Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e6ac0def-833f-4e1b-a75d-2d1fb3b8c3d6.roa
File: e6ac0def-833f-4e1b-a75d-2d1fb3b8c3d6.roa (raw, json)
Hash identifier: yEZv5Xdp8ZHx1MZD5vbqx1po0wF+c/IR7/OIZGKgVy4=
Subject key identifier: C5:35:3E:97:2E:CD:D1:92:8C:AC:07:15:E6:D0:96:9A:27:B3:87:CF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 62D19AA173BE2B6FC13444C1CB0A05D6904C27F0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e6ac0def-833f-4e1b-a75d-2d1fb3b8c3d6.roa
Signing time: Fri 11 Jul 2025 20:11:13 +0000
ROA not before: Fri 11 Jul 2025 20:11:13 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d1:9a:a1:73:be:2b:6f:c1:34:44:c1:cb:0a:05:d6:90:4c:27:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:11:13 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=6db7ccd5ff9280bdc54cf0b635805fe65e2ebef140b43fdab734c75229176698, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:17:5a:74:61:d4:40:46:45:4f:ef:13:9d:
bc:7c:ab:a9:63:41:3f:86:82:7f:a3:5f:f8:7d:75:
51:5b:60:3e:ce:0b:77:dc:b0:3b:70:b1:46:b6:dc:
fa:34:29:c0:9f:0c:84:3e:4f:03:66:a7:e1:f5:66:
07:1e:cf:96:7a:80:f9:ce:1a:e6:3c:3c:34:a8:f0:
6e:be:e9:c0:b9:e7:80:68:21:4f:25:f3:3e:57:32:
83:ee:36:38:68:33:62:0a:d7:44:57:cf:e4:33:6e:
b1:8b:e7:62:4b:31:80:9a:d9:05:90:1e:1e:fa:9a:
38:c7:c5:bd:64:6a:fd:23:7c:b6:a5:a8:be:99:fd:
e6:7e:8e:f1:b9:7c:97:bf:69:f5:0b:23:62:d9:3a:
52:a3:38:fb:8c:c5:c5:ab:8a:10:d5:ab:b3:6e:a4:
4b:47:cd:9a:1d:29:75:7a:d5:77:f9:c3:c3:6b:ec:
fc:02:26:40:0a:ca:8d:b1:88:f2:f0:c7:e1:08:d8:
36:d7:30:9d:5e:ea:4b:4b:c8:44:4f:5c:4b:1d:c0:
3e:1d:ba:46:c5:16:73:52:a8:86:45:5d:f9:61:1b:
1a:3f:0c:e6:ce:a9:55:7e:6a:78:2d:a1:4f:b6:e9:
ad:8d:cd:f3:4f:d3:d2:6d:11:72:78:3d:11:a1:7c:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:35:3E:97:2E:CD:D1:92:8C:AC:07:15:E6:D0:96:9A:27:B3:87:CF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e6ac0def-833f-4e1b-a75d-2d1fb3b8c3d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:c000::/40
Signature Algorithm: sha256WithRSAEncryption
2e:57:16:28:de:ca:f7:80:a8:53:9f:f6:09:76:9d:d5:48:cd:
f1:04:9e:41:1f:cc:ef:5e:0b:fa:34:d3:3b:42:e7:93:fa:16:
3f:04:f0:94:4c:e9:15:10:41:9a:85:cb:84:3e:07:ec:8c:b7:
df:5a:a8:8f:9c:5e:b1:a1:42:c4:0f:48:70:21:e3:d6:d9:84:
e0:4c:0c:ea:6d:b0:90:eb:a4:eb:c8:25:a3:a7:4e:fc:30:50:
12:38:c0:b8:1e:fc:45:7c:59:13:65:34:8a:36:d7:df:80:37:
7a:51:7e:d8:23:39:68:d4:9a:0d:3f:ca:76:ef:98:fd:c3:51:
43:47:4a:64:4f:a0:b2:84:55:ca:94:03:c1:c4:1e:22:17:7f:
f6:a7:9b:2d:a5:10:bf:fd:ac:96:2e:98:25:03:a4:40:52:da:
ce:02:e2:ae:c6:77:80:8e:06:5d:4a:41:82:d1:fb:bf:4f:30:
1c:b8:b0:bb:3a:8c:2d:2a:b0:69:3b:63:54:cb:f0:f2:11:91:
dd:64:4e:f1:29:a3:c0:b6:19:59:2e:68:f8:ff:49:19:6a:80:
a8:7a:09:38:ba:9f:4f:9e:98:2e:ff:37:64:4e:bc:71:7c:4c:
5a:3a:da:84:f4:fe:75:d3:c2:f5:34:6d:82:a0:55:fa:1d:83:
d9:b8:45:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:56:11 2025 by rpki-client