Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa
File: 36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa (raw, json)
Hash identifier: 68PU6rLqOuMNlIkBNtugDy+KkO464OzW3X4Z3hOFpEU=
Subject key identifier: 41:61:D1:33:90:6F:1E:6E:66:17:21:68:CD:56:7E:F6:A2:67:49:1B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2E693643E4996CD3AF338D56D28E5BBDB5AD4C63
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa
Signing time: Fri 11 Jul 2025 19:20:39 +0000
ROA not before: Fri 11 Jul 2025 19:20:39 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:a020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:69:36:43:e4:99:6c:d3:af:33:8d:56:d2:8e:5b:bd:b5:ad:4c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:20:39 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=1f280227af61b6c57bd0138e8c2e838d9b212a86a3f6f0e085581af25a2fb654, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:47:c3:bf:b0:06:11:3c:b5:ba:26:2a:91:3e:
e3:1a:99:b5:6e:02:99:f6:f8:8a:85:c3:34:b0:80:
a1:99:d7:5c:9f:9c:3d:a5:d8:d9:8a:7e:5f:80:4c:
d5:27:8f:38:73:1c:ce:fe:b9:35:1c:c7:e4:32:9d:
e7:d3:9c:27:ef:a5:86:d9:36:66:ef:38:4f:fa:67:
f0:46:0f:fa:4e:89:ab:fb:18:7e:8d:5a:d7:4c:23:
92:8e:bd:e4:2d:18:17:b5:b8:3a:4c:5e:aa:ec:74:
8c:bd:da:b3:39:c7:9d:af:0f:96:6c:bc:87:0a:af:
48:4b:11:c1:78:70:13:af:53:9a:0d:66:90:47:38:
c8:db:0d:c9:6f:b4:dd:be:f6:cc:0f:a5:42:1a:0a:
1f:d9:74:b1:51:bc:63:d1:f4:04:22:b9:17:45:b0:
1f:6d:dd:18:71:3b:14:0d:bd:7e:fd:f0:52:42:12:
98:4f:2e:db:45:c4:5c:7e:22:a6:69:a6:4f:e1:fb:
f2:b1:d6:03:66:a2:5a:50:9d:f3:ba:a6:83:f0:69:
9d:34:43:12:18:8b:6d:b2:f1:a0:7b:65:05:af:42:
b6:b4:d0:cb:e8:73:44:48:81:22:6e:85:14:ab:46:
0f:a4:80:7a:9a:7d:af:e1:a4:0f:b3:63:11:c5:7b:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:61:D1:33:90:6F:1E:6E:66:17:21:68:CD:56:7E:F6:A2:67:49:1B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:a020::/48
Signature Algorithm: sha256WithRSAEncryption
06:c4:e0:3e:af:ec:5c:06:61:91:a4:8e:af:03:fc:0d:b6:45:
a0:ea:c4:21:20:15:0b:79:07:13:17:af:79:f2:7c:99:b7:e0:
a2:d1:13:de:23:5c:3d:37:e9:a6:c4:9c:a9:4d:bf:37:7c:96:
43:45:f1:a1:7e:aa:b4:a2:e3:2a:d2:bd:b5:32:00:c4:da:0a:
e9:5e:c6:2f:d3:3e:06:8d:75:80:5b:3f:bd:e2:57:9c:8a:bc:
4c:6c:70:ce:1d:ea:fa:f2:60:b8:d8:36:2d:31:b3:5d:02:0a:
e9:1b:3f:de:8e:5a:94:73:be:f2:1c:f1:87:cf:13:09:87:9e:
ea:44:e8:c2:53:04:46:6a:e5:fd:22:6d:db:cf:a9:1e:57:92:
11:d2:d7:69:bf:b7:70:43:0d:fd:64:1a:53:2c:f5:1e:cd:e7:
eb:21:01:41:cc:dc:bf:4b:5b:d4:78:11:a5:05:cc:ad:9a:39:
cb:57:26:3c:2f:da:5c:85:7e:0a:3f:34:3d:89:7a:b7:1c:40:
91:f3:b4:af:6a:99:e4:4a:80:58:7d:bc:fb:9b:19:cb:3d:42:
77:e4:88:a3:d2:be:a2:5a:02:91:4c:15:1f:57:23:71:f8:d6:
a6:6b:e6:b6:22:6f:0b:bc:9b:07:75:a3:f1:ff:82:19:a2:88:
1c:64:bb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 03:23:09 2025 by rpki-client