Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04593af5-4653-4d6a-8bb5-65270db84a4f.roa
File: 04593af5-4653-4d6a-8bb5-65270db84a4f.roa (raw, json)
Hash identifier: Bd3Y6udiM7CjOh8G6EIJVhouu4SuZUBr4JDb4KgZnH8=
Subject key identifier: 23:5C:20:6F:E8:20:A1:02:E0:8E:41:4C:60:DB:F7:DD:E6:9F:0C:DB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 30BAE73039C07542AD5A024416EDFD199095A801
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04593af5-4653-4d6a-8bb5-65270db84a4f.roa
Signing time: Fri 11 Jul 2025 20:51:01 +0000
ROA not before: Fri 11 Jul 2025 20:51:01 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02d::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ba:e7:30:39:c0:75:42:ad:5a:02:44:16:ed:fd:19:90:95:a8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:51:01 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=14050e825ef333e66b5cc92d57a53ad526423528af4612ac4c5fafdfedb89749, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:90:a8:4f:9c:7a:db:9b:7d:96:ef:00:3e:
55:9c:3e:0f:ee:64:b1:ab:49:f2:7c:26:64:38:bb:
4f:9c:75:d9:e7:29:5d:48:b0:77:89:10:26:30:de:
b2:35:a2:5f:49:0f:d5:83:29:d8:8c:8e:e3:0b:d9:
73:8d:7a:cf:e3:d4:f2:82:4a:cf:50:ee:d1:a9:43:
96:f9:79:e7:05:6d:51:d9:c0:69:ec:51:2e:f5:04:
a2:ac:05:52:aa:a8:9b:cb:bf:85:75:77:d0:fc:6d:
0e:b4:84:1c:7c:e4:d2:51:fa:8d:6d:88:ad:02:5d:
a5:c6:a7:03:2d:b0:51:f7:cc:43:c9:7d:54:9b:50:
09:a3:c0:39:ec:3f:3e:35:6e:f5:e3:7e:88:f8:9a:
0c:35:33:b1:a5:68:72:4c:0f:2a:15:64:b7:66:be:
d8:d6:59:f7:d9:da:db:2f:6a:64:ec:fa:30:07:c7:
42:8b:c6:b0:11:3f:d8:53:88:99:1a:91:c2:fa:d2:
35:36:a5:7f:39:9e:c4:bf:b7:52:c8:3c:81:77:68:
ec:f6:61:a1:54:17:8d:b9:c1:35:3b:ac:e9:cd:97:
10:d2:6f:a7:1a:49:0f:53:b1:03:cc:eb:c4:75:69:
7d:56:45:dd:e5:6b:d4:51:2c:cc:dc:29:58:47:eb:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5C:20:6F:E8:20:A1:02:E0:8E:41:4C:60:DB:F7:DD:E6:9F:0C:DB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04593af5-4653-4d6a-8bb5-65270db84a4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02d::/36
Signature Algorithm: sha256WithRSAEncryption
75:e4:7a:e0:e8:00:6c:b1:28:54:be:ea:0d:a5:f0:63:1a:18:
4b:c6:cb:d4:dc:d9:c6:20:e6:74:4f:fa:f4:1b:ef:d8:3b:b7:
48:ad:4f:9f:cf:72:91:8c:15:a3:ce:54:04:f7:67:15:66:5f:
5a:c2:7a:5c:30:ff:36:d6:f1:89:a2:6d:87:e9:0f:02:1a:7a:
99:ca:b1:59:04:5a:94:87:bc:6d:1e:66:99:08:8e:74:c1:07:
52:70:92:4c:bd:c4:69:74:66:4f:9b:24:8e:c6:fc:00:97:ff:
a9:64:2a:56:eb:cc:8d:6b:13:22:64:28:af:de:12:ce:0d:3d:
e2:a2:2b:4c:81:3f:93:14:71:49:b4:13:92:00:d7:c1:c7:a6:
a1:af:03:d3:4a:60:60:29:e8:36:72:a4:05:5c:a2:62:33:eb:
5e:50:40:fc:49:dc:4f:38:c8:ca:82:d4:b4:1e:0b:a9:34:45:
f3:0f:01:62:78:3f:1d:94:c3:ff:90:4c:57:4a:18:63:a2:98:
61:bc:43:d1:ba:2e:c7:10:8a:f5:88:52:dc:9a:38:c1:30:a9:
ea:89:6b:19:44:65:6a:67:6d:ec:63:59:05:c7:e8:4c:3a:2a:
08:37:52:d8:d9:a1:2c:13:e9:33:1f:64:d4:5e:81:38:40:f4:
35:1b:7c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:46:50 2025 by rpki-client