Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0de1a64-465a-4de6-8a1f-164b7f3a2c32.roa
File: f0de1a64-465a-4de6-8a1f-164b7f3a2c32.roa (raw, json)
Hash identifier: Ex1hoLsWRAQSv+y8tyG1UwcmoZT6UWWBGcRh+dKF670=
Subject key identifier: 11:EE:A4:E6:E7:BC:A7:BA:FB:37:33:DF:F5:14:0D:18:88:1F:72:EA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7CDD1D3A66F4F20F544CF5EF1302ABF46A3FCCB9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0de1a64-465a-4de6-8a1f-164b7f3a2c32.roa
Signing time: Tue 20 May 2025 19:41:27 +0000
ROA not before: Tue 20 May 2025 19:41:27 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:80c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:dd:1d:3a:66:f4:f2:0f:54:4c:f5:ef:13:02:ab:f4:6a:3f:cc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:41:27 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=dc3bae9e55a21d48c0e622cd9e2e1da865119fd7d4ea838fef61792755937acb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:e0:9f:2f:3f:e9:32:07:b0:d8:87:8b:41:
e2:4a:84:17:ac:f4:84:03:46:b8:eb:0c:9f:48:65:
0c:79:86:e4:f1:d0:5c:96:ee:1c:cf:36:5d:43:09:
06:a1:f8:38:f0:12:78:1f:19:96:68:99:78:21:df:
a2:bf:b9:bb:0c:63:11:03:73:38:11:01:a0:82:5e:
de:8e:84:9a:a7:32:3c:2a:58:f7:37:8a:f6:ff:18:
cd:66:ad:f1:47:bc:60:83:a4:c1:30:78:a8:63:7c:
af:a9:8a:df:c7:a0:d9:f1:23:4a:c4:ab:63:22:d1:
e4:a8:0b:8d:08:fb:37:03:8d:31:9c:f1:81:95:ac:
9c:61:b7:46:28:94:25:bf:d0:35:0e:66:29:35:53:
56:31:11:ab:99:d0:b0:18:bf:66:4c:7b:03:76:25:
87:7a:13:47:06:d5:11:15:96:92:ef:4f:e8:23:f6:
4e:d0:e7:09:14:6a:ef:f7:25:42:4e:05:87:45:38:
38:8e:58:cc:8a:cd:4a:8b:30:f7:78:46:77:0e:6e:
13:90:91:4b:95:31:21:7d:37:95:68:af:47:7d:68:
98:7a:58:e8:a3:22:81:3c:17:5d:0f:c2:2d:91:47:
96:0b:b4:e0:a4:c5:53:64:90:1c:23:20:a1:d6:8b:
f7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EE:A4:E6:E7:BC:A7:BA:FB:37:33:DF:F5:14:0D:18:88:1F:72:EA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0de1a64-465a-4de6-8a1f-164b7f3a2c32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:80c0::/46
Signature Algorithm: sha256WithRSAEncryption
8d:95:e3:3f:dc:c3:e4:16:8e:bf:a5:64:1a:87:3a:11:cb:bc:
70:7f:97:c7:8f:c7:4c:a3:95:ae:6b:0c:07:5c:6f:ab:8a:e7:
44:02:72:53:a9:6e:db:e3:cf:7c:6f:0a:64:b3:e5:dd:31:e2:
9b:8f:1f:1a:80:c6:52:49:36:ca:e7:5b:2e:54:2e:c8:bc:cf:
f8:ae:a0:27:6d:b5:4c:e3:44:44:4d:62:f5:c8:67:45:a7:d5:
67:08:94:de:d9:02:12:40:e9:39:43:4c:07:44:01:b6:36:e5:
10:2b:ae:38:aa:b4:6f:cb:09:5b:eb:0e:41:48:f3:5c:fe:18:
9b:52:3e:14:99:da:2b:49:05:c2:06:09:00:0c:57:fa:d2:10:
c4:5e:95:f4:1a:f6:ca:df:78:57:50:8f:0f:11:4e:48:5b:fa:
40:66:1a:b7:1a:a6:2c:eb:4b:92:47:1d:41:df:a0:6d:23:a9:
59:15:45:34:d9:0e:59:3f:81:6e:e5:c7:db:e4:41:35:88:ec:
23:80:05:e8:c2:12:1a:b2:08:7f:74:25:7f:38:f1:0c:56:7d:
01:23:29:ab:71:8c:b6:4e:c9:ea:ea:9f:bb:cb:ec:4f:61:2f:
cd:48:ff:00:86:f9:63:9b:4f:85:e7:ed:51:57:10:56:75:c3:
4a:39:8e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:36:46 2025 by rpki-client