Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5387f3e7-ef20-46b2-8929-bf638dce97e1.roa
File: 5387f3e7-ef20-46b2-8929-bf638dce97e1.roa (raw, json)
Hash identifier: 7+M0lriK6uTmZBnqIN27OiLBuMdkkpBTG1JOx9obaqQ=
Subject key identifier: 0A:12:2E:94:3A:98:43:85:95:FF:58:F7:E9:6C:33:6A:72:0A:49:09
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 77F92537F5EADED7EF7A1C69AA7256A59712BF59
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5387f3e7-ef20-46b2-8929-bf638dce97e1.roa
Signing time: Fri 11 Jul 2025 19:01:15 +0000
ROA not before: Fri 11 Jul 2025 19:01:15 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:f9:25:37:f5:ea:de:d7:ef:7a:1c:69:aa:72:56:a5:97:12:bf:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:01:15 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=31a55bdc389c84ab3eb2e5f79e233fc1e37d17bdbd11eb1769e35af98018c728, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f6:9f:9d:fb:a9:b6:34:f4:ba:39:40:81:bd:
18:bf:1f:50:a1:9c:01:ef:ea:81:73:d9:eb:ab:6c:
de:98:4e:d7:b7:00:cb:f3:57:a6:37:ae:05:82:52:
7d:f5:fa:23:f6:ce:61:bb:c1:26:51:30:b4:fa:38:
d4:59:72:09:5e:d2:c8:0c:1d:01:1b:50:e7:12:84:
8e:14:4f:1a:50:a9:f5:ea:4d:59:96:55:86:3e:60:
d0:77:3b:e0:2c:9e:bd:88:aa:c3:c5:3a:76:59:ad:
dc:51:f9:32:da:fb:eb:85:21:9f:ed:05:da:12:51:
01:96:1d:95:2e:d5:d4:b9:a3:76:6a:61:fe:22:da:
71:45:c3:52:f4:5c:58:9c:58:c1:a1:43:8c:32:9a:
f4:a5:5d:91:5d:dd:a0:e5:c6:d6:73:4f:3f:5d:48:
a9:2b:20:14:8d:20:6e:75:71:09:22:bb:ba:44:10:
85:9c:42:7d:da:6e:7c:b7:77:d6:fe:15:af:c2:1c:
f9:99:73:5e:58:af:1b:e3:0b:07:e6:eb:34:8b:a8:
e8:d1:d4:95:b8:3c:c3:46:d1:16:a7:44:e9:d1:2c:
78:0b:9f:ab:3c:87:c1:29:b0:6e:d4:af:c4:2a:98:
b6:86:9d:64:7e:2f:f5:b6:72:70:ba:c1:ef:d6:72:
26:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:12:2E:94:3A:98:43:85:95:FF:58:F7:E9:6C:33:6A:72:0A:49:09
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5387f3e7-ef20-46b2-8929-bf638dce97e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:5000::/40
Signature Algorithm: sha256WithRSAEncryption
91:72:c6:70:d6:c7:a3:d3:25:82:66:4a:af:3c:fe:09:a7:b6:
78:c9:fb:04:9b:6f:f6:84:f1:9b:33:c7:3d:12:53:dc:72:64:
ce:3c:63:1d:82:2d:bf:1e:da:c3:27:81:58:d8:b1:17:ca:c6:
00:65:e8:05:4f:b3:45:75:fb:b7:fa:5a:32:b0:89:41:3f:4f:
ee:cb:b6:51:b3:7c:aa:0f:33:ee:e0:57:9f:6e:78:5d:42:64:
a0:8a:e1:2e:d7:55:96:11:44:6a:e7:bb:d4:8e:c0:03:bd:cf:
49:81:ab:3a:01:0c:f9:33:91:31:51:77:71:bb:41:d2:3a:88:
cb:9e:c3:d0:3f:62:9f:79:3b:ae:23:b8:f4:90:e3:ee:21:c6:
f1:c7:06:f0:dc:97:34:29:60:fc:6b:19:92:e0:80:ae:0b:8a:
07:79:80:da:d9:93:ed:49:b3:fc:83:c7:03:be:6c:c0:60:e2:
0c:e4:8e:60:21:fd:a4:04:9b:83:a1:3d:79:13:70:22:5d:0b:
01:c9:23:c3:fb:c3:89:21:f1:57:1f:4e:f3:7b:c9:78:b9:10:
5c:48:9f:52:88:7d:15:58:33:5f:b6:58:4f:89:af:b9:51:7b:
5f:aa:1e:03:12:8f:c9:4c:1d:4e:21:c5:f9:4b:40:f2:93:8d:
39:2a:16:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 22:24:16 2025 by rpki-client