Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dec4a7df-5727-45ab-92fb-7078e26fd54d.roa
File: dec4a7df-5727-45ab-92fb-7078e26fd54d.roa (raw, json)
Hash identifier: seCp2Mrt7MeqB4Sl767OiQ779hQzJU7fk+o0G28apiQ=
Subject key identifier: 7F:38:34:E9:D2:49:37:5C:2D:B7:8F:9B:AD:1F:87:D7:B2:17:86:95
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5B833E70DBAD81789BF78661DDEEB331543E2EB9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dec4a7df-5727-45ab-92fb-7078e26fd54d.roa
Signing time: Tue 10 Jun 2025 17:20:48 +0000
ROA not before: Tue 10 Jun 2025 17:20:48 +0000
ROA not after: Tue 15 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:83:3e:70:db:ad:81:78:9b:f7:86:61:dd:ee:b3:31:54:3e:2e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 10 17:20:48 2025 GMT
Not After : Jul 15 23:59:59 2025 GMT
Subject: serialNumber=673f3adc6735726b8d12a09cacd9645ef3a17b5dd9c650647e6474f43a52b8be, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ff:e2:29:6c:b0:fa:99:01:df:65:cc:4a:c6:
67:b4:fb:70:5a:79:01:be:89:9f:66:b5:17:f5:4a:
f5:6f:5c:d5:44:0b:c7:c3:92:09:1c:72:76:36:1a:
a1:0d:d9:7a:88:65:e3:39:27:24:d4:80:90:c8:ca:
ae:19:00:b8:f0:34:95:69:06:b1:e7:09:17:49:ae:
3b:fa:dc:b3:48:e5:d8:f5:13:f9:05:03:3d:ef:4e:
8e:74:25:26:78:bb:a5:6d:2e:d6:8f:84:de:b1:19:
0d:c7:d7:3c:e8:83:06:38:13:29:3b:af:22:de:d6:
b4:d6:7e:63:11:c3:86:4b:14:21:01:ec:8a:21:77:
c2:4e:aa:07:b5:2d:87:90:dd:49:17:d4:78:60:a4:
95:64:47:c7:fc:ea:92:24:fd:92:bb:7d:62:59:d9:
96:4c:a0:f7:04:46:5d:b2:89:a4:f5:2e:39:31:8b:
b1:0e:f7:61:a9:84:9e:2e:05:11:aa:7f:4a:a4:f2:
4e:cd:be:8e:11:f9:56:71:a3:1a:18:f9:ad:10:85:
c7:82:da:40:88:a1:f4:7b:d0:6c:a0:d1:05:70:18:
ec:6e:ac:04:82:f4:5b:d2:aa:f2:cd:aa:18:c2:58:
d5:ac:e6:ee:39:f0:b2:f1:18:c5:a8:b5:27:05:70:
96:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:38:34:E9:D2:49:37:5C:2D:B7:8F:9B:AD:1F:87:D7:B2:17:86:95
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dec4a7df-5727-45ab-92fb-7078e26fd54d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076::/32
Signature Algorithm: sha256WithRSAEncryption
0c:bc:7b:2c:bf:a3:31:df:a7:39:83:a0:be:5e:dd:e8:97:4a:
b6:10:22:9a:de:c6:a7:76:fd:4a:d6:14:e5:e3:b4:9a:1b:ba:
73:4c:04:db:a6:9f:c1:30:df:a3:26:22:f7:21:d4:2e:16:45:
2c:2f:f9:a5:0b:55:c0:dd:1e:27:03:59:07:87:81:b9:ff:13:
ae:57:c9:03:3e:48:37:90:25:f5:b4:3a:1f:e0:80:9c:42:96:
66:d1:7b:5e:69:68:3e:01:56:ae:d0:7f:d1:60:b2:25:0c:4f:
31:c8:05:5a:6f:f9:d4:b8:06:fb:9b:28:05:ea:a9:f3:8c:80:
50:f3:f6:ba:26:e7:d8:5c:7a:d9:e5:da:11:3b:8a:be:76:86:
73:4c:ec:6e:17:8a:ad:7b:f8:cb:1d:bc:93:bd:f2:e6:a4:3b:
ce:5f:0f:fa:03:6b:a4:92:56:2d:60:36:d5:ac:fc:a1:a1:7d:
b6:b4:8f:7f:58:c3:16:e8:47:d2:bc:b6:53:50:30:89:44:13:
05:a7:3d:f2:31:f3:dd:a9:74:5e:88:80:81:f9:83:f5:44:66:
90:b8:27:d2:8b:1f:30:4a:01:73:06:15:bd:85:a4:10:f2:3f:
ad:56:6b:a1:f1:a1:a0:f2:a6:c0:77:74:50:b3:42:02:fb:e8:
88:15:fd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:35:25 2025 by rpki-client