Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa
File: 17c361aa-9d23-48f1-8250-bc772fa7773a.roa (raw, json)
Hash identifier: xzuij6ba3PDS5//w2N1hq31a9dDyrhD5N+tL/gxUMxs=
Subject key identifier: DA:F1:7D:55:71:0A:05:E1:30:66:08:DA:5F:7F:22:C5:34:47:23:0E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7436F09F8DA1E8F69C8DE52C85C518ED67D6D90F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa
Signing time: Fri 11 Jul 2025 18:41:06 +0000
ROA not before: Fri 11 Jul 2025 18:41:06 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:36:f0:9f:8d:a1:e8:f6:9c:8d:e5:2c:85:c5:18:ed:67:d6:d9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 18:41:06 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=96cbf0de59186b9d3fa8efdc3b37134d47c565cb06048594fd62e6404018e8f4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:a1:49:f6:36:94:c0:26:ec:f3:ac:29:16:
f1:cb:b9:4c:29:62:64:31:35:a3:4b:79:35:47:e7:
b9:de:5f:65:6f:e1:1f:e4:5c:2f:34:b5:e2:a9:a9:
fe:f4:58:d6:86:4b:b3:e6:34:6a:57:62:04:40:84:
19:b4:c5:9e:cc:e0:12:9e:68:f1:04:fb:b3:a7:b4:
bf:e8:4d:b8:75:b0:c1:23:c1:ce:78:d8:07:68:bc:
2c:7f:76:46:1b:9c:e9:90:13:61:ef:50:ff:a9:95:
2a:98:d0:32:e9:49:de:c7:2d:4e:78:03:01:74:38:
8a:17:f5:83:85:98:d5:fc:d0:64:4b:7d:6d:68:ba:
80:19:5b:87:c8:58:d1:a0:77:22:fa:31:61:18:2b:
36:13:cd:c0:b4:3e:c1:1d:15:87:9e:25:73:e2:cd:
1d:f9:dd:bd:75:1e:55:e8:4c:a8:c9:78:62:e8:a6:
46:0e:c6:82:17:2c:d2:61:49:45:4c:c1:02:c5:89:
51:2b:f9:50:94:3c:72:27:6f:14:f9:05:a0:c6:cf:
49:a2:9c:03:35:26:7e:de:23:de:57:72:d8:d9:d0:
e7:f1:12:bf:04:11:e9:0d:3b:43:7a:9c:81:f8:62:
8d:30:25:a7:4d:55:d5:1e:9f:f5:7a:57:d6:d5:a6:
74:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F1:7D:55:71:0A:05:E1:30:66:08:DA:5F:7F:22:C5:34:47:23:0E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
26:a8:ca:a2:d6:bf:b1:09:e2:32:ac:cd:8e:76:58:29:51:90:
a9:a2:ac:f6:34:34:a8:f1:16:fa:92:bd:df:b9:70:19:e5:74:
0a:c5:2f:84:c2:9f:be:f7:cb:aa:b4:33:74:2b:8b:7c:a9:ca:
58:fb:a9:03:ee:de:d0:9b:0d:80:83:7e:35:2a:c2:20:bf:51:
67:e4:d4:c1:5d:b3:78:c8:6a:af:95:d1:e4:e4:fb:e6:71:73:
22:dc:91:e3:7e:bb:c0:ad:eb:f5:b3:03:f0:5c:e8:c3:09:22:
de:b9:9d:f3:ca:3a:55:42:28:45:de:b1:df:5f:36:5b:77:d7:
fb:18:8f:a6:28:bc:a6:66:17:e8:d0:89:d3:59:47:b1:fd:84:
9c:63:dd:7a:6d:3c:50:a6:52:eb:6b:f1:bd:7f:e4:17:6f:f7:
a6:a4:8a:49:de:63:d4:cf:b6:1f:a5:91:18:04:20:9b:c5:b3:
9d:76:57:fc:e7:88:3c:93:20:73:9f:17:9d:21:6a:ad:be:fb:
a6:f0:86:1a:68:55:77:20:bf:dc:b2:dc:42:07:d7:15:7b:f8:
18:c0:3b:3f:df:d4:ce:fb:06:37:07:c5:c3:c3:3b:e2:84:d5:
5f:8b:4f:62:66:96:4d:22:9d:00:d5:a0:f9:94:26:f0:fa:96:
30:ef:0b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 03:43:13 2025 by rpki-client