Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84f9d9fa-59fe-4651-a60a-2561da098ccb.roa
File: 84f9d9fa-59fe-4651-a60a-2561da098ccb.roa (raw, json)
Hash identifier: HuueHcLm6WH+nV0LEAoioRVIEUdML0U16u+m3YP0sPo=
Subject key identifier: 6A:22:90:DA:BE:37:9D:5F:AE:34:DE:C8:15:AB:FE:A5:78:01:08:D5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 495CD3A456BBE7FC71587418A957243FCFA3E606
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84f9d9fa-59fe-4651-a60a-2561da098ccb.roa
Signing time: Fri 11 Jul 2025 19:50:08 +0000
ROA not before: Fri 11 Jul 2025 19:50:08 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:8080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:5c:d3:a4:56:bb:e7:fc:71:58:74:18:a9:57:24:3f:cf:a3:e6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:50:08 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=b5dca5afaa2aa3a69ce84ac049b44d0e2f17828e32d449527bee7b755b620e4e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:4b:c5:f5:38:7b:82:06:4d:21:97:5b:29:
14:5d:d1:4e:68:ea:03:1e:b2:d5:22:43:ce:2f:ef:
d1:5d:77:9a:2c:e1:d3:6f:dd:a0:4e:8b:a1:15:2b:
58:6f:55:8c:b8:ee:c8:8c:bb:a5:96:0a:44:e7:51:
0c:02:a2:2b:63:88:e0:b0:5a:ce:56:38:7a:86:60:
65:61:33:9b:37:1c:d6:5a:39:2f:dc:73:4d:93:b0:
71:65:aa:47:d6:5c:75:bb:ae:fc:e4:79:59:03:83:
4b:49:2c:08:ca:44:4d:34:60:cb:0c:f0:4b:a6:f5:
10:12:e2:c2:0e:22:6f:ac:cd:74:8d:bf:38:4b:a0:
62:33:34:03:b4:e7:c2:aa:45:50:4e:8e:92:89:10:
d3:00:4e:da:de:1f:c7:22:da:17:07:20:c3:81:79:
12:f2:93:d0:25:7d:83:1d:85:08:00:a1:65:2a:e3:
d6:fe:1a:9a:86:4b:bb:0c:10:f2:b1:2f:7f:60:da:
4b:dc:1c:7c:a4:cb:ab:5b:9c:29:80:9b:3d:a1:5f:
1e:d4:34:df:a1:bf:0b:b7:84:7e:3d:89:af:45:04:
89:cc:6a:75:2e:30:5e:e0:17:d6:0d:90:79:65:1a:
ca:bd:2e:23:2b:a5:88:e0:c2:d5:8d:64:63:03:29:
0b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:22:90:DA:BE:37:9D:5F:AE:34:DE:C8:15:AB:FE:A5:78:01:08:D5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84f9d9fa-59fe-4651-a60a-2561da098ccb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:8080::/46
Signature Algorithm: sha256WithRSAEncryption
5a:e8:9d:d8:74:d7:19:f4:4c:f0:bf:4c:eb:eb:e8:dd:6c:0d:
10:4c:b1:c0:5c:c0:bb:0c:e5:28:8d:96:b4:d3:c5:ab:db:05:
12:d2:83:2e:da:67:f7:d3:26:54:17:cc:96:61:00:37:e2:14:
2b:15:35:b3:ec:be:f5:4c:ff:54:90:d9:ea:84:54:7a:48:be:
ab:8f:1b:f8:c7:69:97:2f:33:6f:ff:fc:c2:95:2d:03:cb:5c:
6f:b8:29:e1:43:90:89:67:78:6f:b6:cf:fc:3b:e7:b9:4b:38:
72:c6:3d:6e:ee:eb:f4:af:08:f6:e7:31:71:61:5e:a4:3b:a7:
64:82:83:ac:61:33:0e:f1:77:8f:2e:27:78:32:5e:96:55:99:
8f:47:2b:2b:45:9d:30:26:89:f5:bb:5f:97:25:33:18:b9:83:
24:60:e9:37:c0:ab:5e:90:5f:45:9a:81:7e:87:b5:00:60:49:
1d:4c:53:18:0f:c3:7e:95:10:2d:79:da:4e:63:a7:53:2b:48:
5e:63:40:92:f4:e9:f2:73:ef:98:48:26:b9:df:b6:14:75:02:
d3:6e:8b:88:7b:22:72:0e:4a:43:d9:70:18:7c:38:8d:09:ec:
66:0d:d0:35:60:6d:51:14:bc:1c:a4:f2:61:53:31:03:01:5c:
4b:31:d1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:59:49 2025 by rpki-client