Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/113e55fd-9531-4700-bcdc-5abe9a806b41.roa
File: 113e55fd-9531-4700-bcdc-5abe9a806b41.roa (raw, json)
Hash identifier: oouaJfLIZYhcwNeDGcnjdTgtjUG5jKcvIDmqfJZA9KM=
Subject key identifier: 60:CD:F2:DB:67:58:18:D8:97:54:8F:F2:AC:4B:D7:85:BA:FA:91:5B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7C6CB29B4B8782C6D815A6207ABEBD8C632C0229
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/113e55fd-9531-4700-bcdc-5abe9a806b41.roa
Signing time: Mon 07 Jul 2025 18:20:22 +0000
ROA not before: Mon 07 Jul 2025 18:20:22 +0000
ROA not after: Mon 11 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:6c:b2:9b:4b:87:82:c6:d8:15:a6:20:7a:be:bd:8c:63:2c:02:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 7 18:20:22 2025 GMT
Not After : Aug 11 23:59:59 2025 GMT
Subject: serialNumber=c76dfd9a3ff51b150b1e403d14b51ac2f5761894083bbaee8f97be0f8f761da1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:92:76:6f:a3:b6:f0:ce:60:bf:dc:05:6e:
c6:34:1f:50:91:90:c3:0c:df:9c:6b:d1:f0:fd:ce:
b6:31:25:22:8e:dc:92:22:93:b7:5a:43:d1:9c:d3:
7d:44:83:fe:f1:ae:03:4b:13:a6:2d:1b:e5:96:cc:
0d:2b:d7:19:93:9d:50:3a:d7:2f:14:9b:4b:1b:41:
3e:32:7d:06:34:a6:33:0b:82:ba:0c:5d:44:e3:65:
71:00:a7:96:b5:24:93:b4:ee:ef:2a:e1:5e:85:65:
62:96:5d:d1:a0:78:5a:b7:84:ae:c7:75:aa:4f:45:
ab:76:85:fd:41:47:2d:b4:6e:c2:b2:c4:01:41:c2:
0e:99:10:10:c3:9f:d0:1f:3d:28:84:12:ac:b4:7a:
21:56:01:6e:2a:56:26:ab:4c:ee:55:df:1b:11:db:
c4:2f:9f:11:e4:1e:73:e4:30:8f:c6:60:55:90:98:
7a:7c:92:12:e2:44:db:fa:f8:a0:df:f6:24:c4:99:
89:5b:aa:a2:46:39:be:f3:b2:dd:fb:16:d3:96:5b:
d3:4c:5b:b0:9e:dd:49:79:b5:a0:1c:52:ed:11:65:
50:7f:06:8c:cb:54:90:7c:96:31:3b:dd:45:85:b0:
03:19:f5:7b:bf:71:e6:91:28:4b:b1:88:53:c4:bb:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CD:F2:DB:67:58:18:D8:97:54:8F:F2:AC:4B:D7:85:BA:FA:91:5B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/113e55fd-9531-4700-bcdc-5abe9a806b41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:800::/40
Signature Algorithm: sha256WithRSAEncryption
2e:f5:91:40:f2:0c:4a:82:16:51:37:dc:9e:d8:9f:90:0d:48:
6e:23:22:cf:9d:d0:cf:4b:22:25:d0:9d:2d:84:3b:86:bf:9b:
87:42:b8:87:0d:81:d8:f5:e5:f1:83:68:04:bb:a7:b4:21:45:
a9:0f:58:d7:64:33:5f:0a:9a:b4:1a:34:07:83:98:f1:81:fb:
7d:b3:b4:bf:4a:77:30:3a:b3:32:5a:3d:be:51:48:c2:0f:12:
57:d7:e8:6e:50:18:aa:cf:cd:d8:7a:42:32:ab:e9:62:f7:28:
43:0f:23:65:07:d8:d6:82:80:50:4a:45:3b:cd:69:22:85:a4:
2b:30:92:d3:2f:57:79:e8:46:f2:2f:ff:d2:e7:23:dd:10:07:
fd:5c:78:17:57:1e:47:b3:f3:a5:0c:da:e4:a6:d4:07:e7:19:
20:62:5a:95:f1:c0:fe:74:6d:28:8b:77:3e:c0:ac:03:ee:68:
91:2c:be:d6:73:cc:db:23:da:88:30:6c:c2:ca:fd:32:7b:eb:
b3:6c:46:79:72:97:b6:11:81:40:38:e3:6b:40:57:47:08:3a:
2a:48:f7:2c:12:0f:ae:53:48:49:38:85:19:4e:01:68:0f:f7:
37:18:79:68:b1:6d:5f:45:87:33:93:a2:fa:14:69:8e:0b:cf:
20:06:23:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 22:24:06 2025 by rpki-client