Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/743b08e5-dfbe-44cb-a9af-87de652b3c1c.roa
File: 743b08e5-dfbe-44cb-a9af-87de652b3c1c.roa (raw, json)
Hash identifier: 3BcF4Bt+DL56YUygMZzRJRAvKi73Df8rytAZAS4f0KU=
Subject key identifier: 8C:52:6E:33:17:8F:8C:9F:D5:BB:60:3A:3D:FF:B9:E2:85:A7:02:45
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 10E2C744DABC6AD9C3B072D22E82D594903186C7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/743b08e5-dfbe-44cb-a9af-87de652b3c1c.roa
Signing time: Fri 11 Jul 2025 19:30:11 +0000
ROA not before: Fri 11 Jul 2025 19:30:11 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:e0c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e2:c7:44:da:bc:6a:d9:c3:b0:72:d2:2e:82:d5:94:90:31:86:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:30:11 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=1da5a3a47f9b77706dc0145507851faae6e1d0588b83597ff03cdfe80822a1f6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:b4:79:be:83:96:50:4c:8f:31:60:a8:0f:
ab:3c:b6:b0:1a:96:bd:61:8d:0a:e3:8a:d8:b8:cd:
ea:29:c8:f0:92:a5:44:f2:05:c1:a0:16:d7:40:29:
53:78:77:34:8a:c2:d7:b3:55:f6:5c:e8:c9:48:79:
92:5e:1d:92:1b:4f:15:80:d2:e6:24:28:31:54:8a:
1b:9e:b5:c0:c7:c1:04:90:46:c9:b6:4a:89:94:b4:
0d:58:70:d4:02:82:7d:dd:9a:15:43:5f:4d:c1:9a:
b1:b5:9e:d1:b9:2b:06:cb:b7:1f:a4:98:51:68:55:
a0:98:c4:95:aa:03:00:e8:9a:17:9c:f4:26:9d:4b:
5e:e8:f0:f5:8d:9b:63:d2:30:c6:e7:58:06:de:a3:
c5:14:7c:45:4c:6e:06:c8:8c:f3:c5:23:88:ca:c4:
aa:78:d3:31:96:b3:57:bc:f1:12:7b:e3:2c:53:6a:
71:c8:99:78:cf:bd:73:75:e9:c3:08:39:8e:a1:44:
1f:19:e2:e0:fc:f3:a6:ab:cb:59:1b:c6:ae:32:fb:
16:78:e1:87:11:4e:58:28:f0:50:59:e6:78:ff:10:
88:65:c6:01:9a:5c:e5:34:e9:95:d7:cd:78:9d:bb:
68:f3:be:41:4e:ed:18:cd:c2:72:e5:f2:e7:e6:9c:
53:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:52:6E:33:17:8F:8C:9F:D5:BB:60:3A:3D:FF:B9:E2:85:A7:02:45
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/743b08e5-dfbe-44cb-a9af-87de652b3c1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:e0c0::/46
Signature Algorithm: sha256WithRSAEncryption
91:2d:ba:83:1b:ef:94:83:b6:90:35:06:44:42:45:eb:6b:68:
55:7d:dc:a9:d2:59:8c:0f:27:0b:8f:d8:c5:fd:ba:3a:54:77:
f1:38:52:ee:a5:89:4f:7e:63:d3:22:1e:d6:5b:53:2a:3a:05:
e7:90:bc:e7:58:82:2b:d9:48:46:38:90:a2:d0:17:cf:80:17:
41:3f:d7:e5:63:b7:ee:23:71:7c:f7:ef:a2:a1:06:47:b8:c5:
97:74:74:f6:77:0f:2e:9f:10:52:5e:ef:00:d8:6e:61:86:83:
98:7f:55:58:34:df:85:bd:78:3d:cc:b0:91:cc:26:0d:df:b1:
b6:83:12:ee:68:7d:7f:a1:9d:1b:b6:81:50:b6:18:90:81:24:
ef:41:42:b8:8f:f5:f4:50:8e:22:a0:8a:71:31:19:8d:9f:74:
ed:0b:6f:6c:36:56:ff:0f:35:d8:a3:b2:58:9d:27:88:1f:ba:
4e:da:da:a6:21:68:d9:f1:e1:f3:52:25:d2:7b:13:b6:67:aa:
03:37:97:06:c9:30:a5:be:ed:27:7f:e7:a4:a5:52:28:84:bc:
68:81:a3:17:7e:3d:bb:72:02:33:7b:54:9b:ab:47:6d:f3:4b:
a4:62:10:c0:46:7c:be:c8:6c:a2:4a:2f:f7:3f:e7:be:dc:f0:
5f:89:ee:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:32:28 2025 by rpki-client