Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a2984e-942a-4280-ac0b-904c9860af2f.roa
File: 19a2984e-942a-4280-ac0b-904c9860af2f.roa (raw, json)
Hash identifier: sKGRwuJ5XkTHrYg/6CAHOhNRb8ab/C/+9QLdvPaVXY8=
Subject key identifier: 86:10:C4:F1:57:F2:F8:36:2A:AC:8A:7A:60:5A:E7:6F:56:1D:EF:2F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 36AD2734678588745E820D9EDEC2891055FEDDDC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a2984e-942a-4280-ac0b-904c9860af2f.roa
Signing time: Fri 11 Jul 2025 19:01:34 +0000
ROA not before: Fri 11 Jul 2025 19:01:34 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ad:27:34:67:85:88:74:5e:82:0d:9e:de:c2:89:10:55:fe:dd:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:01:34 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=8a9db126216d4b545e64c107070b5db051232b05f94a34333a4284c3ff5b7c49, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:93:ca:ea:36:4f:31:ac:b3:f8:f9:67:b6:73:
46:d7:0a:db:07:cf:70:a6:ce:ab:17:25:80:77:b6:
8c:7e:4a:ed:a3:50:80:6b:44:5d:3e:19:a4:48:30:
be:dc:ec:9c:98:01:bd:28:f2:4a:03:60:83:e9:c4:
70:94:03:cb:f5:8a:12:dd:94:d9:57:39:35:c5:f5:
47:52:87:d1:32:fd:df:9b:6a:b2:ce:c6:0a:2e:a8:
5c:d5:27:be:0f:16:12:6a:6f:2f:a2:90:a9:40:94:
ed:75:85:c7:e2:b0:81:af:85:40:97:b8:99:dd:fd:
2b:68:77:3a:21:2e:7e:a6:c8:20:17:b2:d5:0d:d7:
02:0d:a6:eb:9e:3f:f1:25:ea:bd:cd:81:e3:ae:d2:
95:86:aa:b4:40:3f:e3:42:0b:25:21:24:54:24:81:
87:78:47:05:e9:fc:b2:77:e0:b1:da:9c:48:b1:03:
75:41:56:e2:9a:62:7d:56:c8:d5:8b:7e:69:92:d2:
6e:4e:a7:ad:12:02:00:0c:fb:d1:0d:51:92:a0:d6:
b1:fc:32:89:69:8a:f9:90:7e:99:0e:42:5b:a2:52:
d6:66:b2:78:f7:59:bf:1b:e6:a2:c2:46:ce:e2:f0:
6b:d1:ae:2f:de:ca:c9:c3:13:80:a1:cf:a6:e0:ad:
fa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:10:C4:F1:57:F2:F8:36:2A:AC:8A:7A:60:5A:E7:6F:56:1D:EF:2F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a2984e-942a-4280-ac0b-904c9860af2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8020::/48
Signature Algorithm: sha256WithRSAEncryption
50:aa:cd:0c:36:f9:52:81:03:37:2e:56:6e:22:47:e5:cb:f5:
2b:1e:bd:e8:10:8a:be:f2:f1:20:a9:0e:95:98:0c:26:19:0a:
2a:79:61:6a:fa:54:a8:da:bf:e7:03:1e:ba:7b:1e:50:1a:98:
40:9e:9c:6d:fd:c1:b3:ea:53:d4:da:28:48:14:e6:21:0a:e3:
4e:6b:8d:6b:0c:31:02:88:0b:38:2c:bc:31:65:2d:b7:9e:90:
42:b2:b9:80:9e:ea:b2:83:01:5e:04:66:a9:68:e8:b2:0a:f4:
61:0f:5b:d6:99:6b:5e:54:f9:21:e6:0d:d2:4b:aa:a5:98:30:
03:e2:75:8e:7b:16:66:1b:e3:45:4f:c3:2d:0f:57:79:80:10:
71:61:51:06:72:1e:56:49:48:9a:86:f1:9f:0b:82:f5:04:aa:
96:6c:2f:07:ea:48:7f:9e:99:16:53:2d:8e:88:65:ee:50:a6:
a6:6f:65:b1:ce:ea:80:d7:ea:8b:2c:33:e7:b6:11:33:de:aa:
b4:d0:2f:ea:26:2b:ef:13:eb:4e:a8:f9:30:4d:9e:76:da:45:
7a:7b:e7:7d:79:19:9e:56:e3:b0:d5:f6:3a:9a:89:5b:d5:95:
4e:00:0c:95:8e:a5:47:5f:95:66:e8:e0:49:00:5b:1a:9f:28:
9c:c2:cb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 22:22:13 2025 by rpki-client