Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/404ef1af-e052-41b8-a0bf-70e3fa0aa052.roa
File: 404ef1af-e052-41b8-a0bf-70e3fa0aa052.roa (raw, json)
Hash identifier: MD9yx/XwT2CVeLQHBnIhtRiztzDcSaCAb/oTkvsSbYE=
Subject key identifier: 44:A2:06:02:01:B1:EE:67:CB:9F:04:B7:63:90:1C:B2:7B:18:60:28
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2094A60F112F0A959FA19548759A01341003714B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/404ef1af-e052-41b8-a0bf-70e3fa0aa052.roa
Signing time: Fri 11 Jul 2025 20:50:59 +0000
ROA not before: Fri 11 Jul 2025 20:50:59 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d017::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:94:a6:0f:11:2f:0a:95:9f:a1:95:48:75:9a:01:34:10:03:71:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:50:59 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=5e7bde0e9d6dfa1ea3119abaeea4d767aac45049b37055f5783b042531976ac9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:52:df:d8:63:8f:69:f3:93:95:6f:d6:68:f6:
55:7d:cc:cc:1b:ac:59:b7:20:3b:bd:51:ae:24:fa:
de:ae:03:29:43:c6:28:aa:7b:98:d5:96:b8:f3:4e:
d6:c1:40:c1:07:74:5c:35:1a:5f:aa:cc:3f:03:9c:
1b:50:03:41:df:2e:a1:07:51:73:dc:a9:55:2a:96:
85:89:66:98:41:b2:a2:8a:29:e2:53:cb:73:55:89:
06:c3:19:57:f7:8d:52:07:4b:4f:07:ed:f7:1f:43:
a5:56:cd:3e:b6:31:3e:29:98:8a:29:86:73:30:f7:
ce:94:5e:47:68:0d:2b:81:aa:34:ab:a9:9b:85:1f:
21:05:93:ff:0a:e9:61:f1:6b:a3:67:ca:eb:60:18:
b8:ef:3a:e1:c1:6d:ae:ad:45:f1:ba:45:ac:85:47:
f3:df:7e:da:c0:35:90:3b:52:93:ba:fa:b9:45:77:
1b:72:b2:6a:b1:c0:69:39:a4:e6:4b:ff:37:32:ea:
e9:fb:db:67:52:45:12:d4:c9:fa:6c:83:ca:ea:a1:
2e:96:a6:99:8d:4e:85:37:81:13:1a:7b:69:5a:ed:
34:81:d3:99:21:02:af:ce:b0:21:cf:2a:37:6f:91:
39:8b:11:e2:5c:76:21:fc:54:8a:cc:af:cb:4f:57:
87:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A2:06:02:01:B1:EE:67:CB:9F:04:B7:63:90:1C:B2:7B:18:60:28
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/404ef1af-e052-41b8-a0bf-70e3fa0aa052.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d017::/36
Signature Algorithm: sha256WithRSAEncryption
1c:31:ba:fc:b7:91:09:69:18:86:2e:91:2e:14:fa:f6:6d:58:
3a:06:97:ed:0b:15:45:a0:45:04:a4:ca:b5:7d:04:e5:39:69:
44:ad:a4:b1:94:7e:2d:6e:0d:ee:39:15:52:87:52:55:27:18:
6e:02:fe:40:b2:c8:24:4c:03:b6:34:96:26:dd:b5:f5:a3:3c:
61:f0:9d:6f:9f:53:f6:4a:dc:75:e1:9d:52:ec:ab:73:5e:35:
6e:dc:76:45:20:ff:59:ed:5b:38:ae:6b:2a:86:25:d9:a6:a0:
5f:31:63:17:da:ac:4d:b9:ce:2d:d1:67:9a:7f:2a:cf:f0:d0:
ed:04:18:50:4a:be:73:50:65:3f:42:11:91:d6:9c:24:9d:81:
7b:4f:1a:f3:70:2d:ee:8b:47:87:48:68:e2:89:83:b3:12:7d:
49:e2:84:ef:22:b0:cb:30:d6:7f:2c:fe:43:51:93:0d:22:9a:
7f:63:2c:ad:f8:13:75:a6:02:06:c5:0f:1c:7a:55:40:b2:69:
f5:89:91:2d:83:d6:46:95:ff:f5:13:37:03:de:80:7b:b6:6a:
96:d3:62:18:c1:a6:81:77:e5:98:9e:16:cc:91:4d:da:9b:52:
91:34:6a:35:d4:2b:16:d3:73:ad:cb:4c:52:7c:2d:f7:31:2a:
28:ad:f0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:51:44 2025 by rpki-client