Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa
File: c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa (raw, json)
Hash identifier: Z+Q2QsbMsqJNcUiVxByOnuqTn3RAgY8zURvQcYV/9Ts=
Subject key identifier: 3A:7E:99:EA:41:23:1C:2F:87:05:6E:C6:FE:95:14:54:EC:07:0D:47
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 74E7EB7AB7FEEE1DB8365133AD7FA49362D77E81
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa
Signing time: Tue 20 May 2025 18:41:09 +0000
ROA not before: Tue 20 May 2025 18:41:09 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:60c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e7:eb:7a:b7:fe:ee:1d:b8:36:51:33:ad:7f:a4:93:62:d7:7e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 18:41:09 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=f587e5e464fcdf736582fecc94b149db507d6a183288a7aecdc47501c74fdcc9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:af:42:f0:34:e3:a7:68:39:c6:34:98:e1:
8c:80:b7:20:19:85:a9:5b:80:54:42:fe:df:f9:f6:
8b:6d:70:45:b4:d9:49:a1:1b:88:c8:29:38:da:5a:
d6:55:13:4a:23:35:4c:73:c9:dd:c5:07:17:3f:11:
4d:68:6d:27:2a:cf:82:06:b0:40:fe:da:6f:09:1d:
dd:11:b4:db:09:fa:b0:51:75:ba:38:d0:d8:e2:ca:
0e:fa:28:ad:56:89:e6:86:9f:9f:b8:26:8a:75:e8:
14:44:49:8a:ad:49:0e:10:f1:50:e7:39:bf:4e:ca:
9f:c8:3e:3f:5c:66:5a:ac:1e:3a:3b:44:c6:bd:d4:
11:4a:02:f6:4a:4d:8b:ab:b8:ae:1d:09:17:fb:02:
b4:f5:c9:63:c2:48:9a:f5:4f:4b:f9:b9:7d:d3:24:
8d:ae:fe:f9:00:06:e8:a0:3f:31:5e:9b:d5:c5:29:
1f:df:f4:ac:ed:25:93:6e:c5:c9:66:33:b9:0d:e3:
04:09:46:b8:a3:44:3a:67:ac:95:8d:e1:24:15:df:
f2:fa:ae:e5:65:fb:16:24:f8:78:d2:09:7a:db:08:
f0:e7:5e:c0:88:94:05:eb:2a:5d:79:cf:6f:be:7e:
ab:c5:e4:01:0f:21:9c:1c:ba:7c:47:d5:e5:f6:b4:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7E:99:EA:41:23:1C:2F:87:05:6E:C6:FE:95:14:54:EC:07:0D:47
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
88:8e:bf:d6:9e:15:09:75:41:2f:b2:0a:f9:17:46:4a:dd:e0:
2a:49:50:fb:47:bb:c5:46:ce:35:3b:70:52:aa:58:54:83:58:
a4:aa:1a:72:91:c5:16:09:f3:34:2b:bb:53:d0:3c:0b:7a:96:
73:fe:6f:60:88:1a:52:d0:d2:3e:64:d6:e9:76:6d:17:5f:34:
68:5f:f2:8f:69:3e:06:95:47:a1:4c:d1:50:7b:b1:43:db:e1:
93:e2:37:24:ea:a4:22:03:8c:a1:a9:c3:cd:43:84:8b:6f:83:
6f:b9:71:e4:17:92:0f:c4:7d:a2:fb:f1:fe:0d:e2:93:e8:65:
1b:1d:b4:74:1e:7e:d6:68:75:94:2b:9d:85:1e:99:21:80:5d:
c3:20:fb:f3:65:ef:ee:c9:cc:69:eb:73:48:e2:27:2f:29:c9:
3c:56:a0:eb:39:c4:93:73:26:db:c5:8f:26:fc:f3:a0:8a:ef:
cc:b1:8c:f3:aa:b9:e1:e5:a9:d3:1b:a2:c3:53:e4:45:4a:0c:
c6:1d:7c:9f:dd:45:28:85:2c:9b:ad:56:0d:5b:a2:ef:80:84:
3a:e9:26:b0:3d:38:60:27:b6:f1:50:ed:95:fb:17:53:14:b8:
fb:23:c2:3c:66:ed:cc:e9:3e:92:db:69:1a:ae:ce:a3:1d:89:
75:bf:11:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:37:42 2025 by rpki-client