Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d995c3a1-2858-4090-a096-1bf6aeccd5f2.roa
File: d995c3a1-2858-4090-a096-1bf6aeccd5f2.roa (raw, json)
Hash identifier: xDmxt0BeaM5UrHy6eGI64Sdc5Q5wxUm52zjXd+Jonnw=
Subject key identifier: CA:99:26:09:A4:02:A5:93:54:6F:AC:BF:26:D4:DB:6B:DB:B9:4D:1C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1BA5D8BC220B13C4FE6E89A522FAA35DD0B570FE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d995c3a1-2858-4090-a096-1bf6aeccd5f2.roa
Signing time: Sat 24 May 2025 00:30:14 +0000
ROA not before: Sat 24 May 2025 00:30:14 +0000
ROA not after: Sat 28 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014:1800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a5:d8:bc:22:0b:13:c4:fe:6e:89:a5:22:fa:a3:5d:d0:b5:70:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 24 00:30:14 2025 GMT
Not After : Jun 28 23:59:59 2025 GMT
Subject: serialNumber=b243c2f6592aa2a79026abcf2eb5a67edba6c474db74f5cf246423c9fda0cf66, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:03:30:e4:56:4d:ff:42:ae:86:13:97:76:
d8:c0:d1:eb:b6:50:20:52:ca:a8:d3:a6:0e:e1:b0:
a3:0a:ab:33:18:6b:75:63:94:91:44:a7:a6:9b:f9:
c2:9f:98:6c:c8:f4:46:08:b2:40:51:76:ae:ce:70:
70:36:34:a2:bc:8e:1c:f2:af:e6:2c:71:a5:94:6e:
64:ff:eb:ed:21:e2:4d:43:67:82:86:93:fa:e3:b9:
b9:85:cd:7e:cc:f3:9f:e6:f9:93:df:86:10:38:de:
a2:44:56:90:09:00:20:c7:19:bf:ac:60:87:2c:08:
21:e3:da:4c:42:7f:b7:2a:61:56:0a:9d:85:29:7b:
67:7f:60:ef:cf:3e:ed:2a:8f:43:0b:c3:97:fc:f5:
81:e8:3b:1d:d6:df:60:38:58:59:fb:d4:e9:01:c3:
0b:47:1f:18:aa:eb:f5:59:1d:32:9c:89:61:95:7d:
c1:62:5b:ec:29:1a:70:44:a5:84:53:af:74:21:cc:
8d:0b:4f:27:05:a7:05:01:de:02:0d:57:a9:91:8a:
7a:e5:ef:97:a1:f3:ee:b1:2c:15:92:e0:8f:60:b1:
04:40:2f:ff:40:5f:b3:88:1b:90:dc:33:e7:e6:32:
3f:0b:0d:5a:bf:bf:6b:37:f5:1d:7c:b9:14:f2:52:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:99:26:09:A4:02:A5:93:54:6F:AC:BF:26:D4:DB:6B:DB:B9:4D:1C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d995c3a1-2858-4090-a096-1bf6aeccd5f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014:1800::/38
Signature Algorithm: sha256WithRSAEncryption
99:0d:3c:3c:b7:fa:ef:98:51:66:df:7a:82:2f:5d:4c:8a:39:
ca:cb:4c:02:a0:e9:9d:3e:3a:3c:5c:a9:77:be:89:06:66:94:
2d:39:f0:b7:e9:76:35:c8:65:ac:e4:46:21:92:4c:91:b7:11:
40:61:dc:7e:16:26:4d:1a:ba:52:ef:5b:27:df:4f:71:2a:af:
94:e4:a6:e4:69:9b:04:90:45:df:5b:58:1d:56:26:dd:74:4f:
9f:7f:a4:3e:04:20:3b:a5:d5:73:92:37:23:bc:4c:52:5a:3d:
56:9b:d7:e3:7c:a0:62:f5:fc:d6:95:91:7a:1b:c9:75:0d:c2:
2d:3a:50:65:77:2e:06:61:b1:6f:42:7f:1e:5a:a8:42:0a:12:
e8:77:ae:ef:5d:05:c4:9e:42:20:72:c6:05:6c:51:2b:29:5f:
37:e7:e0:5b:4d:a2:cd:47:3f:ff:df:c6:84:82:40:fb:76:0b:
81:f0:8f:fd:c2:0e:32:df:16:2b:d7:8c:ac:6a:d7:22:05:e6:
66:22:df:a6:b8:bf:d5:e8:d7:31:af:29:4a:47:8a:fe:e9:a4:
a9:86:3b:ca:0f:d3:ae:7a:92:32:fb:63:95:88:cb:89:a2:69:
ad:c1:56:b9:30:1d:b4:62:b2:49:3e:6a:12:9e:1a:94:c2:3b:
e1:0a:13:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:39:21 2025 by rpki-client