Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c5796c8a-c7f2-4888-9a17-c80093c07957.roa
File: c5796c8a-c7f2-4888-9a17-c80093c07957.roa (raw, json)
Hash identifier: uYhMS64j7TxuTLU4VX7RomzpQeMbF0nklsq5KspNdD8=
Subject key identifier: 10:D1:02:59:56:3D:3D:5D:7F:15:C8:1C:96:D8:78:98:A0:79:0A:B3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 52348828FA21D8441D59C97BB4B342345AD2A643
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c5796c8a-c7f2-4888-9a17-c80093c07957.roa
Signing time: Tue 20 May 2025 19:40:43 +0000
ROA not before: Tue 20 May 2025 19:40:43 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:80c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:34:88:28:fa:21:d8:44:1d:59:c9:7b:b4:b3:42:34:5a:d2:a6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:40:43 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=b7599fead78f49cd087dc262752d79cae09db0cced10d9e167cf6edf9b287a51, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:82:73:ba:ea:74:f8:eb:b4:26:7c:a9:34:aa:
94:05:3e:fd:1e:5a:4d:48:66:56:5f:71:f5:d8:eb:
5e:a1:30:a8:99:39:69:00:c3:c5:6d:c7:c1:9a:49:
3d:4c:01:0f:2d:5b:6a:c9:48:a1:89:7b:c2:48:c9:
ec:8f:7e:26:eb:5a:93:30:2f:ed:fa:01:ba:13:e2:
dc:11:e6:bb:17:3e:1d:05:47:cd:30:80:54:d8:0e:
f5:88:a8:99:0f:47:af:cc:a8:25:b5:85:0f:d7:8e:
62:78:e7:49:fd:19:db:da:13:fa:6d:c9:d6:83:80:
9b:32:66:b4:42:c2:62:bc:8b:59:92:6d:f3:9f:aa:
d1:22:eb:14:69:24:d9:ed:54:9e:f6:8b:db:56:73:
5f:0d:d2:ad:f3:09:d7:1b:e0:8b:b8:2d:57:83:0d:
ea:7f:ba:66:f5:09:bb:16:fb:03:20:5a:af:4e:81:
c9:0b:3a:95:3c:be:b9:23:72:d5:9a:3e:38:dd:cd:
a9:96:94:e8:37:91:01:83:e6:4d:f7:fd:c1:07:25:
52:cd:3f:dc:e8:e0:b3:0a:3f:c2:d1:39:40:bf:49:
aa:9b:16:b0:67:40:fb:6c:91:b5:de:16:6b:d0:b3:
6b:b4:fd:cf:47:0c:aa:41:96:6d:83:58:56:78:76:
b5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D1:02:59:56:3D:3D:5D:7F:15:C8:1C:96:D8:78:98:A0:79:0A:B3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c5796c8a-c7f2-4888-9a17-c80093c07957.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:80c0::/46
Signature Algorithm: sha256WithRSAEncryption
9c:44:75:a6:69:51:ba:b4:1d:84:45:2f:c4:6c:6a:60:39:4d:
72:b8:2e:39:f1:0b:49:05:f4:f6:90:4b:3b:30:91:88:12:94:
d8:8f:1c:29:c0:9c:eb:e3:89:cd:a2:17:4a:d4:59:09:1c:38:
0a:0b:e5:6d:60:80:2d:ab:ed:cc:43:d4:b1:29:a3:67:22:d5:
89:b5:23:ca:46:ed:cd:51:14:76:e7:96:2c:5a:1a:89:6e:c1:
bc:e0:93:45:17:f1:61:d0:73:f9:b7:09:a2:43:18:ba:35:9c:
10:d7:eb:d3:2b:d6:13:37:7f:ef:b8:9c:7e:05:f4:7c:82:02:
5f:bc:47:22:b4:7f:9c:f4:fb:7b:9c:9b:5d:ee:68:07:a8:1b:
e4:19:d9:44:f1:53:07:45:3b:99:e9:36:27:69:81:ab:27:00:
b0:bc:75:05:95:aa:9d:16:e4:9b:09:41:84:a1:04:79:78:d8:
58:06:2d:51:5a:e8:67:44:07:cd:07:39:54:27:60:8d:b9:09:
bd:e6:ae:e3:30:3f:67:af:c2:86:99:8f:64:d5:b8:21:38:33:
8e:82:a0:fd:06:62:7a:8d:b1:83:3e:35:f6:dc:da:26:3b:9c:
bd:3b:a9:05:a6:d1:81:66:af:5c:cf:be:cf:91:cd:c3:85:3d:
1f:a8:a8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:40:12 2025 by rpki-client