Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42a2bbbc-4bfd-4172-8004-b90bf9d2de72.roa
File: 42a2bbbc-4bfd-4172-8004-b90bf9d2de72.roa (raw, json)
Hash identifier: 2ViTHDRb2zD7kNTFwkxWr/KnhaczbOI+T4WZv0IMmvc=
Subject key identifier: 2E:DD:D3:34:2B:4A:7E:05:B9:08:F0:D5:9B:3A:1D:74:7E:AA:28:B1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 06C8069A38B4D3872A896745BECBE1C23E81DF18
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42a2bbbc-4bfd-4172-8004-b90bf9d2de72.roa
Signing time: Fri 04 Jul 2025 18:30:06 +0000
ROA not before: Fri 04 Jul 2025 18:30:06 +0000
ROA not after: Fri 08 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:9000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:c8:06:9a:38:b4:d3:87:2a:89:67:45:be:cb:e1:c2:3e:81:df:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 4 18:30:06 2025 GMT
Not After : Aug 8 23:59:59 2025 GMT
Subject: serialNumber=7b983e3b1b25e8ce64f15906021ff6d762e3df58c69f9e68af8b542be27b1d64, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:ad:1b:d2:02:70:5e:d9:45:76:13:c1:05:
12:5c:9c:ca:16:80:2d:66:47:db:fa:68:7f:82:9e:
c6:fd:2f:26:3f:bb:90:14:ad:64:75:27:c7:74:2d:
a7:4a:4e:04:7b:c8:80:ed:80:1a:9d:34:dc:c4:60:
e2:67:10:65:e8:25:04:d8:e1:35:10:3b:cd:13:9b:
b9:ad:0a:e6:0d:c2:41:0d:83:dc:3b:97:ca:b1:f6:
38:4f:2f:ea:3b:85:25:cd:4e:b5:19:54:e0:9e:6b:
8f:d0:dd:db:e2:fc:c7:73:fe:b7:a4:41:c7:92:45:
c2:39:22:7e:5f:bb:1e:7e:de:49:fa:5d:ec:fe:ce:
cc:a7:e0:45:17:2f:56:ae:20:88:45:9c:79:20:8f:
8c:62:f4:5a:ea:46:b2:03:90:c4:18:06:97:19:6e:
33:95:86:54:52:55:91:24:b3:49:cc:35:22:a0:92:
cb:d9:19:05:26:7a:20:d1:4d:3e:55:9e:4b:e2:db:
00:f2:e5:62:47:16:e4:dd:50:d0:0d:55:79:fe:cb:
7f:68:03:ba:4c:3d:2c:de:61:e0:72:7c:81:45:b5:
32:41:67:09:84:41:da:66:91:1b:00:fc:fc:73:c0:
15:c6:92:3e:84:10:b2:61:83:15:62:d9:fe:cd:3b:
c0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DD:D3:34:2B:4A:7E:05:B9:08:F0:D5:9B:3A:1D:74:7E:AA:28:B1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42a2bbbc-4bfd-4172-8004-b90bf9d2de72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:9000::/48
Signature Algorithm: sha256WithRSAEncryption
6c:6b:5a:c8:d8:b5:f8:53:4d:09:bd:35:37:22:4c:3e:bf:98:
4f:53:9d:93:ba:51:85:cc:a6:2b:1e:17:45:a2:41:a6:21:2f:
dd:26:48:2f:84:b1:e0:5b:85:52:7f:77:89:87:63:8d:4b:68:
95:7d:ad:e3:1f:8c:1d:c0:a5:1d:06:d6:75:27:99:07:89:3b:
04:f2:87:f0:0b:68:79:b5:f3:a4:95:0d:ec:1b:9c:a8:34:52:
a5:cf:77:d3:24:4f:5f:3f:33:7b:62:07:da:42:63:66:5b:b5:
cc:b0:d6:bd:9a:7c:90:ac:70:4b:51:9c:76:35:79:4c:5d:5f:
72:b5:e6:db:93:6a:2e:39:6c:c9:9b:9c:37:7a:a4:f7:28:e9:
fd:d4:46:c6:8c:cd:d1:c5:17:16:c8:c3:31:27:fe:86:a0:d3:
7e:7e:6b:fd:37:bb:60:f0:84:44:26:d4:4b:ba:b2:b1:9e:46:
b8:0f:93:4d:6a:e8:63:86:23:2f:44:84:61:17:19:a0:5d:3c:
46:cf:09:bd:80:7e:66:bb:0e:3c:1e:fd:e9:7d:34:f3:e4:ba:
fc:a2:99:1f:5f:53:d9:13:52:72:0b:e7:e3:a5:bc:01:f7:e8:
1c:c5:67:1a:33:94:92:8f:4a:0e:d5:39:3b:51:97:5f:1d:4f:
9e:2b:cd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 03:48:02 2025 by rpki-client