Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
File: b92d2073-fe74-4c3d-87a9-37106f766cba.roa (raw, json)
Hash identifier: JJJ809jKk3ZUrsIIwsedhfgb/dilQyhtmZDr/BsrYaI=
Subject key identifier: 70:38:B5:27:48:EC:FD:62:2E:FB:1B:DC:48:40:F3:7A:A7:CB:0E:9F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 52187F91D63F604FFAFD55AD28C89591BDCDDF36
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
Signing time: Tue 20 May 2025 18:51:13 +0000
ROA not before: Tue 20 May 2025 18:51:13 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8060::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:18:7f:91:d6:3f:60:4f:fa:fd:55:ad:28:c8:95:91:bd:cd:df:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 18:51:13 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=ef8a225941441d165bd597e12891d21da89f860af44f7c94ae703a8557af8cfd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:9a:bc:9f:b4:8b:68:45:2b:6a:b9:fc:d7:
22:ae:bb:5c:f9:77:00:bf:4f:9f:10:67:7b:3c:78:
ee:3f:8a:49:98:13:9d:44:14:65:be:44:50:99:e6:
5a:3a:22:19:05:bb:9c:4e:9c:f9:34:10:b0:7d:20:
31:64:74:1a:c6:00:7e:4e:d8:a8:75:f0:4d:2a:bf:
21:12:f4:88:76:8a:dc:af:28:02:4d:0c:2f:56:a5:
53:e1:dd:e7:4b:07:20:2f:b2:c4:2f:96:5b:6a:9a:
b8:22:7f:d9:e7:01:2a:35:7d:6e:8e:77:8d:25:9e:
e0:4b:b9:ff:a0:a5:5f:1f:51:90:b8:9c:86:97:63:
1d:19:98:b2:ac:64:f2:36:7e:eb:0c:72:30:93:99:
9b:24:fe:4d:9f:8b:bd:b7:ac:26:88:ee:b8:9f:82:
b5:ad:ae:19:56:57:11:05:b8:cf:0f:5c:09:70:f7:
5e:4e:ca:b6:11:4a:bd:ee:80:09:96:39:28:cb:bc:
5e:95:35:6b:c3:8c:65:cb:67:51:f3:77:c2:4b:0d:
98:2c:58:64:51:19:f7:f1:b3:4c:f9:bb:de:3e:33:
3c:d4:14:c6:23:dd:3b:fe:c2:dd:94:72:05:08:f4:
8b:ea:05:ab:3b:38:0d:8c:33:ba:97:a5:c9:a3:e4:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:38:B5:27:48:EC:FD:62:2E:FB:1B:DC:48:40:F3:7A:A7:CB:0E:9F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8060::/48
Signature Algorithm: sha256WithRSAEncryption
92:dc:c9:53:0e:09:a9:5f:9f:25:31:29:13:75:9c:d1:bc:6b:
35:75:3f:58:90:b5:53:a9:8f:1f:f0:f8:8b:09:7a:e3:29:85:
51:1f:88:4b:17:56:71:cf:96:ae:9d:37:2e:4f:1e:61:01:db:
65:cd:af:23:fc:c0:5d:b5:63:2b:8d:00:88:59:b9:10:6a:16:
ba:9f:08:60:e7:47:b0:75:a2:8c:cb:97:2e:83:e2:a9:9b:6b:
7f:f8:66:5e:24:fd:8e:0f:a0:c8:18:69:5d:38:ad:53:18:e1:
1c:4d:ab:cb:ef:48:2c:8d:44:61:54:31:e8:41:6f:da:97:2d:
4c:79:2c:91:46:d7:53:91:51:1d:11:ba:90:bf:87:a3:8c:34:
3a:8c:0b:f6:ac:01:0b:b4:5e:c7:53:80:bb:7b:5d:23:4f:62:
15:b9:7d:54:9f:f8:80:15:5d:b0:5e:e1:d0:48:50:0a:f9:d2:
36:1a:91:ad:51:7a:9a:cd:77:ad:5d:76:3e:f7:ab:80:06:4e:
0f:81:9a:f8:45:28:8e:95:dd:01:db:3a:a4:0f:69:5a:68:32:
7e:da:5f:03:37:7d:b4:3b:46:47:50:69:02:aa:16:2e:5a:93:
d9:6f:50:02:55:1e:2c:2f:2c:58:34:42:34:13:32:9e:ad:ea:
b1:3d:a9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:39:23 2025 by rpki-client