Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5f28c807-572d-4641-be39-53109963f4c3.roa
File: 5f28c807-572d-4641-be39-53109963f4c3.roa (raw, json)
Hash identifier: xjREVVkCcaI1bTmzRXuPVRKW2afaJeJA3bYPbGnt80c=
Subject key identifier: 5A:E8:EC:92:63:7D:C6:09:E7:02:F3:7A:7B:56:15:51:57:D2:EB:D6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 14BFAA053F4386F51519916CA3078118D288C595
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5f28c807-572d-4641-be39-53109963f4c3.roa
Signing time: Fri 11 Jul 2025 20:00:54 +0000
ROA not before: Fri 11 Jul 2025 20:00:54 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:bf:aa:05:3f:43:86:f5:15:19:91:6c:a3:07:81:18:d2:88:c5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:00:54 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=0bd950fb4422d3f3bc2893f985dcc093bb5906d909ca3e0dda463ac918c3386f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:8c:4c:e8:d7:a7:31:87:64:13:2c:b7:a9:
9e:65:4a:d6:54:ad:5b:31:68:38:0f:c1:ad:ea:02:
09:74:a1:1a:a5:28:83:58:8f:9d:59:7f:33:a0:b3:
b4:95:74:f8:04:81:2e:fd:f7:1d:6a:65:50:0c:e6:
67:e0:7d:fd:dd:92:46:09:26:92:8f:f1:ee:77:4a:
18:32:78:59:e3:5e:03:17:51:25:2b:90:87:d1:de:
97:ca:ca:25:70:db:8e:c7:5d:d7:91:7f:de:a2:6c:
0d:51:72:f9:7e:7d:ca:18:8c:68:ac:91:c1:ef:af:
29:9f:48:47:91:9c:b4:72:10:c5:41:16:7b:df:f5:
b2:7d:44:7d:be:93:e1:93:5c:da:59:f3:44:28:46:
eb:64:a7:71:73:28:df:5f:0a:84:6b:fe:3b:c8:2c:
ea:50:c2:5c:16:f0:c3:6f:3f:a3:1a:49:82:6b:af:
6b:5f:bb:1f:94:98:68:9f:cc:37:b9:90:be:b3:33:
ce:18:b9:d8:78:94:b2:05:63:10:91:67:9e:61:0c:
a3:60:04:e8:7a:89:a1:6b:6c:a7:f5:dd:8c:44:96:
dd:f1:23:de:82:99:97:8a:5f:05:0e:10:2b:18:85:
a1:70:d5:3c:d9:d3:fc:e6:f1:ce:48:3c:47:4f:4d:
0c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E8:EC:92:63:7D:C6:09:E7:02:F3:7A:7B:56:15:51:57:D2:EB:D6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5f28c807-572d-4641-be39-53109963f4c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:a000::/40
Signature Algorithm: sha256WithRSAEncryption
b4:37:48:60:12:b7:49:1d:40:95:27:55:65:25:5e:04:ce:06:
79:d1:e6:d3:07:8b:f4:84:62:17:7f:f9:fc:b6:05:ea:a8:26:
ad:25:3a:c8:ce:ed:bf:e7:a2:cd:9b:34:5a:ab:ef:e2:68:d0:
95:b6:89:9b:06:81:4b:f3:67:5a:d9:08:38:b9:6d:7b:69:1b:
e9:68:29:e3:dc:35:3a:2d:d0:f5:47:bf:7e:71:9b:25:ff:88:
c5:20:5c:93:ff:f4:46:90:5f:ff:df:a9:45:a5:f2:63:3e:c3:
c9:a7:63:d4:03:f1:c2:68:74:de:18:f1:c6:66:6b:15:a3:8a:
a2:8a:34:e2:0d:b2:61:4e:5e:1e:dd:c0:4e:45:52:2e:30:a1:
a4:72:a1:f4:35:78:50:30:64:68:cb:7f:3f:d9:8f:d8:fb:8e:
0e:ee:85:b2:ad:61:a4:04:a8:ab:65:74:5c:9a:46:15:21:70:
95:71:28:72:0b:86:16:f1:7f:cf:88:e9:c0:3b:75:33:c0:14:
08:78:94:6c:59:6c:27:6e:53:37:11:d0:01:c4:a4:d5:2e:9a:
16:6e:ce:d9:e4:da:ab:06:fa:2b:a5:84:3b:bf:76:f6:0a:34:
8a:43:22:39:90:b7:f8:66:45:74:05:ea:03:fe:1a:29:10:c7:
21:98:95:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:46:48 2025 by rpki-client