Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b520f2f-7fc0-41af-8c53-ec0675aa83d0.roa
File: 4b520f2f-7fc0-41af-8c53-ec0675aa83d0.roa (raw, json)
Hash identifier: 7qb+DQVf4gw/vACLDjO/2A2VFLMIK10Jlw4nWWb3QAU=
Subject key identifier: C6:53:98:DD:DD:E4:BD:68:4B:4B:A3:90:03:4E:A9:05:09:C9:73:E6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2935BD6190EE557153D0E1A3567F8EB68C0E49A6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b520f2f-7fc0-41af-8c53-ec0675aa83d0.roa
Signing time: Fri 11 Jul 2025 20:11:40 +0000
ROA not before: Fri 11 Jul 2025 20:11:40 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:35:bd:61:90:ee:55:71:53:d0:e1:a3:56:7f:8e:b6:8c:0e:49:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:11:40 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=f0d9e129389215b9e67fe26c6c400cb392ff59bc3369cd1e581b202940586b75, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:02:f6:05:d6:fa:a6:52:53:44:9d:70:92:
cc:c1:b2:f2:74:4b:a9:a7:41:9f:ae:f0:72:4a:8b:
ac:bb:8b:13:89:53:d1:3e:01:ec:78:bc:8d:b5:11:
41:be:ed:3e:9e:cc:8d:e2:6d:e5:7c:59:33:67:21:
35:a3:3d:25:ae:ec:62:36:de:e0:ce:c4:f1:ad:55:
51:85:33:0e:cd:c5:95:27:21:f4:e9:9a:6e:ce:ae:
99:62:e8:0e:2a:fa:c4:0e:76:e7:cf:c8:74:12:e3:
0d:a1:ce:ac:72:cf:c8:88:5f:8f:e4:bc:21:7f:6f:
38:6e:7b:df:b7:cd:aa:64:56:43:91:34:cd:43:e9:
99:88:b2:0b:6d:c1:f4:68:f1:33:de:30:5e:d0:fe:
cd:ea:39:c7:4a:30:ed:71:f9:42:cf:d2:96:84:b5:
3e:21:72:5b:e3:93:82:8e:01:cb:8b:ef:45:68:41:
e0:43:08:6d:ea:fe:1f:45:bd:cb:6c:a7:eb:f6:4a:
d3:fd:5f:e8:06:d9:6e:57:45:50:25:2d:6c:de:13:
49:75:c5:b5:94:7d:27:e8:86:90:0f:ee:90:03:79:
2c:42:47:8c:7b:75:c2:fc:5a:40:f4:c9:a8:02:ed:
8a:bc:ef:50:1d:bc:3b:22:12:47:a3:d5:57:5e:69:
5b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:53:98:DD:DD:E4:BD:68:4B:4B:A3:90:03:4E:A9:05:09:C9:73:E6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b520f2f-7fc0-41af-8c53-ec0675aa83d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:e000::/40
Signature Algorithm: sha256WithRSAEncryption
59:8f:e7:45:bf:c4:42:f9:33:2f:93:a1:51:90:1b:f1:c7:1b:
a0:ce:48:21:f8:9b:da:f8:ce:7d:20:2d:81:8c:be:dc:50:61:
f5:b3:43:b7:41:31:71:d7:8a:bd:ae:e5:9d:7d:7c:ce:bc:21:
ca:32:bc:67:fc:ee:0c:ef:f8:7f:9d:89:a9:e1:07:3f:c8:bd:
3c:b2:ef:fa:f8:43:33:0c:8e:4f:d0:04:57:7d:86:43:b0:37:
39:6d:f0:22:c3:df:ba:d3:f1:b7:76:08:03:b6:23:fc:77:4b:
99:73:e8:ca:d7:f6:94:63:28:f6:07:ad:60:f0:29:e1:5e:35:
0f:57:d3:40:b5:7a:3b:66:dc:c1:21:21:fe:c6:65:e9:4b:ad:
d4:a9:8f:99:08:16:e5:0d:b5:e0:3c:f4:12:0a:45:67:68:8a:
0c:43:74:aa:b6:e1:7d:b9:0e:78:1c:ba:d7:18:4d:f9:78:f9:
6a:bc:e5:08:36:b1:58:c6:8e:f4:e1:de:6e:94:69:97:11:a6:
0a:d1:cf:b2:9f:95:9b:a8:5f:f8:7f:00:40:c3:95:a4:5d:fc:
91:e0:87:30:4d:5d:66:bd:fb:d1:d9:f2:eb:33:01:3b:f6:a9:
be:f1:c9:fc:26:ad:f7:bc:5e:da:aa:30:d6:0c:8a:49:dd:89:
3f:40:9f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 00:00:16 2025 by rpki-client