Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/304afa07-08cf-4abd-b55e-949deeea1591.roa
File: 304afa07-08cf-4abd-b55e-949deeea1591.roa (raw, json)
Hash identifier: ujcdFQgR+r2fsgV9ePvHQw4BFkWJAqN2h0gsjCl97SU=
Subject key identifier: F0:45:B7:4D:30:F0:65:42:C7:EF:23:9C:15:C2:4F:D5:C9:7E:E2:0C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 31D024778C85C282A95E59477093C1AB4DE7FAFB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/304afa07-08cf-4abd-b55e-949deeea1591.roa
Signing time: Fri 04 Jul 2025 18:30:13 +0000
ROA not before: Fri 04 Jul 2025 18:30:13 +0000
ROA not after: Fri 08 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d0:24:77:8c:85:c2:82:a9:5e:59:47:70:93:c1:ab:4d:e7:fa:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 4 18:30:13 2025 GMT
Not After : Aug 8 23:59:59 2025 GMT
Subject: serialNumber=9db1e9ef55285775b8d64f67881177700bfef4af9b6440f656d3e88f2b5df82f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:8e:a3:ee:ca:3f:90:a9:d1:a4:27:fd:8e:
fa:85:40:0c:b2:31:33:e2:9a:9e:a9:58:f5:39:8d:
ff:6b:43:69:ad:09:49:c6:0f:7c:3e:b4:10:43:4b:
66:74:e3:af:1e:5e:72:65:f2:45:47:7e:ac:2b:20:
6e:d9:1b:00:29:5c:60:78:b1:ad:77:6c:3e:72:59:
58:28:81:f3:3a:43:d3:d4:d8:46:d0:c6:d1:2a:03:
06:a5:e7:a8:d3:42:88:33:aa:7a:e5:14:ae:31:56:
8f:23:90:a0:4f:83:6d:a7:97:47:ac:f7:27:14:ee:
b7:7f:da:cf:24:5e:d9:8e:25:58:11:3f:5f:4e:4d:
58:7d:eb:b2:00:c3:55:60:98:31:c3:a2:f4:49:c7:
02:f4:aa:20:0d:21:b1:ea:f9:16:9c:fb:a2:c3:f7:
cb:b8:9b:f4:f4:73:33:c3:a8:d1:0a:3e:5d:26:98:
09:13:21:9a:05:c1:ef:3f:93:bc:04:75:b6:3a:42:
14:c8:8c:aa:e5:9a:ba:29:95:67:b5:05:35:94:72:
79:52:54:ad:70:90:42:f9:2a:ef:51:85:c8:29:67:
92:fd:e5:2e:32:b4:0e:4c:1e:be:56:5d:e6:4a:d0:
51:ab:e7:3f:81:da:ce:2b:d7:02:89:3c:7e:77:a8:
7c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:45:B7:4D:30:F0:65:42:C7:EF:23:9C:15:C2:4F:D5:C9:7E:E2:0C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/304afa07-08cf-4abd-b55e-949deeea1591.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:5000::/40
Signature Algorithm: sha256WithRSAEncryption
93:ab:ed:e8:fb:4d:36:77:a5:43:d3:f9:d4:a1:f4:40:93:6b:
a5:a1:1c:cc:a6:14:64:3a:28:f6:d8:9a:d3:89:9a:e4:82:22:
3c:12:2d:e5:fa:5a:c4:c4:6d:58:79:6a:a5:a7:78:fb:65:bf:
05:fa:30:d9:82:18:27:8a:6d:99:14:17:c8:9b:5d:9d:e6:11:
ac:75:6f:48:6e:58:88:dc:31:3f:5a:cf:51:3b:5e:39:8a:eb:
42:d8:d6:04:f4:be:fd:c7:50:b6:80:44:01:f0:50:2d:55:b1:
3f:af:03:ff:1a:1c:01:04:3b:60:69:09:d3:10:92:24:bc:49:
38:5e:76:1c:d7:71:0a:cc:dd:36:72:6a:91:01:96:e3:c3:1d:
cb:80:fe:5f:d3:37:c8:95:d7:a3:71:cc:35:aa:cc:9d:0a:ce:
22:53:40:99:c7:7e:47:20:01:45:b8:40:fe:1c:cc:9f:09:a4:
36:25:a9:d7:ca:26:52:d2:55:09:1c:cf:ec:80:12:a9:8f:d8:
ff:44:8f:31:9b:71:e3:34:86:2f:ed:b9:64:4b:11:0a:5d:fa:
13:57:fb:75:c6:68:35:ef:7f:83:3c:93:7e:87:d8:9b:08:37:
dd:bc:ab:c3:e1:4b:2d:7c:a7:20:ce:ee:5e:8d:b7:cb:c2:02:
af:b7:2b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:41:41 2025 by rpki-client