Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0d8c280f-edb2-45fb-9207-8226dc900bb1.roa
File: 0d8c280f-edb2-45fb-9207-8226dc900bb1.roa (raw, json)
Hash identifier: LLhEZFDAQQbIC+nYXrSVOy6yTzkLqhKK96H97zXub7Q=
Subject key identifier: 2A:28:DE:3E:11:8A:20:18:1D:43:FE:FF:9F:26:1D:60:FB:56:E3:D6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 23D068471E84688D96B95FB16B9B28ED7EBE6231
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0d8c280f-edb2-45fb-9207-8226dc900bb1.roa
Signing time: Fri 11 Jul 2025 19:01:14 +0000
ROA not before: Fri 11 Jul 2025 19:01:14 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:5080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:d0:68:47:1e:84:68:8d:96:b9:5f:b1:6b:9b:28:ed:7e:be:62:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:01:14 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=0f659f487a43cc5c4b8a5a9cf5ae9315ce902e0ab164f5782be7cf139ff41212, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:82:7e:73:fd:d3:88:d0:a9:56:07:52:dc:
15:8e:cb:24:ea:37:14:53:8a:9c:fe:6d:35:2c:64:
01:07:ec:bb:00:47:5b:9f:46:82:a4:e3:fe:f6:6d:
70:09:85:3e:8e:0d:ad:bc:1f:d2:a2:26:55:dc:ce:
74:24:45:d0:50:06:98:ad:55:f2:85:29:67:e9:87:
25:27:41:4b:c5:35:11:5f:ea:4c:f0:13:a7:36:b0:
ce:c5:f2:24:d1:3b:f8:04:20:4a:2f:80:8a:8b:7f:
52:1b:3f:1f:88:9c:bd:cf:2c:18:3c:0e:f5:43:b5:
56:0b:0d:08:aa:c4:29:40:fb:62:44:aa:ae:80:0a:
ed:61:2f:d4:13:be:f0:04:d5:80:3a:71:6a:2f:05:
21:ba:1d:87:5b:a4:ff:9e:d4:66:26:1d:94:5e:68:
ee:d7:09:df:ec:23:9a:b4:b0:58:28:ee:a5:17:2b:
27:01:b2:f0:80:75:b6:6b:be:9f:23:8d:c2:32:01:
71:e2:75:61:65:62:da:e7:fb:8b:78:92:3f:b4:f7:
48:e1:5e:da:4a:5d:fd:62:11:e4:cb:77:93:c0:f5:
1a:3f:7f:3c:f1:ae:b6:14:6a:e4:35:07:c8:46:11:
82:db:41:c2:c4:ba:14:78:7d:59:5b:7e:5b:88:2e:
19:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:28:DE:3E:11:8A:20:18:1D:43:FE:FF:9F:26:1D:60:FB:56:E3:D6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0d8c280f-edb2-45fb-9207-8226dc900bb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:5080::/48
Signature Algorithm: sha256WithRSAEncryption
c6:fe:e2:c2:cd:fc:9e:6b:5e:dd:02:59:2e:db:5c:42:4d:c9:
36:71:4c:04:21:65:6d:40:b3:70:f4:b2:78:ae:96:4e:d3:ef:
20:af:3d:cb:f7:ff:e4:71:0c:4f:4b:4d:0e:a7:a1:98:d9:ba:
bd:82:85:10:f7:b7:57:98:ed:5f:c1:3a:ce:5c:41:7c:17:b0:
79:00:b8:89:a1:8b:5d:e8:77:1f:32:ba:9d:02:bd:96:06:72:
26:60:49:f7:29:29:fa:10:00:e7:c5:6b:14:0c:d7:e1:70:be:
ac:b5:62:73:64:89:f0:4e:ee:ee:f3:45:a5:5f:d3:ab:00:a6:
c3:1e:75:4b:c1:1b:8d:7d:53:76:49:c2:48:d5:3b:ad:5d:0c:
6c:75:27:9a:9a:5f:1c:1a:ac:8a:50:77:fe:64:17:95:a6:09:
71:e1:01:ac:ac:d5:de:a0:00:71:5f:4d:9d:fa:65:f8:ce:4c:
4b:65:f1:df:0b:ad:d0:1b:80:a4:2e:37:2c:79:af:88:48:ee:
46:25:f5:d1:13:d4:51:ee:af:27:9d:74:58:cd:90:6b:ed:3f:
65:4a:4c:c2:e9:6c:93:09:1e:2e:cb:25:a1:93:a6:c0:5a:62:
13:d9:58:33:92:08:f4:45:f5:f5:be:a8:bf:c5:a2:25:eb:57:
15:52:5b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 00:00:18 2025 by rpki-client