Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42ebcf25-b35b-4dbc-bae2-bee0e176b454.roa
File: 42ebcf25-b35b-4dbc-bae2-bee0e176b454.roa (raw, json)
Hash identifier: j+t96aJ9s+boMAz7KvndMk8mGjh2jQNYOyEIShT5WzI=
Subject key identifier: B6:D4:16:8D:9A:62:81:EE:74:C0:E7:93:DE:62:06:0B:A9:15:E3:57
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 67EB8C9E1A05F6488F3CF77F2850B2BABA65E947
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42ebcf25-b35b-4dbc-bae2-bee0e176b454.roa
Signing time: Mon 07 Jul 2025 18:20:19 +0000
ROA not before: Mon 07 Jul 2025 18:20:19 +0000
ROA not after: Mon 11 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:840::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:eb:8c:9e:1a:05:f6:48:8f:3c:f7:7f:28:50:b2:ba:ba:65:e9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 7 18:20:19 2025 GMT
Not After : Aug 11 23:59:59 2025 GMT
Subject: serialNumber=a58955667ea368a8b2730f84a09cf706006732f5bde424d5664c0edec9e16379, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a0:6c:72:df:0a:04:c8:35:fa:49:e2:d7:36:
be:a0:65:c2:a5:b1:83:4a:53:2f:3e:48:01:3e:5b:
b3:68:c5:75:af:c8:f0:2b:49:ea:40:f3:4c:b2:3c:
ee:1c:f7:7b:ea:c8:91:07:3b:fe:78:6c:27:d3:dd:
f8:aa:c2:d8:39:3b:44:29:2b:c9:4b:d5:d0:0e:a4:
24:67:be:cf:d6:42:3c:97:64:90:9a:02:b8:d3:8c:
8e:96:a4:a5:9a:c7:47:b0:aa:db:69:c4:36:e5:80:
a4:36:d1:81:35:f2:24:a4:f8:9f:b2:98:15:25:42:
ea:b9:07:ab:65:39:75:7f:53:52:e0:c5:dc:4e:5d:
78:05:a7:13:03:77:0d:2c:12:1e:1b:8e:07:8e:b8:
58:a7:61:b9:d1:16:74:96:4a:cb:86:d2:ee:f8:2a:
84:d3:a9:9e:cd:8f:7b:1b:b4:aa:6b:8a:d4:1e:f8:
49:d8:38:d9:47:d6:da:9d:2b:2d:ad:59:70:5a:5d:
3a:5a:b8:31:53:a6:4a:63:7e:7a:fb:8e:2f:27:e2:
9b:60:44:d3:e4:63:8c:d7:09:82:27:1b:8c:5e:92:
19:4b:d4:2b:ee:52:5e:48:03:cb:21:1e:29:2f:c7:
9b:4b:42:32:bd:56:2c:d3:8d:f7:40:98:ed:78:0a:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D4:16:8D:9A:62:81:EE:74:C0:E7:93:DE:62:06:0B:A9:15:E3:57
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42ebcf25-b35b-4dbc-bae2-bee0e176b454.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:840::/46
Signature Algorithm: sha256WithRSAEncryption
a3:b1:0d:14:f5:b6:95:e6:e5:bc:e9:b9:b1:a4:92:12:6d:eb:
be:3d:f8:41:80:57:61:12:2b:9b:50:4d:61:c7:e7:40:c0:93:
4f:23:e1:38:27:c1:04:dc:7e:e7:c8:ef:92:35:0d:46:62:56:
f5:e6:19:95:ec:5b:cd:3c:1c:4a:c3:90:67:18:2e:7f:b1:43:
12:a0:e0:ce:78:e5:d7:46:29:d2:dc:51:fc:ac:d5:fb:46:1e:
85:19:5e:0b:13:49:85:59:20:d0:c1:db:33:a0:54:06:ac:62:
1f:0e:8f:2e:a3:7d:21:f9:a6:d5:f8:be:56:84:05:d7:58:9e:
aa:a7:ce:ae:9c:31:ea:e2:2d:a0:31:02:31:4a:34:f8:d4:0b:
76:e4:fa:1e:40:38:18:94:e6:b2:b1:bf:28:ca:c2:a1:0e:41:
90:2e:b2:ab:fe:67:34:15:84:88:fc:5e:43:6a:a7:3e:09:2c:
05:12:cd:e3:c2:e7:f1:be:d2:bf:95:6f:c6:39:54:b0:a7:cf:
a6:1a:d2:0f:fc:0e:9e:c2:9b:4e:7d:52:5b:4b:e8:62:44:35:
ed:0d:3c:f2:3a:5a:e7:a1:e5:6b:c9:68:cc:93:cd:63:eb:ab:
4a:ba:8a:0f:8e:4b:16:af:b0:e4:8d:c3:4e:09:15:b8:77:38:
95:6f:da:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:59:14 2025 by rpki-client