Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/09f64eda-2b9c-4c89-8eb4-7cfb08b2ba08.roa
File: 09f64eda-2b9c-4c89-8eb4-7cfb08b2ba08.roa (raw, json)
Hash identifier: NaZH5oB5S8t5RmMtoF25LeH5sovWaDLr3WSpxgsynV4=
Subject key identifier: 6F:AA:72:EE:0E:54:C2:22:DD:28:5C:53:00:9B:AA:F2:12:26:F2:00
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5BD50135D7F2561E8153B9D618E2AFC800943899
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/09f64eda-2b9c-4c89-8eb4-7cfb08b2ba08.roa
Signing time: Fri 11 Jul 2025 19:10:52 +0000
ROA not before: Fri 11 Jul 2025 19:10:52 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d5:01:35:d7:f2:56:1e:81:53:b9:d6:18:e2:af:c8:00:94:38:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:10:52 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=e1cbd2576f6e35eca48196786997adc164d0649ad4bbd4072c388ff124cdc497, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:6e:70:0b:ea:c3:93:13:1b:01:58:a6:a6:
ed:db:5f:4d:8c:7c:71:5b:62:4c:de:42:60:ae:ce:
d2:36:8a:78:0d:e4:89:1b:2e:d6:5e:5b:a2:87:73:
56:15:d2:31:70:ab:43:45:9c:67:65:70:e7:51:c0:
39:f0:5c:82:0b:3c:49:d6:aa:df:35:8b:2e:ed:75:
86:34:44:e1:02:c3:ab:ae:40:c7:63:9b:55:0a:22:
e5:43:1c:72:ce:a1:06:3a:db:47:9d:15:9c:93:16:
24:1f:c2:2a:b6:00:80:2d:03:c6:d4:ce:6c:54:70:
38:ff:45:f8:c2:64:74:c2:40:f6:7c:f1:11:e7:46:
68:45:73:8c:3b:cb:13:93:11:c8:c7:35:e0:2a:5f:
10:9c:20:ca:29:1a:b6:39:28:0e:84:2d:ad:9a:1f:
d2:52:be:6a:d9:d3:ee:1c:6d:85:2e:2f:a2:4a:aa:
19:90:f2:2c:3b:42:b3:55:92:4f:e8:31:31:56:b9:
79:e1:89:63:8c:e7:1a:eb:72:d5:e3:9d:72:1b:f0:
b7:62:dc:54:3d:94:6a:b9:95:47:7b:91:82:de:24:
98:fb:6e:19:f3:83:49:17:27:88:2a:62:ab:71:1c:
f5:2b:60:9b:a5:34:f0:80:7a:35:9a:bd:99:d4:62:
40:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AA:72:EE:0E:54:C2:22:DD:28:5C:53:00:9B:AA:F2:12:26:F2:00
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/09f64eda-2b9c-4c89-8eb4-7cfb08b2ba08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:8020::/48
Signature Algorithm: sha256WithRSAEncryption
2b:0e:c3:2d:e2:d2:a0:08:7a:36:9a:b1:19:b0:03:cb:7d:c4:
e1:c4:f4:a7:a1:26:df:aa:b7:da:58:46:fb:b9:93:98:cb:6c:
d4:22:31:62:f7:cc:c1:8b:9f:3f:50:ac:41:21:3f:67:16:82:
8a:6b:37:1c:c0:80:1b:9d:bd:c6:40:5a:29:b7:52:a3:f1:4f:
36:76:99:03:ab:91:b4:4e:a2:a3:0f:96:98:1d:40:c8:dd:4e:
94:1d:85:73:0e:47:f6:84:a4:87:e6:86:3f:67:63:e1:09:d8:
61:a7:85:58:7d:55:e2:a2:64:90:92:82:81:52:d3:28:c2:c9:
e1:5c:19:9e:ec:bb:02:77:34:ad:3e:39:7d:2c:f2:d0:9e:cb:
0a:e5:b2:d4:a6:ba:66:7e:f9:5d:27:f8:90:59:e0:75:4a:52:
8f:1e:1b:20:76:47:4d:c7:a0:cc:a5:88:d2:16:f2:ba:ed:73:
94:92:cd:38:c8:62:a4:27:f3:8e:19:b8:e9:bd:84:9c:bf:4e:
b6:cb:e3:90:26:a2:f5:0c:3b:f9:e8:49:45:e8:ed:3e:3f:9b:
c3:43:11:fe:36:67:45:f3:e3:5d:cd:35:f0:49:ee:2e:9c:0f:
bd:cb:54:72:0f:2b:df:99:f5:cf:39:21:d6:9d:70:85:0a:31:
78:75:62:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:36:50 2025 by rpki-client