Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
File: 12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa (raw, json)
Hash identifier: H1olYauChts+mxTReZcOhL6+gp2OQx/m6bnwVYxvcZE=
Subject key identifier: 01:31:B6:D7:BC:C3:EC:6B:C9:7D:D3:CD:D0:ED:3B:DF:A2:1E:93:A1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2481FDD77D3C793126820F7742A8ABFE008F4DAD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
Signing time: Fri 11 Jul 2025 18:40:02 +0000
ROA not before: Fri 11 Jul 2025 18:40:02 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:80b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:81:fd:d7:7d:3c:79:31:26:82:0f:77:42:a8:ab:fe:00:8f:4d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 18:40:02 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=d0ff34c3aff85396a1625b86a9694e39a6bf045a0cd247e31c2f88aa813e850a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:fa:12:77:6c:fe:27:27:ac:af:5b:59:ad:
09:0a:d6:15:e9:33:d4:58:01:27:ae:11:c3:a9:ac:
80:52:dd:55:8b:a2:1f:bf:86:5a:97:78:83:dc:66:
ab:0f:b2:11:2e:49:68:de:66:03:62:d2:75:9a:f4:
66:7d:6e:6f:6b:11:e2:0c:18:eb:c5:2d:25:2a:65:
b6:d0:72:e1:e2:cc:4f:53:b9:1c:c0:f9:05:59:1f:
ea:e3:7a:cc:28:c6:a2:cb:d1:c4:b9:96:54:31:31:
f6:47:1b:06:44:8e:38:5b:0e:99:b5:c0:ef:f8:60:
1d:4a:df:64:d1:88:3d:42:1a:3e:2a:7d:ca:9b:66:
bf:87:65:f7:a7:a7:4d:65:4c:53:d1:e9:48:55:a9:
25:81:26:88:2c:5c:a2:12:03:5e:78:9b:8e:ba:43:
f7:5d:c2:0d:aa:71:89:da:64:d3:d3:31:92:22:9a:
91:ad:84:4d:2e:36:35:fe:4a:42:26:e6:f1:01:a7:
a7:0e:8f:a7:dc:9e:ce:e5:82:c6:e2:65:42:65:87:
92:26:fa:2d:c2:7e:32:f6:55:39:58:18:be:ff:90:
2c:f2:fa:ff:09:e8:de:ff:59:7a:97:95:29:2b:11:
83:65:9c:5b:6c:9f:d2:75:c9:7b:84:9f:79:12:8d:
59:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:31:B6:D7:BC:C3:EC:6B:C9:7D:D3:CD:D0:ED:3B:DF:A2:1E:93:A1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:80b0::/48
Signature Algorithm: sha256WithRSAEncryption
1a:e0:89:9b:77:b6:70:6f:31:a1:51:cc:96:c7:53:86:5b:56:
57:da:9f:51:9a:d5:82:00:4e:8c:eb:4b:58:de:b6:b6:48:ff:
2f:72:1a:69:91:65:ab:47:2d:f1:56:9a:ea:f9:2c:ba:2a:99:
c2:5a:95:61:1c:99:62:1b:35:74:d5:b4:75:70:85:99:92:b8:
9d:e8:f7:89:74:17:27:db:e0:21:9e:b7:c5:26:63:68:07:3e:
b9:ad:23:c2:8c:be:1b:6b:46:a9:5d:2e:da:cc:f2:d6:b1:9f:
4d:64:f1:3a:cb:21:12:1b:e9:93:d3:63:0d:68:74:26:30:c9:
cb:e6:a4:18:8d:ea:4e:15:03:59:85:28:34:c5:61:60:a6:cf:
45:15:e4:85:26:88:b8:92:24:77:96:d9:80:69:52:ae:e3:00:
5e:c0:f1:51:83:c1:13:ea:1c:57:06:91:e9:37:03:9a:54:a5:
31:7b:ac:a4:69:e5:33:58:75:b2:a0:54:a5:2a:28:3c:d1:36:
4d:f1:2d:72:00:bc:12:65:e2:64:27:e1:4a:5a:6c:54:5d:9d:
5d:e7:6f:ce:bd:47:bd:2c:8a:82:4d:cb:a8:c9:59:59:0b:e7:
60:6d:34:8a:b0:3d:67:a6:f8:a1:c4:b0:ad:7e:79:3f:f2:63:
05:11:bf:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:34:05 2025 by rpki-client