Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fbb7303-c6a4-43da-bcdb-d26ab78c366e.roa
File: 6fbb7303-c6a4-43da-bcdb-d26ab78c366e.roa (raw, json)
Hash identifier: SIap05UrWlMK65FsWlypSRlvh9sje2TCd0oQaGvSEhQ=
Subject key identifier: B4:30:9D:4D:91:13:E1:E6:0E:D4:B6:9B:B0:39:D8:0E:55:35:02:03
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 435C6DA25331CDEDE0CED90C4A83D8D20A7A7C26
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fbb7303-c6a4-43da-bcdb-d26ab78c366e.roa
Signing time: Fri 11 Jul 2025 19:31:16 +0000
ROA not before: Fri 11 Jul 2025 19:31:16 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:2040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:5c:6d:a2:53:31:cd:ed:e0:ce:d9:0c:4a:83:d8:d2:0a:7a:7c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:31:16 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=a88ce839e74442b9a0736e1ac8253f6045c9a959c7d6b0eb02b285a4d868896f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:d1:5e:b4:f6:84:de:30:4b:60:7d:26:a4:
49:43:e2:26:2b:c9:d8:d9:de:83:bd:6f:94:07:9b:
8b:ce:53:be:60:d9:be:04:71:e2:ff:1b:9f:cc:90:
5e:1d:65:d4:38:03:06:25:5b:91:16:64:ae:f8:c0:
a4:91:b8:60:dd:13:36:76:77:52:62:77:82:a3:0e:
6b:d6:6d:62:62:20:ae:d7:a6:e9:81:6c:24:64:1f:
99:c5:88:c6:b4:72:b7:96:1a:4e:52:85:13:3e:2b:
57:7f:db:bb:af:8d:b7:ef:14:26:58:ab:88:c1:d0:
07:1d:c9:29:ea:03:ff:f7:7a:b0:40:20:b8:9b:ef:
19:ba:51:a5:85:da:96:c7:d4:f3:43:64:9f:4c:53:
71:ab:d8:9d:ce:b9:a1:a9:3b:f8:e0:73:cd:77:6c:
86:e5:9a:00:44:60:1e:7a:0e:06:85:29:59:51:9b:
8c:1e:bd:be:bf:ad:aa:15:7b:7c:af:dc:96:46:79:
1b:27:56:67:ac:73:58:77:ce:26:f5:68:02:2f:e7:
19:0c:dd:a2:9b:f4:2a:e3:26:c4:f2:d5:7d:43:c1:
23:8c:ed:f2:1a:eb:f5:58:8e:74:f7:53:d3:22:bd:
ab:13:28:86:4e:08:b1:51:a6:6f:da:21:87:8b:cd:
00:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:30:9D:4D:91:13:E1:E6:0E:D4:B6:9B:B0:39:D8:0E:55:35:02:03
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fbb7303-c6a4-43da-bcdb-d26ab78c366e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:2040::/48
Signature Algorithm: sha256WithRSAEncryption
5c:22:c3:08:a7:ef:a8:7e:6c:1e:43:b6:50:24:4b:dd:41:dc:
8e:25:9f:10:f1:ac:b4:76:9d:10:6e:42:9d:7f:29:bd:be:16:
5e:ab:7c:46:68:70:a4:ec:ed:ee:91:2d:7c:3a:54:bc:72:42:
a2:f5:ce:46:6a:85:e4:4b:b5:2d:7d:9a:46:8a:ee:f3:a9:f8:
2a:8e:c2:7f:d7:cb:28:92:39:21:7f:ed:d9:cc:a2:34:97:10:
52:40:53:be:e9:50:6c:e8:13:f3:5f:ea:69:da:26:ad:1d:56:
4b:b9:dd:93:c5:a1:d2:2c:c9:28:d9:cc:d7:3d:01:09:79:d6:
71:b8:e5:30:48:1f:3b:1d:fe:8e:56:71:8b:68:69:1f:c2:6f:
90:c8:a0:cb:ab:be:07:0c:3a:1f:fa:e0:4b:62:ae:a6:3f:32:
c2:36:9f:4e:89:5e:61:3b:d1:89:bd:9b:c2:29:83:56:c4:d3:
13:b4:e8:ae:12:7e:45:d1:30:c5:ce:0e:5e:86:67:c3:43:c7:
56:f6:34:d9:f0:92:7d:2b:44:4c:64:53:7f:73:1c:a7:3f:ec:
9b:99:c1:36:c4:80:53:53:cb:ec:b8:8c:0b:bf:35:e2:d1:ee:
21:ba:92:c5:05:c9:f3:6e:0e:58:84:60:16:01:ea:9d:ea:5e:
99:00:2c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:33:15 2025 by rpki-client