Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/207860c2-8f39-42e7-9631-e06b6a545c7d.roa
File: 207860c2-8f39-42e7-9631-e06b6a545c7d.roa (raw, json)
Hash identifier: Ab+iwwnxaAZgOjU+FJkagnD7WzUyCx5HlF/LA+uXq1E=
Subject key identifier: 57:AA:E8:4E:E9:8A:C9:6E:D2:23:28:23:34:D7:9F:49:75:D4:20:41
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 137CA517712C2F1D3ECCE84359D1F7A353B8252E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/207860c2-8f39-42e7-9631-e06b6a545c7d.roa
Signing time: Fri 11 Jul 2025 19:00:18 +0000
ROA not before: Fri 11 Jul 2025 19:00:18 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:60c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:7c:a5:17:71:2c:2f:1d:3e:cc:e8:43:59:d1:f7:a3:53:b8:25:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:00:18 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=5eafc2b09fee49bcd927ba4d2fb05db4c9c6282a27c1d6f4eccc0508ae61d453, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:37:20:ef:da:ff:7b:c5:c2:a0:75:d2:a8:99:
36:c0:da:a8:cb:ad:15:bd:58:6a:d6:af:c5:d7:0a:
98:11:cf:2b:87:59:1e:a0:09:79:3b:6e:fd:69:5a:
d5:de:03:bf:29:45:f1:25:b0:8d:46:10:00:95:90:
7e:e8:2f:dc:70:78:07:cc:be:fe:3b:76:0b:85:25:
60:01:31:5d:01:d1:61:80:ec:2e:de:44:6f:94:88:
0e:49:3c:fd:12:70:ae:ba:f0:86:75:06:89:25:0c:
e7:03:ff:67:42:4f:e5:38:1a:e9:51:06:a5:fc:ea:
b3:bc:06:f4:0d:9b:ef:58:e2:85:5b:74:92:50:59:
6b:2d:8c:c9:ad:c8:54:37:ec:90:41:89:7b:99:28:
5d:aa:2e:b3:09:64:01:49:25:5c:cb:81:e6:20:24:
bc:f9:f2:a6:e1:a8:e3:1e:63:66:56:0e:57:e1:3f:
81:d5:a0:f0:1b:24:a9:fd:ee:8a:2f:83:6e:21:68:
3d:82:f6:56:65:61:e8:0a:a7:3f:cb:8e:aa:8b:18:
59:cc:e3:f1:cc:83:9b:fd:a8:d4:59:d5:aa:1c:6e:
57:8d:3f:ef:d3:a2:54:67:35:72:17:7e:93:36:79:
5a:f7:b1:bd:92:50:64:0d:26:bb:93:d9:0c:7d:02:
85:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AA:E8:4E:E9:8A:C9:6E:D2:23:28:23:34:D7:9F:49:75:D4:20:41
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/207860c2-8f39-42e7-9631-e06b6a545c7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
77:fb:72:32:8e:ee:59:66:6d:d7:b2:28:84:d8:d7:11:ca:69:
b3:da:ec:df:37:e3:52:5c:c5:22:a8:54:13:d5:6b:f1:e1:4d:
79:ff:d5:9c:33:fc:d0:69:a2:73:a5:f8:0b:2e:c5:81:15:06:
4e:10:8d:57:19:b5:ee:13:5f:e7:eb:7f:6b:6d:8c:04:ef:f1:
9a:70:fd:2a:51:65:2a:3c:e6:4f:79:0e:fe:75:71:af:59:f1:
f9:cb:e8:98:9a:e0:2c:a2:f2:9f:99:66:96:98:a7:c8:7e:bf:
5e:bf:00:48:f1:c3:88:4c:d8:c2:a2:38:f9:8e:75:04:c6:a3:
1d:33:89:df:1b:d3:24:2e:f4:88:89:83:ea:46:d9:da:07:78:
f2:60:71:f7:7f:ff:f5:e2:8b:92:13:c3:49:81:7c:71:e8:1b:
10:9a:5a:fd:e3:7f:e8:41:ef:a6:fc:6b:96:5b:a3:79:97:b0:
f8:36:96:0b:69:e2:2e:2c:56:19:18:0f:39:09:99:8d:2e:e0:
31:9d:bf:51:c5:7f:e8:10:b8:76:7a:4c:d3:50:70:6e:20:15:
87:f8:b4:d0:43:2c:43:4d:cb:a8:7f:6b:c9:e9:17:43:78:ec:
d6:3d:e7:59:e3:6c:77:ea:c6:60:ec:0d:be:80:e1:a1:21:43:
e6:85:2a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:35:05 2025 by rpki-client