84:56:a7:bf:2e:5b:ed:7d:7f:22:a6:2e:78:f0:
01:a6:9f:32:54:0a:95:e5:73:a8:f6:98:2a:ad:05:
68:82:c8:26:8a:59:28:19:07:a6:de:9c:c4:00:27:
65:e6:dc:cc:ad:ff:7c:64:2b:4d:37:76:00:2c:35:
ee:97:64:cc:98:bf:64:6f:d0:78:74:b3:1e:d2:f2:
50:ac:ae:92:78:01:fc:a1:36:a6:ef:a8:bf:1b:79:
f0:45:64:c5:48:8d:0f:e2:73:fd:d9:74:30:dd:65:
1c:96:39:1e:58:e4:41:87:99:51:45:0e:23:0d:a8:
6a:66:7f:72:40:b5:6c:47:46:09:11:26:79:6b:87:
48:2b:57:79:f2:f8:f9:a9:ed:e8:5d:21:f4:3c:83:
10:76:42:60:64:f0:97:10:b2:af:cd:d0:26:b6:5f:
5d:63:b3:18:9f:d7:db:37:7e:bd:4e:f2:75:c0:25:
12:98:6b:ff:08:90:f0:1e:25:ff:5f:72:92:fc:84:
08:c8:d6:9d:d1:f2:1e:64:85:48:f2:6f:91:da:43:
c9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:50:26:90:75:D4:CA:1A:F4:80:99:B0:02:19:14:CD:3D:2C:D9:D9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b3515426-a058-439f-a8fc-e68eaafc8806.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:8000::/40
Signature Algorithm: sha256WithRSAEncryption
24:e2:89:6b:3d:79:ee:1e:1b:ee:e1:36:57:35:d0:c1:7f:bb:
23:1f:83:09:8f:81:9b:b0:eb:de:f6:db:39:cf:aa:f3:10:9f:
2e:1e:4e:41:0b:f7:7f:3b:5c:ba:43:b5:c5:b5:fd:e3:57:7c:
b1:8d:4d:cc:d4:a2:38:fc:57:c7:20:57:c9:a0:03:59:96:29:
48:1d:fa:ea:f0:81:ad:b5:57:1f:71:8b:ba:5f:1a:95:2c:cb:
17:3e:e0:7e:ae:4e:12:23:bd:c1:ad:87:fa:84:4c:2b:d8:5c:
7c:61:ba:fc:6c:ed:f5:66:6f:8a:5c:35:36:18:25:73:61:57:
a4:fe:14:b6:d2:26:58:3c:ff:33:f9:dd:0f:2e:32:08:1f:7c:
1d:54:07:a1:e9:af:94:20:59:5e:47:57:71:6c:5c:6a:fd:90:
f2:5b:47:63:58:e5:32:5c:d7:40:d5:a8:d7:bf:04:a0:a0:38:
b6:ad:e9:57:0e:06:f9:ea:bc:f5:a0:ba:35:fa:57:98:f6:69:
7b:e8:21:e5:57:1c:08:da:bb:49:d9:6b:e3:4d:38:a7:0c:17:
da:97:b6:70:3c:f9:7c:33:a5:4d:c4:26:0a:48:29:7c:b4:08:
57:ac:62:fb:a9:2d:75:cd:8d:d6:1d:53:c3:09:07:e4:6d:22:
aa:79:75:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:57:26 2025 by rpki-client