Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2270e26b-c2b1-4cc3-800b-33825c0d723b.roa
File: 2270e26b-c2b1-4cc3-800b-33825c0d723b.roa (raw, json)
Hash identifier: 8gXkwzkvZbu/P6zn9MwReOZKmmlRREJkxHOCzZ/kEEk=
Subject key identifier: 25:DA:66:0B:AD:DA:9D:42:89:2A:7D:90:F0:97:A8:94:22:1D:88:01
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6F2329D68097B209A646278611790AA398F05484
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2270e26b-c2b1-4cc3-800b-33825c0d723b.roa
Signing time: Sat 12 Jul 2025 00:51:29 +0000
ROA not before: Sat 12 Jul 2025 00:51:29 +0000
ROA not after: Sat 16 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:23:29:d6:80:97:b2:09:a6:46:27:86:11:79:0a:a3:98:f0:54:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 12 00:51:29 2025 GMT
Not After : Aug 16 23:59:59 2025 GMT
Subject: serialNumber=e85f2b3d5dcaa1dc24e2169e21092f2229071f21ed8ce4d0fb09e7c23eef0ccd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:00:b0:46:a1:60:85:db:84:a3:3c:e7:78:
ef:ff:fd:77:b5:4f:f5:25:4c:d1:b4:d4:10:02:ab:
8e:39:0a:19:44:1c:1c:eb:fe:18:d1:19:d8:ed:22:
09:92:7a:f9:71:d3:bc:df:49:20:f5:58:5f:7b:cb:
6c:46:38:b9:6c:c5:b2:fa:4c:6a:ad:eb:0f:2e:ef:
6b:fb:c6:4f:cb:7c:b8:f5:45:55:a3:8f:cf:83:c1:
67:b4:29:03:27:3e:39:a6:d3:ad:21:41:62:66:00:
eb:9d:72:10:08:0f:1f:5f:87:e2:6e:53:04:7f:6c:
76:2b:82:26:ef:06:b0:21:9a:fe:27:37:65:89:f4:
33:7e:1c:cb:74:df:e2:40:b2:b1:63:7a:8b:b9:32:
2d:c4:c5:5e:ca:b0:c1:3b:d4:12:40:5a:86:7f:34:
dd:e7:21:ea:bf:f5:2c:97:0d:d9:38:b0:c1:c7:97:
85:e1:24:24:9f:79:12:e8:be:8a:26:58:43:9d:d9:
81:60:af:1c:23:ae:e2:18:45:08:2c:f9:b4:10:7b:
b3:32:ac:ab:26:cb:6a:8e:d6:4d:da:3b:68:e8:c9:
59:66:d3:13:43:43:ca:04:01:55:be:a2:e1:4e:08:
9c:c1:a9:95:71:d3:8e:e8:8c:d3:62:1d:66:0d:d6:
b4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DA:66:0B:AD:DA:9D:42:89:2A:7D:90:F0:97:A8:94:22:1D:88:01
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2270e26b-c2b1-4cc3-800b-33825c0d723b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:b000::/40
Signature Algorithm: sha256WithRSAEncryption
c4:94:23:d7:c1:3e:a6:65:e1:01:cc:ea:5c:fb:2e:af:a0:82:
03:d0:67:71:85:2c:d0:15:4e:d5:26:e2:00:d4:25:6e:67:52:
59:6b:7f:be:d1:ae:3b:b9:a9:a6:a1:0c:25:56:ef:09:1d:d9:
81:b7:6f:d9:96:dd:99:f3:31:ae:d4:da:9e:11:42:7c:8f:e9:
8b:44:02:2a:68:85:4e:ef:2f:d2:ea:fb:50:16:89:6d:0a:9f:
92:cb:38:f8:7f:4b:88:19:49:13:fc:f4:62:52:2d:b3:42:bf:
6e:77:34:6b:8a:23:91:2d:ac:30:d9:7e:61:5b:26:f9:3c:8f:
51:ae:df:f5:11:70:4c:d0:f8:26:c0:18:66:87:03:ec:e1:4a:
1d:1c:f7:17:b3:6c:29:cf:6d:73:24:28:60:61:86:78:f2:96:
8c:10:15:b6:88:89:ff:2f:26:92:08:fd:79:cd:5e:94:fd:05:
b2:7c:96:fd:8f:a0:51:39:a5:86:03:e9:56:d4:41:70:f1:a2:
bb:aa:02:4f:22:2b:ee:d5:0e:16:d0:f3:7d:6d:96:64:ef:1a:
e6:0d:5f:02:e5:96:68:f2:5f:d0:3e:d9:7c:da:0c:56:84:71:
ef:a3:a0:dc:a2:d5:db:19:a2:60:03:7f:7b:c6:a3:8c:4c:ea:
3f:59:95:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:51:44 2025 by rpki-client