Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa
File: ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa (raw, json)
Hash identifier: QgxWiFKwDAJC3pt+RGFl3thzWmUKWTU3LWlau0f0deY=
Subject key identifier: A0:EA:D4:B1:86:60:C3:62:4C:AE:E9:3D:19:D4:76:28:53:B3:68:7D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0D7972B84EAC09CAD03E1557E3A09289336DAB10
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa
Signing time: Fri 23 May 2025 00:41:24 +0000
ROA not before: Fri 23 May 2025 00:41:24 +0000
ROA not after: Fri 27 Jun 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:79:72:b8:4e:ac:09:ca:d0:3e:15:57:e3:a0:92:89:33:6d:ab:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 23 00:41:24 2025 GMT
Not After : Jun 27 23:59:59 2025 GMT
Subject: serialNumber=90fb76f5b714c27b1fbbab70cf2c9332ae15398a991479d60b3a15c667c39268, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:74:28:d8:0b:d8:59:9e:da:93:d9:41:71:81:
ac:46:6a:d8:89:35:b1:21:a1:eb:ba:67:b2:b3:11:
c1:3f:0a:07:3e:74:c3:e7:a0:8c:8e:c7:0c:18:6e:
ed:e6:1c:75:8c:72:29:f8:e6:25:6e:3e:c9:78:38:
0c:23:5d:3d:73:9f:71:bb:77:c2:d4:09:8b:da:3b:
a8:5d:35:f3:6d:fa:1d:65:15:7f:a2:36:80:e9:2f:
bb:0c:c7:85:d6:5c:38:8d:40:69:37:7a:1a:1d:1e:
91:fa:80:77:34:a2:52:7f:fe:ec:57:c9:e0:0c:9d:
ca:3f:b7:eb:45:00:23:40:76:df:1b:f6:d6:9d:9f:
9a:72:d0:2a:f3:fe:51:3a:9e:3d:fb:81:1c:85:50:
aa:fd:0b:b0:c9:a9:10:07:cd:09:6e:92:01:cd:17:
9b:ba:fb:f5:f5:29:b6:3c:7e:16:73:a1:e4:e1:d3:
3e:5f:38:ad:3b:db:71:8e:91:1a:ac:c5:73:49:34:
dc:ad:a4:d3:c9:20:e8:36:29:e7:c0:e7:66:c2:59:
de:bf:6c:d5:23:01:a7:4c:1d:e5:af:85:eb:dd:58:
ec:37:58:22:a6:35:2d:ac:ce:19:2f:5c:ce:08:9a:
db:50:82:7c:67:b2:ba:35:d5:26:9e:45:ba:1f:09:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EA:D4:B1:86:60:C3:62:4C:AE:E9:3D:19:D4:76:28:53:B3:68:7D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:4000::/40
Signature Algorithm: sha256WithRSAEncryption
7a:82:f5:c8:61:05:ae:c1:92:d6:5b:2b:2a:b2:55:db:6e:49:
aa:19:6a:58:2c:c1:d7:0a:fb:12:e2:72:91:52:e4:e1:dd:40:
5f:83:99:f5:5c:49:5d:6b:74:5b:0c:50:37:cd:0f:c6:6f:b6:
ef:7f:53:b0:c0:ce:c9:91:26:f5:1a:99:d8:d5:c6:40:31:68:
8a:dd:b8:c0:8c:64:8d:9f:fc:6b:9e:c4:71:8c:a8:02:2e:eb:
db:b7:aa:33:2b:73:93:6d:25:59:4e:11:0a:30:47:10:d3:2b:
d5:7d:83:58:27:4f:09:98:48:97:80:4e:84:06:09:cc:de:9b:
35:c6:d0:f0:1d:19:fb:7b:18:57:9d:bd:eb:b5:bd:8e:fe:a4:
25:a8:ba:44:8b:ae:2b:77:2d:66:cc:61:38:b7:e8:53:68:9d:
10:a4:54:18:e3:f2:6d:95:77:8a:0d:fa:61:8c:de:46:ef:06:
79:72:fb:d7:a7:dc:84:10:d5:5d:a6:d8:60:8d:a4:77:c6:20:
d7:8f:bb:ee:08:2d:6a:d6:4c:8b:74:ec:91:e9:25:03:35:71:
76:e2:67:9b:78:74:4b:80:73:61:da:5c:64:7f:6d:54:c0:d1:
b5:4d:ce:b2:03:34:03:8e:af:4f:2f:05:1b:e4:32:b8:16:45:
8b:77:30:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:37:50 2025 by rpki-client