Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d5fc0fee-af50-4f94-a822-c9f3238359cf.roa
File: d5fc0fee-af50-4f94-a822-c9f3238359cf.roa (raw, json)
Hash identifier: UVfd2bnB6EeKgIgX3bzl2yrMZoa0pA1YQYg4Lb81M5M=
Subject key identifier: 29:2C:C6:12:76:65:BD:54:E7:4C:53:B1:CA:6E:DA:02:6A:FE:A2:33
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3E1A71AC693A1CEA686F78B4B61F48175A448DDD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d5fc0fee-af50-4f94-a822-c9f3238359cf.roa
Signing time: Mon 21 Jul 2025 16:51:01 +0000
ROA not before: Mon 21 Jul 2025 16:51:01 +0000
ROA not after: Mon 25 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:1a:71:ac:69:3a:1c:ea:68:6f:78:b4:b6:1f:48:17:5a:44:8d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 16:51:01 2025 GMT
Not After : Aug 25 23:59:59 2025 GMT
Subject: serialNumber=e0c11beab543fc40e1ce2313605a7ace50a501e64a10362dd947909f7cb0ef3e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:5e:12:1e:62:94:e8:17:b4:6d:c5:d7:5d:
09:36:07:83:43:39:4d:68:37:be:d9:a1:7e:e7:d8:
39:8a:9f:9e:5b:44:ee:cf:c4:2d:2b:58:3a:e2:25:
22:83:07:13:59:09:54:a6:b7:a9:a8:75:df:7a:ce:
69:72:df:c7:39:4f:0c:a0:f0:03:75:89:4e:24:48:
f9:dd:44:25:ac:bb:cd:d1:d7:b8:cf:b0:69:27:c8:
39:26:67:0b:4c:3a:ee:17:8b:38:59:dc:f1:26:a9:
86:5e:44:64:12:34:20:70:70:aa:52:ef:c2:c9:b6:
42:e6:f3:6f:16:95:88:c9:db:a6:a8:ac:b4:d9:c1:
f5:c1:43:5c:8a:10:1f:59:af:e5:e0:a7:20:0f:6d:
dc:02:b4:78:4d:cb:3a:e3:97:5e:46:91:d2:c0:6b:
f4:d2:63:5f:d0:9c:9d:d0:17:db:8a:66:ce:9b:a7:
df:e2:b1:a3:9e:ee:d9:a3:30:f5:e2:4d:3e:99:15:
42:74:ce:ac:6d:34:f2:80:d1:04:34:c9:5c:fe:07:
79:57:f1:67:d4:25:5b:ea:30:53:39:1f:21:36:81:
de:1e:2d:70:08:29:38:32:d9:84:7e:42:9b:32:99:
53:55:8a:36:0b:5a:c0:23:24:b9:3f:b5:a3:0f:92:
de:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2C:C6:12:76:65:BD:54:E7:4C:53:B1:CA:6E:DA:02:6A:FE:A2:33
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d5fc0fee-af50-4f94-a822-c9f3238359cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:2000::/40
Signature Algorithm: sha256WithRSAEncryption
94:80:d5:b1:3d:2b:fc:19:a9:be:63:f3:f6:c1:9c:22:8e:92:
5b:6f:90:c2:67:90:05:11:09:f2:77:9d:2f:d1:e2:17:25:54:
35:c6:71:06:85:dd:58:63:0c:96:36:a0:7c:de:43:8c:83:67:
24:8f:aa:dc:be:9a:ab:24:da:27:3d:66:45:a5:fe:eb:08:b5:
04:9f:e0:65:b6:ed:20:89:19:4b:29:18:3d:5e:ff:80:70:68:
a1:27:13:2b:06:b7:88:a7:9f:06:cc:be:1c:43:9a:ee:ff:cc:
b7:7b:08:34:16:3f:58:16:d1:b0:96:a6:3d:77:23:30:af:e0:
db:d1:37:8b:0b:c3:53:96:73:d0:25:b8:73:ca:33:a6:3c:9e:
ef:d2:9b:1b:b4:fc:f4:6c:4c:4d:3a:cf:f2:9a:85:75:e0:30:
52:75:a8:df:53:27:31:f9:96:18:2c:53:f2:01:c2:52:b7:97:
0b:e2:d6:0c:c6:b1:b7:82:ec:7d:5e:64:18:78:86:e8:74:41:
96:dd:70:64:48:f3:1c:a6:bd:8b:fc:8c:e1:8e:ed:7d:7b:29:
51:ae:8a:fb:b5:4e:5a:4d:a3:48:69:50:03:67:cc:62:cc:67:
86:2c:c7:ef:ed:f1:90:0a:72:9e:0f:7b:b2:93:ae:cf:2f:1a:
d7:72:53:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:59:01 2025 by rpki-client