Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb21710a-a37a-4476-ab6b-3d079e9d1cc9.roa
File: bb21710a-a37a-4476-ab6b-3d079e9d1cc9.roa (raw, json)
Hash identifier: jijCYRxbOLevv4VRlHPl22Hq9ENgUD4oNj68bK5Z+ok=
Subject key identifier: 5B:07:14:9A:43:A7:69:26:30:69:20:69:F1:E8:83:BE:3A:E7:E3:01
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 400CCD5E56DC48246DE68E16AA9BCA0A3D6D3C47
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb21710a-a37a-4476-ab6b-3d079e9d1cc9.roa
Signing time: Tue 20 May 2025 20:11:34 +0000
ROA not before: Tue 20 May 2025 20:11:34 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:0c:cd:5e:56:dc:48:24:6d:e6:8e:16:aa:9b:ca:0a:3d:6d:3c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 20:11:34 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=b8ca8f544538e5e4cdf0406038b38354dba1aec128a3732c8a136737bb3e43e5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0f:b3:89:2b:50:e5:06:ed:03:56:7a:ce:34:
a6:a1:c9:e4:03:90:39:27:70:fa:80:55:49:08:ea:
5f:49:48:0e:94:98:71:52:21:96:c8:52:e8:ae:9c:
b5:c8:e3:01:be:a9:b9:be:97:ab:af:49:60:4a:06:
e6:04:22:77:26:64:15:df:a5:50:c0:87:f2:fd:c4:
dd:f5:2e:96:6d:a1:65:7a:f1:f0:4d:df:c8:51:61:
04:27:02:cd:38:da:9e:37:af:10:02:1b:67:51:30:
7b:73:ca:54:0a:c4:2f:6c:7c:43:ea:60:6f:3f:a9:
a3:51:22:cd:c3:c1:e3:cf:43:a3:d4:73:02:2f:4b:
65:89:ac:8f:d9:64:c5:22:1c:ce:c8:81:52:44:66:
a3:76:a9:11:55:b1:29:ee:34:1a:b1:7b:a0:c3:78:
5d:91:1f:0c:06:80:41:a6:f5:d2:5d:95:67:4f:eb:
cf:52:64:5d:a0:7f:1e:e7:24:2c:05:1e:6f:93:51:
f8:d7:b7:48:54:e1:dc:ea:70:42:a4:1b:f4:60:a5:
27:db:ff:36:d3:6f:7d:84:07:d1:84:a0:a7:57:6d:
22:2b:66:3d:c5:36:b4:03:e7:bc:8c:1f:f9:8b:b5:
a5:e8:0b:06:b9:21:53:ec:19:cd:70:35:3f:1b:9a:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:07:14:9A:43:A7:69:26:30:69:20:69:F1:E8:83:BE:3A:E7:E3:01
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb21710a-a37a-4476-ab6b-3d079e9d1cc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:4000::/40
Signature Algorithm: sha256WithRSAEncryption
8e:73:a7:83:44:69:92:af:dd:ce:44:43:92:42:70:68:8b:27:
ce:ec:9b:bf:38:cd:ac:82:e0:07:4d:2e:4b:de:97:8d:9e:8d:
ed:f8:19:5f:74:fa:03:c7:6d:bb:7d:2a:c1:97:3e:db:ca:7e:
6d:d3:6f:73:39:4f:88:89:18:4b:0d:ad:f5:9b:35:56:4d:97:
96:e9:83:9a:f5:f2:50:91:d5:89:b8:48:3e:d3:d3:cc:6d:2a:
a1:3e:57:43:f2:9d:e7:31:48:e9:07:62:c9:51:32:d4:ed:c9:
90:0a:76:21:f5:9e:78:2c:c1:bd:eb:c1:e1:e3:74:4f:25:c5:
aa:e7:d6:33:67:85:64:7f:b5:58:47:9b:75:b4:25:52:29:99:
b4:04:09:79:1e:47:3a:36:82:3e:a3:10:aa:5e:d5:79:c1:d4:
6e:33:9a:fd:a6:12:d8:96:07:64:37:25:80:ad:55:02:73:58:
fa:f9:7c:fd:0f:72:a2:ee:96:f5:cb:33:00:ff:cd:88:69:ae:
3c:a9:2e:42:7f:58:c1:9b:e6:db:ce:6b:df:cd:c9:99:b5:77:
90:8f:59:a3:90:e7:02:59:d5:e5:5d:f3:20:6c:f5:d7:e2:cf:
8f:96:0b:5a:18:7c:2f:7b:7c:c9:2d:7b:9a:31:a7:42:3e:41:
ee:15:4c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:36:56 2025 by rpki-client