Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ebcfa3d0-0fee-4dc1-aa5d-0061f89669ab.roa
File: ebcfa3d0-0fee-4dc1-aa5d-0061f89669ab.roa (raw, json)
Hash identifier: AlNtt74qLmd3cIrkZcaW6iQ0Gsg4U4jH6mrSanvrK/4=
Subject key identifier: 1D:1B:DA:A0:47:54:A7:8B:EA:69:CD:AC:D1:E7:72:0A:80:90:68:CE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 013183194061D6A021A1160E3FFD1E94E0D1FFF3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ebcfa3d0-0fee-4dc1-aa5d-0061f89669ab.roa
Signing time: Tue 20 May 2025 19:21:14 +0000
ROA not before: Tue 20 May 2025 19:21:14 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:9080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:31:83:19:40:61:d6:a0:21:a1:16:0e:3f:fd:1e:94:e0:d1:ff:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:21:14 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=ae1b2074cf90c3d3f8a3c6e0d199b491fcc2ace9589a4bc8fcad6f09f0de7488, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:9c:3c:5e:0e:b9:62:f3:35:29:40:47:cb:
6f:41:b4:4e:0f:5e:d4:0f:31:24:5a:51:e3:66:41:
f0:03:1c:06:6e:3d:14:79:29:72:74:cf:80:79:9b:
6c:19:3c:8f:61:e6:92:6c:22:de:3b:4b:97:45:23:
2b:0d:a4:54:a6:b7:7e:5f:f3:12:0b:4b:1b:76:5e:
44:df:97:c7:14:9c:d3:ae:59:97:19:35:30:27:f0:
f2:ce:cc:4b:33:2e:f7:cf:a3:56:86:3f:ce:df:40:
9b:58:ea:ae:71:27:7c:78:c1:f7:3d:a3:0a:c3:b6:
85:20:f3:c3:d1:a7:f2:2b:93:e9:09:66:36:35:f4:
db:bd:e2:20:97:62:e5:b9:ab:69:07:c5:8c:c9:7d:
bd:86:69:aa:5c:50:3b:f6:42:e1:67:62:1d:a8:19:
94:d8:c4:7f:0a:9a:62:5d:d5:96:de:f2:c2:86:ca:
cf:1e:6e:af:6f:45:46:be:3f:b4:a5:4f:9a:67:4f:
dc:f6:cf:d3:7b:51:77:69:56:86:f2:a4:f1:55:84:
7c:85:12:39:bd:18:e3:46:b5:7f:53:2e:3d:54:e7:
50:a0:3f:8c:24:80:9c:90:85:5c:f0:6b:35:cf:dc:
a0:76:c2:a1:ea:9b:64:78:91:15:6b:78:43:90:b5:
b7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1B:DA:A0:47:54:A7:8B:EA:69:CD:AC:D1:E7:72:0A:80:90:68:CE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ebcfa3d0-0fee-4dc1-aa5d-0061f89669ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:9080::/46
Signature Algorithm: sha256WithRSAEncryption
0f:aa:46:30:84:ff:77:a7:17:92:3d:ee:4f:4b:7f:07:40:41:
df:da:de:bb:a4:b1:a5:69:a3:ed:dc:ae:da:ce:4d:44:eb:1e:
67:8a:0c:4b:eb:da:f4:20:95:6d:24:9e:44:d5:0b:f9:7f:4f:
50:6b:41:fe:33:85:ab:f4:78:e2:ef:25:3a:12:fe:cb:90:e2:
9f:33:9c:55:7c:17:66:fc:54:eb:40:df:c8:16:55:99:4e:4e:
ef:c4:07:ae:e6:fb:8f:6d:e8:e2:90:3f:13:67:d1:f0:23:9f:
52:a7:b4:33:80:13:93:64:0d:b5:76:8b:d0:18:89:31:05:e3:
31:b1:10:04:d2:f1:5f:eb:b0:7b:11:b4:ce:a4:7f:2c:80:da:
3d:2a:35:ab:06:0c:c4:f4:42:41:d2:62:fe:23:d7:67:df:d6:
fb:f6:e3:66:d8:dc:e3:27:47:f4:84:c1:33:a9:66:57:a9:e0:
5b:bc:69:01:a0:fb:46:a1:8d:af:b0:17:b5:46:a3:91:be:fb:
4e:1d:17:fd:20:6f:86:f5:74:11:6c:52:bb:0a:3b:a9:c2:66:
f4:af:e4:e4:21:1d:7a:48:0b:b1:0e:75:04:80:94:0d:cd:be:
e3:15:83:bd:55:25:87:f6:d8:ca:30:41:7c:15:68:a3:c0:90:
d0:6c:bb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:35:27 2025 by rpki-client