Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7af2d4a0-df22-4933-b605-1ecbbd66f982.roa
File: 7af2d4a0-df22-4933-b605-1ecbbd66f982.roa (raw, json)
Hash identifier: XI7uuuOz23qoWlrc2eqybS1CaXiagRfFeEbLboDKfSY=
Subject key identifier: CF:F5:8F:2E:78:AA:AC:27:93:74:21:10:E7:08:65:0C:2F:79:27:FA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 21906780EF38E1F2F748328CF9DC1236D2EA20FA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7af2d4a0-df22-4933-b605-1ecbbd66f982.roa
Signing time: Fri 11 Jul 2025 20:41:21 +0000
ROA not before: Fri 11 Jul 2025 20:41:21 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d015:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:90:67:80:ef:38:e1:f2:f7:48:32:8c:f9:dc:12:36:d2:ea:20:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:41:21 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=a1c4d360035bc76b5f674d859e72f901b79c474186cd021b9a5610c6e01a0cef, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:0b:66:0a:a5:5b:d0:61:70:25:90:92:ca:
7a:92:e3:91:76:b8:9d:eb:7b:35:b1:7b:3e:33:db:
64:1a:16:91:02:c5:72:49:76:ba:49:49:2d:9c:e8:
ae:a7:73:9f:bc:00:32:79:a2:20:5c:74:cd:6a:cb:
a6:6a:21:61:bd:e0:a6:b8:1a:04:01:6b:1a:7c:f5:
7f:82:f9:f5:55:22:b7:a8:4c:1e:68:e7:56:81:70:
6c:8b:b4:ed:c9:2d:ed:4c:83:5b:5d:4d:d3:c3:18:
24:24:a8:02:a1:0f:3a:91:9f:f2:3f:37:f9:02:4e:
8e:f5:77:b2:1e:56:d6:4a:29:b4:cd:50:e1:32:72:
7b:18:cf:23:cb:d7:e4:78:a6:83:e2:ca:7d:8f:f0:
67:74:9f:dd:1b:7d:4d:69:d0:e4:f2:ce:f5:c4:08:
51:cb:a2:82:53:17:0f:1c:b5:a6:57:61:83:52:80:
cf:d1:28:05:26:11:19:7e:21:fb:c0:1f:5e:4d:f6:
25:18:27:59:fa:c1:2b:e7:1a:90:cd:57:af:07:06:
81:00:89:d2:e1:7f:2f:e1:a8:a4:b5:c4:28:e9:05:
5b:62:2c:82:67:a7:88:17:88:58:76:4c:c5:4d:ee:
be:83:a6:26:47:a0:e1:33:f3:b8:c7:b6:b7:38:7d:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F5:8F:2E:78:AA:AC:27:93:74:21:10:E7:08:65:0C:2F:79:27:FA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7af2d4a0-df22-4933-b605-1ecbbd66f982.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d015:c00::/38
Signature Algorithm: sha256WithRSAEncryption
71:f9:43:14:63:40:67:6e:3d:a5:e4:f7:d5:f5:54:b4:ae:f6:
4d:5e:33:30:20:4f:44:d8:dd:9a:8e:98:f6:df:1e:ff:15:98:
cb:38:a3:fe:de:a2:c9:06:5c:15:6e:6e:09:dd:bf:3f:b1:be:
ad:af:89:87:cc:62:47:55:60:79:a7:5b:9b:dd:e7:b5:71:1a:
19:db:61:28:e8:c4:1a:9c:b1:d7:7c:bb:13:32:9b:3d:33:e7:
17:92:29:53:aa:91:aa:3d:b9:4d:d5:c9:1b:e9:a6:4e:74:54:
0e:d3:3f:91:ea:f8:04:c5:b6:90:37:e3:a3:12:55:0c:7f:72:
d0:63:b8:16:3e:d2:ea:7c:5b:76:8d:18:27:9e:18:e7:a1:8d:
92:eb:1d:03:3d:68:af:ec:b4:ae:14:f6:50:39:45:39:e0:ac:
3f:6f:b6:6f:af:5e:0f:c6:e1:1c:01:e1:f1:ad:15:42:59:8b:
20:8c:35:19:0b:a7:a4:38:35:ea:77:23:cd:b1:54:b4:28:c3:
c7:c8:60:8f:a3:68:08:d5:8d:96:6c:43:f3:1f:26:2d:ac:db:
6b:3d:ee:99:49:ac:9b:53:fe:23:cc:32:e1:11:40:3c:9d:23:
14:85:0c:51:65:8c:5b:c2:ea:d9:ca:fb:17:db:86:ef:3b:cb:
6e:87:66:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:59:16 2025 by rpki-client