Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa
File: 22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa (raw, json)
Hash identifier: 2cwnEF7lU86peVynPhHMFwF9nAab54OXpbRs0PVTydg=
Subject key identifier: 7C:8C:E0:73:94:AA:D1:D9:03:D4:C8:A5:7E:2C:E8:DA:2A:5F:34:A1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3895D1DA986C03D6354C7D299E2B9DF84ECA7859
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa
Signing time: Fri 11 Jul 2025 20:30:14 +0000
ROA not before: Fri 11 Jul 2025 20:30:14 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:95:d1:da:98:6c:03:d6:35:4c:7d:29:9e:2b:9d:f8:4e:ca:78:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:30:14 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=2c4ffa07b0be86a7ce556e8946b7a221055cce9210579f1f1a449f6ea7fb1965, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:01:ef:78:3b:5f:17:cb:18:5f:92:fb:43:
80:a1:38:d0:b0:57:c2:bf:75:3e:12:59:ed:b7:bc:
b0:27:08:40:f2:5e:b0:bd:61:b9:26:27:02:57:86:
f4:02:61:0a:47:8b:d6:55:0c:a7:92:9a:aa:41:87:
cf:1e:3b:a4:19:89:67:19:d6:e4:10:08:b2:5a:15:
95:e6:f9:24:f4:13:f4:b2:a0:7e:c4:37:b7:43:cd:
ff:4c:aa:b7:a9:f5:0e:f9:97:08:fa:57:eb:74:94:
5f:78:2c:b8:bc:bf:f0:8a:ed:44:32:30:b7:87:dc:
3d:e1:a7:7c:0f:72:c4:b9:82:01:ca:3b:37:11:10:
ec:7f:2a:b9:d5:6e:47:5c:d2:ea:dd:ea:94:3d:29:
e1:6a:4f:ec:d9:c3:39:16:5b:78:f2:2d:a2:84:ca:
cf:bd:aa:fb:c1:77:84:cd:0d:77:fe:ee:f9:e8:c4:
20:ce:5a:91:80:d8:13:0d:ea:52:32:34:6a:c8:dd:
61:b3:85:9a:f4:9c:be:3c:0f:1a:02:e8:f8:50:d0:
c9:59:27:78:11:fd:fe:ce:c8:53:31:01:68:a4:d3:
8f:ef:f5:f4:c6:02:e3:7d:7c:7b:c5:ca:60:81:5a:
e2:7f:84:5e:e1:17:58:95:7c:3d:66:2a:96:1b:21:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8C:E0:73:94:AA:D1:D9:03:D4:C8:A5:7E:2C:E8:DA:2A:5F:34:A1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:4000::/40
Signature Algorithm: sha256WithRSAEncryption
0d:d7:5d:e7:9c:cf:32:e0:c0:a1:03:3a:24:bc:39:e6:62:cf:
f0:29:85:0b:6d:35:70:39:db:79:db:d1:25:56:1f:7e:04:92:
87:35:d2:6b:3c:b8:6d:af:59:17:2a:bd:53:dc:dc:26:ac:1e:
e0:53:1c:84:09:c4:90:b8:1d:90:e1:6d:4c:64:f8:62:64:4b:
a8:4b:ac:e1:64:42:a9:54:e7:b1:f8:56:55:bf:4e:54:46:58:
42:56:e7:9a:07:7d:0b:87:5b:48:6f:bc:dc:ac:c6:22:8e:ae:
bd:21:3a:50:e2:96:ea:59:47:23:e1:f6:0d:95:12:a9:be:d1:
85:96:f5:a0:9a:45:aa:18:23:4d:bb:39:8d:37:5c:f8:5b:b6:
95:51:50:0c:56:08:77:1b:d5:3f:42:4a:49:d6:68:3f:14:40:
76:b5:35:46:2b:d9:1d:c4:f8:7f:50:bd:43:36:5d:5b:65:11:
f7:4e:dd:61:07:16:03:a3:46:12:55:2b:04:cc:21:d4:ae:fe:
5f:f0:8d:2b:1c:a4:a3:66:0e:72:08:d6:7c:67:ed:fc:01:17:
97:60:21:b3:89:d7:ae:21:f5:8e:46:41:34:a5:82:27:a9:3c:
2e:37:58:9a:98:08:b3:71:69:43:07:74:26:cb:37:bb:ac:c1:
69:00:15:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 03:51:07 2025 by rpki-client