Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27140a0d-612c-4da4-a60a-55c28faff6fe.roa
File: 27140a0d-612c-4da4-a60a-55c28faff6fe.roa (raw, json)
Hash identifier: F3+EF+zeaMHijxEvzyEBRiM70bLvkaSMTRAJKMGxNGs=
Subject key identifier: CD:B6:F1:00:3F:D4:90:10:3F:59:86:03:DB:E6:5B:DC:E9:60:28:E0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2F58213081A09237B89AEA8DCAA26A7B6AD304CF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27140a0d-612c-4da4-a60a-55c28faff6fe.roa
Signing time: Sat 12 Jul 2025 00:50:19 +0000
ROA not before: Sat 12 Jul 2025 00:50:19 +0000
ROA not after: Sat 16 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:58:21:30:81:a0:92:37:b8:9a:ea:8d:ca:a2:6a:7b:6a:d3:04:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 12 00:50:19 2025 GMT
Not After : Aug 16 23:59:59 2025 GMT
Subject: serialNumber=2345ea9f66b63721b09a043e44d36330ed449f9ef20232324ef3bc1292cbf5de, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:60:c5:af:b0:e3:54:88:85:dc:32:48:78:
f7:23:5a:f3:33:71:fa:47:9b:3f:3f:63:61:4f:af:
c5:ce:91:da:68:b2:41:7d:30:e6:93:61:14:69:f8:
15:dc:a0:6f:0a:8f:7d:36:28:ca:be:3c:bb:ba:c2:
71:71:4c:e1:89:13:1c:cc:60:da:2d:f1:ec:d2:e6:
73:48:7a:59:74:f2:5a:54:1a:71:6c:38:ad:3a:fc:
2f:8f:9a:77:c0:47:fb:31:79:af:5e:1b:72:26:c8:
fa:e9:50:4a:81:03:95:52:2a:bf:fc:9a:1d:5b:65:
36:93:b5:75:3e:13:71:01:c2:19:52:6d:5e:79:7f:
bd:90:9d:be:a8:5a:3c:5c:43:b5:cf:e5:b7:69:10:
97:61:08:7e:5f:ec:ff:b7:69:3f:4a:4a:b9:16:33:
6f:87:da:8c:cf:23:09:8f:7b:f5:c3:70:ca:88:46:
2f:ec:20:f1:c0:2b:29:83:e2:64:f8:53:7c:e1:05:
4f:07:89:8c:5c:33:d0:04:7c:2e:bf:c8:66:ad:35:
2c:9d:33:8a:4f:ef:16:ba:2f:99:29:61:63:1a:69:
2e:5a:f3:4e:60:6f:ed:f8:d9:7a:ec:1b:56:4d:03:
10:12:3a:d6:d7:d1:17:31:b6:9e:40:71:a6:7c:b7:
52:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B6:F1:00:3F:D4:90:10:3F:59:86:03:DB:E6:5B:DC:E9:60:28:E0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27140a0d-612c-4da4-a60a-55c28faff6fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:5000::/40
Signature Algorithm: sha256WithRSAEncryption
9b:a0:f2:44:18:36:d0:65:f4:0b:1b:92:40:db:02:bc:5b:93:
69:e4:8c:b0:a3:3e:1d:31:f2:f5:6d:9b:07:82:41:43:db:a6:
8c:aa:c7:4a:b7:90:70:0c:5e:de:f6:f5:75:48:4c:50:fb:09:
37:fb:3c:03:02:dc:65:d3:af:e7:26:4c:5d:12:d9:33:1b:0f:
e9:36:21:49:a5:c0:e9:e9:4c:b4:54:ce:64:9b:8e:f1:51:7c:
f9:09:39:14:17:c5:f9:52:5d:dd:16:53:78:2a:fb:ca:4b:15:
d8:d0:34:4f:96:c8:62:6b:cf:c7:e6:86:f8:6a:c7:70:04:99:
29:ba:9e:d5:84:d4:d2:3a:aa:9c:6e:6e:fe:c0:c7:ba:86:93:
25:99:30:a3:99:3c:cb:57:96:1a:74:52:4f:76:53:f4:40:9c:
70:0c:ce:02:99:25:fc:99:e4:9a:a4:9b:d0:32:dc:bc:8d:08:
38:b3:39:20:20:3d:dc:ca:93:82:d6:f8:73:b9:82:0b:15:95:
6c:03:54:0d:d7:38:d1:d7:98:d7:be:1d:ca:6c:ad:fd:ff:53:
90:44:4f:8f:5b:50:44:81:1f:5c:48:77:f0:da:66:3c:b7:ac:
50:65:a1:30:6b:51:3c:47:5a:7a:23:37:44:07:aa:ac:77:15:
5c:23:e7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:36:23 2025 by rpki-client