Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/78085d0a-f1ac-43b7-ac6b-a8afcf9782f5.roa
File: 78085d0a-f1ac-43b7-ac6b-a8afcf9782f5.roa (raw, json)
Hash identifier: z2KBb0qo1Cl0YrQ2w+0TBaivQT5RV+9qNB1wOVd3T0E=
Subject key identifier: 04:8D:44:CF:D1:FB:94:FE:8A:CD:2E:C9:81:64:15:17:CA:CC:34:A8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 335AA3D4E4FD820BDD948A8F6B6C943817B8C18C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/78085d0a-f1ac-43b7-ac6b-a8afcf9782f5.roa
Signing time: Tue 01 Jul 2025 15:10:15 +0000
ROA not before: Tue 01 Jul 2025 15:10:15 +0000
ROA not after: Tue 05 Aug 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d030:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:5a:a3:d4:e4:fd:82:0b:dd:94:8a:8f:6b:6c:94:38:17:b8:c1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 1 15:10:15 2025 GMT
Not After : Aug 5 23:59:59 2025 GMT
Subject: serialNumber=2412b77e999f31eaa6d63f5c031247bfb15b875b2b047b41611023173ee30287, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:6a:dd:c3:0c:00:2a:45:79:2a:40:82:72:
80:3f:bb:36:e2:14:87:47:e9:b0:5d:23:71:e0:c2:
df:67:0c:a4:6e:3d:bb:c6:8f:0d:2f:78:49:f2:bf:
c6:9f:ee:e2:1a:05:58:ce:21:8c:92:ed:0f:1c:71:
d9:b4:ab:dd:fd:67:ec:fb:0c:82:aa:06:e1:9f:5e:
5a:35:2f:89:43:71:2a:bf:a3:68:1c:e3:99:44:c7:
0f:ec:c0:b6:50:20:8e:a4:fc:ca:5e:70:64:d7:28:
6d:1b:a0:d2:55:91:d2:93:4f:df:70:f8:7e:ed:73:
7e:38:de:66:81:34:d1:f3:c1:1f:66:7e:c2:42:5e:
e1:f1:94:98:93:ea:fe:15:49:cf:00:8f:1f:49:b4:
59:20:13:df:dc:14:88:05:bc:fb:7e:ec:61:15:30:
36:86:2c:5f:18:70:f9:05:32:de:86:42:8c:61:f4:
58:54:76:52:2e:fb:db:f8:88:08:43:01:0a:6c:6e:
ee:4f:7c:ad:3f:92:32:88:ba:a9:0c:bf:bf:4f:d0:
c3:a5:d7:ec:b0:4b:ac:33:ea:e5:d3:9c:de:ee:00:
62:53:b8:28:6f:c2:90:20:f3:a4:c2:2b:92:52:1f:
8f:19:34:05:37:07:66:75:5c:60:2a:7b:86:b9:5e:
21:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8D:44:CF:D1:FB:94:FE:8A:CD:2E:C9:81:64:15:17:CA:CC:34:A8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/78085d0a-f1ac-43b7-ac6b-a8afcf9782f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:c000::/40
Signature Algorithm: sha256WithRSAEncryption
90:d6:59:0c:e5:0c:9c:c4:dc:a0:94:3f:05:e6:bc:4e:3c:5e:
a5:16:ae:bb:6b:78:34:48:84:bb:e0:ac:b2:7b:7b:a9:35:a6:
33:6d:7e:09:6d:05:f8:25:3e:b9:05:ad:ca:9b:a3:f5:6f:78:
2e:6d:f2:34:6a:73:3a:48:4d:df:e9:98:34:59:6a:02:d0:2b:
f5:a8:55:86:1e:ff:f6:c3:a7:9b:89:33:3b:e7:08:67:88:85:
31:37:e5:03:80:64:52:5a:df:3d:f7:5b:33:fe:aa:27:4d:67:
fd:44:eb:0a:31:63:fc:81:63:18:5d:28:69:a8:c4:34:0e:d3:
ee:01:84:00:1c:b4:7a:ce:9a:bf:b0:ff:3e:9f:c4:09:46:a3:
3f:ea:b6:13:06:12:e3:55:09:f4:6f:4d:ed:94:9d:ba:dc:25:
d0:33:34:74:d9:21:57:77:3f:ad:b2:58:35:8d:76:18:16:c3:
47:9a:62:03:93:df:3c:f2:82:9a:3d:6a:4a:1e:c2:23:16:d0:
b8:6f:1b:90:f9:37:4a:36:46:f7:3b:2d:33:a2:28:68:a1:87:
fe:f5:cb:92:11:51:fc:6a:dc:26:11:4d:2d:9b:05:f5:c7:ef:
c5:6c:2e:50:5d:4d:70:c9:4c:82:a3:12:27:5f:fc:08:f2:9d:
ae:70:e7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:33:29 2025 by rpki-client