Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/715ce244-d76a-4faa-8b30-81259801a7e8.roa
File: 715ce244-d76a-4faa-8b30-81259801a7e8.roa (raw, json)
Hash identifier: r+i+UfWwpUOTNavxOsgXxRoI+X8pWLI/r353KsW6+NY=
Subject key identifier: 69:55:B4:65:4B:71:EC:0B:8F:59:A1:35:5B:50:EA:5E:F4:88:79:B6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2743C612E3C2FF4A9101EA84E3E5A07C27E0E103
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/715ce244-d76a-4faa-8b30-81259801a7e8.roa
Signing time: Mon 14 Jul 2025 16:54:09 +0000
ROA not before: Mon 14 Jul 2025 16:54:09 +0000
ROA not after: Mon 18 Aug 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d059:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:43:c6:12:e3:c2:ff:4a:91:01:ea:84:e3:e5:a0:7c:27:e0:e1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 14 16:54:09 2025 GMT
Not After : Aug 18 23:59:59 2025 GMT
Subject: serialNumber=ab58d0e7d0f13c494ba55465b61be0776515d91b2dc92dc5188132d04a1c5c45, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:55:51:89:12:e9:1e:d5:24:40:b7:1e:9d:6f:
b6:ad:52:46:d6:2d:b1:cf:27:ad:3f:78:a1:7c:2b:
0d:bd:bd:e6:a1:47:d9:37:0d:be:69:28:a8:7f:c0:
b6:93:34:ed:05:cd:93:21:dd:53:c6:8b:2c:25:79:
9b:fc:01:1d:4c:86:fd:a9:b1:95:21:57:9d:ef:fd:
cf:39:eb:d0:07:d9:69:8a:60:a7:7e:b0:3a:dd:33:
ef:4b:27:ba:df:60:08:4c:aa:80:1c:60:36:5e:66:
b6:10:ff:51:7c:1e:2b:2d:72:e5:fa:f5:8d:8f:06:
f5:66:67:df:ca:56:1e:72:ca:78:26:35:0e:48:5b:
4c:ee:43:92:d5:8f:5d:33:86:14:6a:e3:90:f5:31:
0a:8c:df:1e:1a:05:08:76:a0:46:3b:92:aa:b0:24:
84:a9:7e:41:d9:2d:5b:85:3b:17:d9:4d:44:a9:44:
ef:b3:b8:34:59:fb:1a:ca:28:3f:72:c5:92:65:8a:
55:c9:58:5c:38:2e:8d:be:b5:ed:56:7d:db:6f:3b:
1d:69:82:89:04:68:1a:37:98:7f:81:30:ef:91:ac:
1b:0d:38:d1:bb:f3:44:40:a6:41:8b:f1:0e:ba:64:
34:c4:0a:fd:a4:e7:dc:b4:6d:cc:21:61:30:5d:f5:
5f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:55:B4:65:4B:71:EC:0B:8F:59:A1:35:5B:50:EA:5E:F4:88:79:B6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/715ce244-d76a-4faa-8b30-81259801a7e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:6000::/40
Signature Algorithm: sha256WithRSAEncryption
4a:e9:ea:c1:92:e2:6e:9d:08:ca:37:62:f7:5f:a7:a4:29:6a:
b0:89:fd:ce:f0:d4:a8:b1:39:e5:ea:d9:df:a8:ed:74:29:0a:
96:ed:6c:a8:8c:b5:db:cc:b3:1a:23:62:68:78:ca:26:23:74:
03:10:77:28:d7:8e:ea:1b:69:81:0c:48:a8:ed:c5:00:fb:5e:
ca:de:dc:5c:a9:b0:35:09:89:bd:cf:07:73:1a:9a:da:27:73:
7c:27:da:25:fc:b9:8b:9b:68:09:95:b3:68:46:4e:ee:fd:fc:
ee:05:0c:67:53:6f:05:54:76:96:4e:f7:79:2c:14:dc:0d:10:
a4:88:44:3c:d0:57:96:a0:49:4d:55:f3:c4:49:7c:2c:6f:54:
f4:18:17:49:da:8e:22:13:f9:36:c9:f6:8d:a3:09:1f:f7:62:
42:66:f1:37:d9:d6:e7:5d:ee:03:ac:a7:74:bc:bf:38:11:e6:
11:99:6e:62:37:98:04:fc:df:0a:cf:4f:06:f6:e3:53:0e:74:
da:49:6a:6c:59:ac:3d:45:ad:13:84:ec:e4:6a:8d:1a:67:1f:
71:2e:0a:a2:b8:3e:2b:2c:21:14:77:b6:09:49:9e:65:5d:e6:
85:e1:e1:82:4e:2f:24:31:82:a5:70:96:00:35:a3:5d:91:a6:
c1:53:d6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:46:43 2025 by rpki-client