Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa
File: de62bd05-103b-4cce-91d7-016f4ab26aa8.roa (raw, json)
Hash identifier: Rtxw9Ad4oy84n5Pmig+Qus5yJNL0hSsgJ3iDfFw6q+8=
Subject key identifier: FC:57:79:5D:DA:DF:B5:53:47:E8:86:D5:ED:72:E6:AF:B1:66:35:B3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0D0D10E330409A29CE058AC63EC939E36B1BAC41
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa
Signing time: Fri 11 Jul 2025 20:10:56 +0000
ROA not before: Fri 11 Jul 2025 20:10:56 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:0d:10:e3:30:40:9a:29:ce:05:8a:c6:3e:c9:39:e3:6b:1b:ac:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:10:56 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=ef73a775b413cd68175e8110eb4866aaa3b613e2a7c673e1ca7b697278fd9b50, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ef:46:27:45:8d:5e:69:79:57:b8:3a:8f:e6:
b3:56:45:c2:03:f8:7e:fa:ce:d1:5e:b7:b3:e2:d7:
da:a1:32:9b:b0:28:75:d1:9e:bf:06:b4:97:d4:04:
be:74:da:7b:e2:a7:ac:56:a4:7e:b1:be:7b:e8:e6:
fe:f6:94:70:5a:5d:82:f6:df:6b:a0:f8:ee:8e:ce:
f6:95:c9:5a:c0:49:a9:97:89:e7:a2:e9:68:3d:53:
07:22:63:14:fd:ea:19:b4:d5:b6:41:59:a4:c9:68:
bd:99:de:de:d1:a1:be:af:3b:e9:9d:de:a9:c8:e1:
3d:b8:1c:45:42:4b:01:91:41:90:28:99:b3:81:7a:
bb:73:3d:3e:b3:35:78:96:ef:24:af:f0:35:5d:b7:
19:ed:b6:df:34:28:b5:a4:22:65:01:41:f2:51:fe:
81:fc:33:75:c2:4f:f0:0c:6e:07:b9:ae:85:5e:00:
f7:25:7c:70:f0:68:4e:40:48:f3:ac:85:93:7d:9c:
9c:b5:a2:40:05:98:97:9a:32:06:20:e6:8a:78:0c:
a5:ec:c4:ff:cf:b0:f7:94:1d:de:ca:6c:6f:1b:45:
d6:2f:fc:d3:a9:41:42:7e:1b:0a:02:be:ca:80:59:
b5:1b:17:5d:e3:2e:56:ba:ab:1e:d4:a5:e2:4d:96:
13:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:57:79:5D:DA:DF:B5:53:47:E8:86:D5:ED:72:E6:AF:B1:66:35:B3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:1000::/40
Signature Algorithm: sha256WithRSAEncryption
92:08:18:3e:1d:76:18:f4:b0:77:ca:1a:ef:1c:3b:25:13:09:
5c:83:46:eb:f0:53:c1:f9:3b:f8:5a:b2:db:3e:1b:d3:a7:da:
7a:04:31:ff:6e:b4:de:27:6e:cc:2a:f2:f7:73:9a:66:52:ae:
95:55:2e:b3:3f:d7:40:cd:af:12:d7:1e:7d:a5:f5:e0:d4:dc:
f7:d6:7c:65:51:9d:54:b0:86:5d:ca:c5:9e:75:27:d5:b2:92:
6a:e7:cf:12:01:d5:56:9b:df:35:5e:67:f4:e7:23:1f:31:55:
77:c4:ae:8e:4d:07:17:c9:28:45:7c:69:32:23:57:0f:63:93:
5f:a0:fa:86:b1:08:1e:78:88:ce:e0:50:1a:a8:4a:2e:6a:7b:
67:c1:f4:42:c8:d0:3e:e0:44:aa:16:a9:37:c7:0b:9a:ef:e1:
98:a5:1a:64:21:a2:22:09:bc:58:33:d4:b5:b9:fe:f7:29:92:
ae:47:ac:63:71:7e:99:f4:0b:d6:30:fc:7b:d5:ab:70:a4:f5:
6d:fe:73:4a:94:13:e3:67:91:c2:47:9c:10:d9:c1:89:09:35:
ca:b6:1d:a5:6e:34:ab:85:1e:86:30:5d:0e:e1:2f:ad:b9:2b:
13:40:08:23:23:0a:39:b3:e2:54:d6:db:83:77:5f:f3:a1:fb:
14:b4:09:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:59:22 2025 by rpki-client