Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b578938-3dca-4d72-8385-f8a93e508377.roa
File: 8b578938-3dca-4d72-8385-f8a93e508377.roa (raw, json)
Hash identifier: rfjPNBChGeFbejBXA51MK6ptXQiiS91+vMWbtmyFXNc=
Subject key identifier: 94:E2:84:D9:91:B7:00:CF:0F:3C:7B:8D:DC:F9:C9:B0:8E:EB:4B:3A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 158486C9CB277E015F0A6F29CDB3437F148E38BE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b578938-3dca-4d72-8385-f8a93e508377.roa
Signing time: Fri 11 Jul 2025 20:40:16 +0000
ROA not before: Fri 11 Jul 2025 20:40:16 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d019:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:84:86:c9:cb:27:7e:01:5f:0a:6f:29:cd:b3:43:7f:14:8e:38:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:40:16 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=a3bd01e7149529eb82fc9a56e3a8271117cec6e71621cbc320843033180d8d82, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:14:86:ad:a0:ca:f5:e0:fb:de:7f:bc:49:
fd:a6:b7:3a:b3:c2:d2:b1:a3:60:f1:fc:1d:41:51:
ad:66:7d:79:d4:09:94:08:9d:72:5f:d2:71:93:18:
2e:98:bc:5b:8e:90:82:98:ce:85:a3:a7:88:80:06:
7b:f9:07:95:7e:ee:b8:5a:23:f7:ff:93:3e:76:7f:
fa:7f:d7:c6:e1:5a:dd:dd:f9:35:25:7d:e0:1a:f1:
d6:fc:e9:92:30:b6:b3:14:d6:0f:51:fd:f0:1d:c4:
6a:4f:5d:fd:6f:67:7e:96:b2:14:74:33:50:ba:88:
ab:cc:76:f4:57:97:bd:84:1d:08:f3:b0:89:00:ac:
b0:5c:b0:65:1b:09:86:aa:c0:d1:92:9b:80:5d:af:
76:dc:90:50:6c:3f:d3:0a:69:f8:ad:f8:fa:15:2b:
f1:b2:bf:76:14:f3:e5:0e:02:1b:58:c2:93:94:7b:
81:7d:18:50:70:ba:e4:0d:c6:11:6d:25:c9:8f:c6:
ca:ca:ee:e5:4c:43:4f:02:ef:76:16:03:da:c4:5c:
5c:e2:7f:bf:76:4e:52:06:8e:bd:1a:1b:ec:d5:64:
bc:cc:a6:d4:2e:ed:9d:21:92:f4:46:40:df:df:ed:
33:82:ad:eb:8b:79:a8:ed:d8:bd:e7:86:89:1f:6e:
d4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E2:84:D9:91:B7:00:CF:0F:3C:7B:8D:DC:F9:C9:B0:8E:EB:4B:3A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b578938-3dca-4d72-8385-f8a93e508377.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d019:400::/38
Signature Algorithm: sha256WithRSAEncryption
15:cc:7d:16:9b:21:b0:2d:84:77:0e:7b:63:90:63:3d:9f:82:
3a:74:59:5b:77:6b:d1:6e:2b:8c:d9:a8:f2:e4:65:e9:b3:48:
52:52:b8:2a:e8:d7:1c:dd:7c:b3:af:a8:b9:20:36:7e:39:3a:
0d:b2:c4:d1:98:59:c9:5d:a3:22:f6:b3:d3:24:2d:26:ed:14:
b3:ed:59:2c:43:73:86:bb:21:6a:31:87:eb:bf:0b:bd:ec:fa:
5c:a9:57:29:a8:1d:92:be:9e:64:fc:b8:aa:41:6b:1a:7d:38:
d8:25:3f:f9:ce:14:e5:ac:48:a1:35:5d:44:10:85:a8:e4:b0:
0e:c9:dd:18:58:8a:63:88:19:36:0a:4d:f1:46:c7:c3:c0:42:
f3:16:7e:a1:26:eb:e0:e0:8d:3f:62:48:a5:d2:b2:cf:53:dd:
a7:10:ff:6b:aa:99:dd:7c:6c:6b:60:a2:43:58:6d:23:78:8f:
f8:37:f1:69:22:7e:f8:dd:08:97:16:0c:db:23:cd:fe:c2:d5:
1f:f9:f8:1e:19:4c:3a:33:b4:bf:77:63:c8:09:25:ae:53:b8:
38:c9:5e:8c:2d:b2:87:fc:c4:51:f0:ca:13:0f:88:46:47:b1:
3c:09:10:d3:66:d0:ac:60:4a:bd:6b:a1:2d:ae:56:53:ac:e5:
64:71:70:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 22:23:37 2025 by rpki-client