Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa
File: c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa (raw, json)
Hash identifier: 27tJEQRctxiRrlYqmT7GXwIk/WBozb6lJu23D7G9IAk=
Subject key identifier: 72:CE:9D:5F:24:AB:24:89:75:9F:AE:C9:FA:A7:0F:D3:62:B8:34:15
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 788D7037DCF49AA935BAF49D98628833787AF885
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa
Signing time: Tue 20 May 2025 18:41:37 +0000
ROA not before: Tue 20 May 2025 18:41:37 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:40e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:8d:70:37:dc:f4:9a:a9:35:ba:f4:9d:98:62:88:33:78:7a:f8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 18:41:37 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=25df952450195661fcc28be8d947408db4e2e9b48687672ce8fa8f02b9913faf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9e:c9:0c:67:ca:c2:e3:63:20:cb:83:71:05:
b4:6a:85:4f:6b:64:bd:6c:d2:63:a6:46:ac:c8:28:
25:98:9a:08:85:a1:b0:03:55:11:c9:d2:ca:b0:d5:
f9:20:2a:31:bb:28:78:7a:08:97:6e:0f:eb:d3:60:
22:ac:d9:7f:d3:aa:41:42:7d:c8:c5:86:85:04:59:
13:3c:49:64:72:82:38:d9:29:30:bd:69:a4:7f:2a:
e7:17:78:22:ca:8a:1d:72:3b:70:56:55:84:d9:32:
8b:19:4b:e2:43:78:7f:b8:72:c9:34:96:52:1a:2e:
fc:1c:eb:7f:4f:77:db:dc:c1:25:bf:47:fb:21:53:
74:d5:ca:6d:f8:2f:32:b6:28:92:48:f1:9e:e2:ea:
77:34:38:42:21:29:90:f2:d7:c7:4f:9f:b0:b7:ca:
e8:75:a5:70:2f:38:30:ca:98:36:50:88:8c:9b:7d:
e7:6b:c7:fb:3f:3d:4e:2c:de:d9:89:00:e8:bd:59:
ca:70:71:52:c9:00:42:70:7d:97:6b:0a:2d:63:68:
95:d0:0d:bc:77:3d:c4:dc:0b:81:06:be:0a:fa:d4:
33:0d:bd:f1:eb:06:93:22:b6:13:9a:30:d8:0c:6e:
4a:36:a5:e7:37:b4:41:9c:02:39:f2:0a:93:b5:6a:
86:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CE:9D:5F:24:AB:24:89:75:9F:AE:C9:FA:A7:0F:D3:62:B8:34:15
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4acf4ba-05c5-4e0a-9dfd-70cf32218bb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:40e0::/48
Signature Algorithm: sha256WithRSAEncryption
70:95:bd:02:ab:02:5e:51:bd:6c:1b:5c:1b:98:c9:b2:be:5e:
87:28:53:41:9a:73:4b:a7:d1:f4:53:e7:40:44:ef:30:c3:6d:
29:49:f8:7f:6f:96:0a:79:2d:db:db:3a:c6:85:ac:4c:9c:05:
25:5a:99:c0:bd:db:02:a7:79:33:40:f7:ad:3f:19:ce:f5:80:
78:96:09:17:86:cd:48:85:27:19:dc:04:3b:cc:81:4d:2b:bc:
e4:72:6e:38:1b:ee:38:60:d6:ec:94:7a:15:2b:aa:ad:51:e7:
71:e3:8e:c5:07:bf:24:f0:4a:b2:56:3f:64:0b:2e:08:32:3c:
6f:2c:43:ae:47:6f:82:43:5d:22:ef:ee:45:b8:67:a3:71:8d:
f8:11:f8:3b:c3:87:b7:f7:c5:5c:bf:c0:95:17:a8:2f:ae:c8:
52:cc:b2:5e:d9:ef:1c:c4:5e:64:d9:34:9a:d6:17:39:9f:6a:
54:cd:13:e8:dc:3b:c2:8f:94:fd:c8:9d:fa:a0:54:6c:97:68:
ff:30:36:ef:1b:cb:61:7a:a0:0e:57:0e:f5:3e:2b:9e:51:66:
a8:95:45:30:e8:c2:e0:2c:59:24:9f:76:d9:2c:be:d1:b2:70:
04:7c:dc:72:6c:61:4a:62:bf:e5:9a:42:bd:e0:46:e2:53:d1:
a8:57:e8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:39:14 2025 by rpki-client