Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/50253a85-74b2-4a74-ab18-15a98f3496b2.roa
File: 50253a85-74b2-4a74-ab18-15a98f3496b2.roa (raw, json)
Hash identifier: FkAqF7YocLFLwAtZBeTR5lz5RDKW04hGTt4ltAHu0r4=
Subject key identifier: 78:30:5E:BE:37:10:26:CD:05:BB:42:DF:A7:AE:B3:C8:5C:7F:99:C2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 04CE9E59501577045968A8DE88127C059BBFDB04
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/50253a85-74b2-4a74-ab18-15a98f3496b2.roa
Signing time: Fri 11 Jul 2025 20:21:45 +0000
ROA not before: Fri 11 Jul 2025 20:21:45 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ce:9e:59:50:15:77:04:59:68:a8:de:88:12:7c:05:9b:bf:db:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:21:45 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=05bf85dd4d83dc1fe6338b9b99920456042185e49e027944ff58d33e1d778baf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:aa:69:5c:83:02:2d:d7:23:8c:82:62:bf:
4d:d5:ec:ba:48:4e:3d:7e:cf:84:34:a9:e9:a9:71:
8f:49:cf:22:49:1a:e8:e9:4b:ce:a0:56:f4:17:64:
96:33:ed:ee:25:11:cc:13:49:e0:d4:44:b3:b3:4a:
0f:61:b6:48:0b:cb:ea:9d:2c:cb:77:42:de:ef:a6:
ea:68:bc:cd:26:b4:e2:b4:89:b3:0a:c2:76:99:bc:
71:c2:d2:9b:69:1d:76:28:11:c9:95:3e:b5:57:9e:
ca:fa:ac:ee:0b:37:86:2e:99:d5:d0:2e:ed:85:88:
92:34:64:af:e0:0f:70:77:2f:eb:1d:c6:ed:0f:ca:
77:cb:99:11:07:f6:7a:3d:f9:88:54:bf:53:96:7b:
39:c4:6d:67:90:01:ca:c3:97:06:c1:12:54:76:10:
3a:51:95:0f:8f:fd:b8:c1:a2:9f:71:fa:ef:67:42:
e6:20:84:e7:91:12:3d:a4:0b:e0:93:dc:ec:79:b7:
35:67:f9:cb:98:87:25:65:dc:8b:a5:90:87:5a:eb:
34:cf:ff:68:7a:9f:76:22:a1:06:33:fd:fb:fc:17:
6d:96:07:51:94:e0:36:88:01:09:b9:96:f5:de:88:
24:74:5d:b7:d4:f5:cb:c4:1b:c7:5d:db:70:46:27:
7c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:30:5E:BE:37:10:26:CD:05:BB:42:DF:A7:AE:B3:C8:5C:7F:99:C2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/50253a85-74b2-4a74-ab18-15a98f3496b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:8000::/40
Signature Algorithm: sha256WithRSAEncryption
ae:c1:b4:9b:03:d6:61:fa:58:89:89:c9:ee:d0:c5:e6:50:62:
d2:98:9b:de:20:e3:06:a7:a9:90:1c:f1:b0:07:36:3b:4e:1b:
01:79:69:64:e2:23:b4:5b:f5:36:16:43:64:9b:f4:4e:59:fb:
75:08:e6:0e:3d:6d:e9:ab:c3:e9:b5:97:6e:4d:b2:c1:b3:c8:
21:70:05:43:54:23:e1:aa:49:a9:18:9b:59:0d:3d:6a:24:7d:
1d:78:ac:ee:06:bd:b6:58:3b:45:43:76:d0:0b:de:9d:17:e2:
bb:27:72:e0:68:a7:d5:04:65:cc:02:56:10:38:50:2c:19:9d:
cd:e6:2a:de:49:94:ec:0a:44:63:a8:bd:8a:53:29:68:7f:1e:
08:b6:be:d8:d2:3d:26:9d:19:dc:4b:bb:35:12:e5:62:9b:a7:
d5:71:13:15:d0:88:58:96:d1:27:c2:ad:d1:98:fc:15:06:29:
c1:dc:e0:98:92:d5:e1:8a:e2:ab:34:02:f3:c8:96:f6:ae:06:
9d:9a:ab:2d:e8:20:e4:ce:3c:5c:be:82:3c:68:d2:20:bc:23:
68:f9:88:2f:57:24:9b:0f:74:84:2a:62:78:c9:b3:e8:e8:73:
94:43:26:83:a4:64:c6:1a:81:4d:fd:2c:b9:16:d0:dd:ff:02:
bc:cb:e5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:43:46 2025 by rpki-client