Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edcc9789-1388-4a5f-a1ae-1bb58c4cb319.roa
File: edcc9789-1388-4a5f-a1ae-1bb58c4cb319.roa (raw, json)
Hash identifier: HRekl00ts1K5JsBY82xxdXpXghjJDNceEfF/PlBjgZw=
Subject key identifier: 2C:9D:C6:39:72:1A:BE:8A:DF:64:F3:89:62:01:97:3F:43:02:B2:FD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 67862964B9D92FD8E73A557B77C79946FAF589CF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edcc9789-1388-4a5f-a1ae-1bb58c4cb319.roa
Signing time: Tue 20 May 2025 20:31:17 +0000
ROA not before: Tue 20 May 2025 20:31:17 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:86:29:64:b9:d9:2f:d8:e7:3a:55:7b:77:c7:99:46:fa:f5:89:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 20:31:17 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=b2c3ff32459afd7c5b93d9c5fd1c49342a71e1be099cd1fb768f13992de49d60, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:72:e1:9b:65:c3:ea:78:e5:ff:44:8c:b4:6e:
0c:0f:e0:08:be:fc:38:87:d2:21:04:57:51:73:11:
2f:71:14:92:38:b0:21:33:38:a1:31:14:c2:e1:a6:
90:83:85:2e:c9:39:f5:bb:80:36:22:d8:2b:4e:da:
74:bf:3f:10:53:00:8a:7f:09:4b:74:32:a3:1f:9b:
cb:f6:67:a1:b5:78:51:34:f2:f3:64:8e:81:ff:af:
5e:e8:29:12:de:f3:45:61:e4:a7:12:1f:b4:4f:95:
0e:34:7c:82:12:1a:09:79:2d:11:aa:c3:73:e5:7b:
2f:23:3c:00:c2:47:18:8e:04:c1:fc:84:15:65:fa:
66:47:c5:6b:4f:b6:d0:59:5b:da:ca:b1:55:2f:20:
98:db:7b:cf:4b:14:9d:e5:be:1d:b4:f7:c0:7f:39:
2f:60:4d:32:97:ad:52:73:78:7b:7c:dc:e3:bb:92:
1c:a4:40:d3:99:2d:17:32:7c:82:20:f1:12:a3:c5:
1f:c5:e4:1c:ea:98:73:68:60:87:f4:05:29:04:19:
45:84:3a:d4:a3:a1:73:57:42:c7:10:16:41:b7:2e:
2a:2b:fa:4e:29:a2:47:d3:ae:63:ff:17:74:71:03:
49:c5:5e:ab:b7:cd:e3:2e:c2:be:0b:17:ce:2e:7f:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9D:C6:39:72:1A:BE:8A:DF:64:F3:89:62:01:97:3F:43:02:B2:FD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edcc9789-1388-4a5f-a1ae-1bb58c4cb319.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014::/38
Signature Algorithm: sha256WithRSAEncryption
5f:03:05:c3:3e:38:ed:8e:14:95:d3:29:24:71:e8:e3:d0:b5:
a0:94:87:85:ab:6c:12:5b:bc:79:88:09:f6:54:70:5b:8d:05:
ad:7c:33:f9:9e:95:4d:41:e9:69:28:c5:d9:22:7f:dd:8f:cd:
1f:0e:40:4e:74:67:b7:ed:c2:39:ff:d1:24:e7:6d:bc:0f:3a:
8f:5a:e4:a0:35:7d:87:a1:60:49:74:40:9b:4e:61:d8:62:e4:
f8:38:07:97:76:fb:87:8a:ac:fc:08:0d:4e:1b:bf:9b:c2:4d:
d1:0d:b4:7f:41:c6:e8:34:ec:2f:c5:b6:38:9e:d9:38:ad:69:
0d:82:13:48:a6:6d:be:84:7c:d1:4f:d1:57:9b:10:40:35:cb:
4c:92:a4:31:2e:28:3c:ac:59:0a:79:b3:23:f5:8c:f8:2f:03:
8f:a3:65:24:0f:25:4f:f3:8f:5a:f9:c0:c8:45:eb:89:9f:05:
26:d3:3e:a4:ff:db:cd:13:0e:c3:12:04:97:15:e5:8e:06:97:
f4:46:cf:c8:86:dd:ac:d6:20:5a:95:17:96:9d:20:c7:c5:04:
1c:78:12:cf:df:b2:db:ce:22:96:93:7f:13:36:21:46:88:79:
3f:c0:58:5c:87:f6:5d:3e:64:2e:8e:e8:77:3f:f8:3d:3f:ea:
44:7f:0f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:43:20 2025 by rpki-client