Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/655038e8-ae62-4d89-86ef-c5f745dc0c17.roa
File: 655038e8-ae62-4d89-86ef-c5f745dc0c17.roa (raw, json)
Hash identifier: e6uKDAyNmp7/bcZAMfpHelQFJq1uTwQ7jJrPh5t99Gc=
Subject key identifier: 79:8A:AF:49:11:35:BE:F0:FF:B9:31:AD:BB:C5:04:B6:36:7D:CF:F9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 76862CEA046D9477428AB066FD53A8B7C09F548F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/655038e8-ae62-4d89-86ef-c5f745dc0c17.roa
Signing time: Mon 07 Jul 2025 18:20:50 +0000
ROA not before: Mon 07 Jul 2025 18:20:50 +0000
ROA not after: Mon 11 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:86:2c:ea:04:6d:94:77:42:8a:b0:66:fd:53:a8:b7:c0:9f:54:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 7 18:20:50 2025 GMT
Not After : Aug 11 23:59:59 2025 GMT
Subject: serialNumber=01669ce56164f0dcb880efa68c63c563e629fbc14ee8c7b65efdc4a212679c7f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:9c:07:6e:8d:38:80:f8:7a:85:c5:d0:18:
4a:7a:af:56:ff:b4:c9:1b:d8:c2:17:f6:e8:bd:ef:
19:5d:db:50:c5:9f:68:36:51:f9:ca:95:ef:61:a1:
61:64:eb:b9:48:c3:f1:6d:3a:84:28:ff:47:17:dd:
b7:2c:7b:01:ee:22:76:45:69:a5:ec:21:d1:6b:3f:
6d:ad:b1:de:25:d6:95:10:d8:44:4e:93:17:dc:27:
9f:10:51:f7:31:a5:67:b0:84:b4:30:fe:88:a3:36:
09:1a:05:fa:5f:7d:11:87:64:4d:83:ea:94:8c:71:
db:4b:fb:78:ab:7d:f9:f5:ce:1d:bc:d4:2f:11:2c:
4a:11:7a:2c:91:1c:49:cc:b7:0a:81:ff:d6:dd:d1:
d7:8f:67:da:65:6f:41:38:95:ca:5d:8f:44:44:a1:
e7:c4:4c:d8:e3:63:e2:78:26:bb:7e:e9:a8:01:09:
1c:95:8c:b0:88:87:93:01:ba:6a:e7:50:df:d9:c5:
57:ef:87:bd:8f:bd:7c:30:51:4f:86:ee:0a:27:c7:
bc:4c:ec:4f:6b:a3:92:48:e4:22:4c:4b:9e:3f:7f:
6e:d1:cb:57:68:44:cf:db:fa:d2:c5:b6:39:27:8f:
75:65:a1:57:f0:5d:ae:49:d7:c6:e1:ef:49:69:f8:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8A:AF:49:11:35:BE:F0:FF:B9:31:AD:BB:C5:04:B6:36:7D:CF:F9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/655038e8-ae62-4d89-86ef-c5f745dc0c17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:840::/48
Signature Algorithm: sha256WithRSAEncryption
69:4a:5a:25:e6:a7:81:72:db:64:0a:51:db:89:cd:a2:3f:02:
76:df:e8:6f:3c:9f:3b:ae:1b:06:00:18:25:93:4e:8e:9b:d7:
f4:48:80:4d:f4:ea:3f:12:e5:1a:d0:55:24:51:76:50:2a:a1:
b9:85:38:50:b3:07:70:ef:aa:a5:b5:69:06:f4:7c:50:66:a6:
8c:34:6b:09:b4:94:5d:ef:2a:38:56:91:80:f8:6c:8f:4c:ec:
ee:fb:e2:83:68:fc:56:e7:3f:94:6e:6c:da:c0:82:28:86:64:
13:89:36:d7:19:9b:1d:3c:7d:a9:c3:8a:1c:19:76:ff:26:eb:
9e:99:35:d6:23:de:be:8c:e9:57:48:36:2e:bc:db:12:97:ac:
17:a0:94:03:9f:90:c6:33:1a:45:e4:79:68:41:cc:a6:3f:66:
bb:01:de:59:22:b1:cf:bc:53:fe:96:95:fd:78:7f:c5:79:db:
3a:7d:15:f3:be:33:65:83:4f:49:5b:d5:f4:b2:8e:2f:93:51:
aa:52:fc:2d:cf:ba:e3:aa:99:06:6a:2e:6e:03:bc:58:cb:89:
44:a7:05:27:71:eb:ea:cf:75:22:39:33:6f:d8:3a:bc:ae:f6:
6c:c5:e9:06:e3:62:0b:b3:03:2b:43:7f:3c:13:92:a0:4b:03:
ae:c4:30:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:46:47 2025 by rpki-client