Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca1ed493-accf-4e7e-8542-cdb1f8d4834b.roa
File: ca1ed493-accf-4e7e-8542-cdb1f8d4834b.roa (raw, json)
Hash identifier: uXhshoPnNI2f637zL7v/G5uK6G9jyGIGjDjR9EWy+ts=
Subject key identifier: 31:B5:26:71:5E:3E:10:D8:0F:B7:0F:E6:11:8B:96:95:F6:C0:EA:E6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 720B75A2A6A615F63A74613FC9508308059E7D06
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca1ed493-accf-4e7e-8542-cdb1f8d4834b.roa
Signing time: Tue 20 May 2025 19:50:58 +0000
ROA not before: Tue 20 May 2025 19:50:58 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:60c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:0b:75:a2:a6:a6:15:f6:3a:74:61:3f:c9:50:83:08:05:9e:7d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:50:58 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=90a11879c17500e3408b4d0e106ca7024a857351a28b75bd806b79796547320d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:09:40:6d:3a:79:62:0e:30:36:9c:d9:e0:8e:
73:96:3e:c0:ff:85:3e:92:64:d3:b2:d8:1d:fe:99:
4e:0a:d3:51:99:ea:8a:c4:82:4b:8d:c1:46:6b:bc:
12:a2:a2:c0:de:45:b9:a7:8e:6d:58:99:aa:cd:1e:
a0:58:1d:bb:70:90:a1:02:89:7d:5d:63:27:71:24:
d5:98:fa:22:d7:97:ab:87:61:a2:fc:40:23:f4:be:
f2:60:14:ad:1a:90:f0:98:9a:91:67:aa:fb:62:82:
dc:09:d4:5a:a0:50:42:7b:ef:65:12:68:a9:c1:26:
5d:3d:a6:52:71:e3:11:7c:80:25:51:d3:65:bc:5a:
bf:f1:90:ed:3c:69:e5:d3:d0:ba:7d:8a:95:3c:90:
a1:8a:a5:c2:9b:d9:be:cf:60:2f:54:cf:5c:c6:cc:
9f:5f:1e:79:1e:d6:d8:73:26:ed:25:2f:38:47:96:
34:be:00:de:98:27:e4:63:04:1a:cf:b2:af:34:01:
ae:c5:d9:2f:7d:1c:66:d3:84:e5:44:39:89:72:b6:
fd:60:e9:14:dd:7a:15:12:73:27:aa:e9:35:25:de:
78:45:e5:34:58:a9:f6:c2:52:30:76:01:2b:d0:42:
25:d7:69:1b:c6:8d:65:c5:b7:44:f8:c3:64:b7:b5:
91:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B5:26:71:5E:3E:10:D8:0F:B7:0F:E6:11:8B:96:95:F6:C0:EA:E6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca1ed493-accf-4e7e-8542-cdb1f8d4834b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:60c0::/46
Signature Algorithm: sha256WithRSAEncryption
72:b3:01:a0:d1:d6:69:6d:26:13:1b:a8:63:99:f5:d1:3a:b9:
bc:1c:c7:af:64:f5:a8:ea:f6:aa:fe:c1:86:a0:23:0b:62:75:
ae:0c:98:e8:57:22:33:79:b1:39:de:b7:2a:db:50:fd:4e:1a:
b0:47:e7:b1:88:84:c8:ba:f3:3e:32:db:f4:c5:29:c6:9c:02:
ea:37:1c:f5:66:a3:12:3b:90:9e:94:69:24:36:11:a4:0b:08:
1b:7c:14:c4:62:7d:13:36:c7:e7:21:53:9f:f8:4e:e2:25:a6:
62:bc:c8:9b:a7:8e:d9:ea:2d:6d:87:2a:5b:67:ce:e6:84:80:
72:32:08:c5:a4:2f:44:84:ba:2f:2f:2d:48:a8:a4:5c:d6:b0:
6c:97:91:2c:bf:37:dc:24:df:50:ab:e6:74:22:b3:ed:fb:e7:
c2:de:2b:ec:27:f4:1f:19:9b:c5:b0:6e:e1:ff:eb:82:52:2d:
f4:d3:98:09:fc:9e:d4:ef:56:a7:26:61:cf:a9:e2:ba:6f:66:
91:22:df:e6:23:e1:02:64:b0:53:e0:7d:50:1a:5d:74:fa:d5:
ef:e7:2b:a9:62:78:07:aa:22:26:7f:81:1a:b5:75:40:a1:c3:
3d:04:30:15:53:22:6d:57:82:79:70:14:3e:cb:b6:cf:6a:34:
69:e2:b5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:40:23 2025 by rpki-client