Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60b690d0-a362-4547-bf57-d14f49f40869.roa
File: 60b690d0-a362-4547-bf57-d14f49f40869.roa (raw, json)
Hash identifier: xI0EfiTfSe0BTnCWy9KTiAC+eglv2OxRuhs3baRsydI=
Subject key identifier: EB:82:5D:15:9A:FA:29:45:CA:BA:08:62:43:4A:A8:B5:24:1C:5D:E6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0B9A84BEE02D1C145AD69D429034DEBE6C81BF93
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60b690d0-a362-4547-bf57-d14f49f40869.roa
Signing time: Fri 11 Jul 2025 20:31:15 +0000
ROA not before: Fri 11 Jul 2025 20:31:15 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:9a:84:be:e0:2d:1c:14:5a:d6:9d:42:90:34:de:be:6c:81:bf:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:31:15 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=6ef07dd41d7572b0f07644533170100e3107f9eaa49b1279db1b4585bdf97dce, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:dd:14:55:c0:2a:db:63:7c:fb:69:c2:8e:
51:56:f3:0c:b1:2f:32:f2:48:59:15:49:f7:cf:2d:
41:35:e6:35:65:ce:2a:3e:24:98:d9:96:e5:68:1b:
6b:81:30:4e:f6:f1:d5:5f:7d:eb:0a:9c:d5:5f:46:
14:7f:63:ad:b2:c5:1b:68:dc:64:d9:56:08:bf:3e:
54:da:5b:21:32:65:7d:98:f4:eb:53:29:d2:9d:d2:
78:d4:fb:6d:69:08:9a:6f:f1:66:87:66:cb:97:d8:
76:5f:a8:55:c2:36:ee:96:58:b9:60:be:cd:e9:c1:
01:ef:35:5e:08:a0:54:a0:08:88:1e:9c:40:3b:9b:
33:22:0f:0e:30:09:be:05:83:6e:77:07:e1:51:71:
10:2d:c7:99:18:ed:63:06:a9:69:5e:f5:22:f4:d3:
41:48:90:41:b9:8d:c1:ba:7e:2b:1d:10:c4:bc:33:
9c:21:1f:e0:2f:6d:6d:3a:57:d3:02:3a:5f:d1:d5:
7e:a0:2a:5d:6d:47:cd:18:fb:be:de:be:8a:30:d1:
88:05:b5:f9:85:10:8e:51:02:44:bd:f3:59:50:a4:
d7:fc:82:bf:38:73:97:79:dc:c7:19:ef:5f:da:85:
88:6f:4a:d7:12:0c:d7:27:79:38:c2:e0:02:b1:65:
74:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:82:5D:15:9A:FA:29:45:CA:BA:08:62:43:4A:A8:B5:24:1C:5D:E6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60b690d0-a362-4547-bf57-d14f49f40869.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018:400::/38
Signature Algorithm: sha256WithRSAEncryption
26:aa:94:4d:2b:d1:29:ee:a6:8b:4d:e7:d5:0f:de:52:d0:e2:
fa:ca:5d:b3:f5:a9:4d:f1:81:f4:a1:13:00:6a:3b:03:ea:03:
d7:c1:ca:17:2c:b4:63:d4:61:db:a5:0b:93:73:27:8a:ce:c7:
57:84:8a:55:89:e6:d2:30:c1:1b:2a:9a:8a:92:f6:d5:20:89:
ac:40:09:e5:88:80:86:f2:dc:a0:6b:30:29:d5:60:5b:c5:2f:
e6:f6:61:8f:af:a3:13:71:ba:7d:cc:d3:93:c0:5d:33:53:12:
d6:13:64:f9:ed:3b:72:b3:0a:cb:90:15:7b:2a:be:37:c7:fd:
d2:9b:9e:46:55:20:e1:8f:52:b6:17:8e:75:50:6e:f5:9d:ff:
e3:ab:9c:f5:20:ed:e9:e0:17:0d:37:05:2d:59:47:cd:17:04:
56:e5:2f:91:2f:9a:d1:11:04:09:e5:bb:43:f3:e7:9f:65:c7:
09:8a:45:5a:25:a9:f5:26:ed:bc:e4:11:40:22:41:4f:b9:7f:
f1:63:5a:e4:6d:a3:b7:d7:ec:40:79:a0:6d:93:a9:b4:f3:f3:
16:95:bd:96:39:16:a8:1a:4d:9a:8d:fb:62:9a:21:da:2c:fd:
e6:43:da:2d:de:af:e1:6c:7a:35:2a:b2:c8:d6:b3:9b:ff:b7:
84:16:1f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:59:47 2025 by rpki-client