Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d9b5cac-e262-4659-a49b-3c498d1bc516.roa
File: 9d9b5cac-e262-4659-a49b-3c498d1bc516.roa (raw, json)
Hash identifier: KM71fEj9Ei+VWVumA4Jr8Bthrmt6NS2azapqEFP5aiM=
Subject key identifier: D2:BA:D3:60:A4:00:67:2E:EE:9C:53:1D:A5:49:AF:F6:E5:A2:6E:68
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2EABBEA72B7C7FA93DB06DBA69E30B28580E5EB9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d9b5cac-e262-4659-a49b-3c498d1bc516.roa
Signing time: Fri 11 Jul 2025 20:00:10 +0000
ROA not before: Fri 11 Jul 2025 20:00:10 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:b080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ab:be:a7:2b:7c:7f:a9:3d:b0:6d:ba:69:e3:0b:28:58:0e:5e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:00:10 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=9f217697709ef0c85300e97c1278d7ffe7c1294cd8897ddbca972620a8a6c5ca, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:58:c9:f8:73:33:ad:ee:21:14:50:ea:26:
c8:ba:5c:16:87:ac:54:98:ae:18:a1:75:cf:d1:dc:
dc:75:f2:f7:53:bc:8a:87:19:30:77:e1:4e:be:7f:
1f:c5:3b:14:46:ee:6f:da:71:35:08:b7:4d:6c:52:
85:54:23:50:4b:17:15:7b:5a:47:d9:cc:0b:c9:7b:
21:a7:0e:74:da:63:ff:78:5f:df:5b:8b:0c:cb:54:
b5:c1:3c:dc:ec:86:77:d6:04:6a:66:d5:22:24:04:
cc:35:20:8a:b8:ff:50:98:f7:8a:b0:ca:ad:f3:e8:
62:d1:d0:ae:71:34:df:f5:4a:e8:79:81:90:2b:71:
25:16:84:3a:2b:15:3e:9b:70:02:38:1a:cb:98:04:
a0:51:d3:de:83:07:bc:da:9d:ed:6e:2a:64:78:08:
be:4a:79:dc:5f:4c:ca:fc:32:4b:55:c3:39:39:a7:
e5:d5:ad:f4:a0:48:87:82:13:b2:e9:86:26:e5:70:
27:86:62:f1:20:d8:ad:c8:9e:1b:47:18:c0:be:80:
7e:f5:8c:34:26:f3:57:53:68:72:be:11:f6:84:99:
53:f1:51:1c:56:d6:37:3c:f1:e8:05:08:22:79:bc:
dc:a4:64:bf:d8:28:39:d1:ac:7f:c8:fc:71:74:7f:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BA:D3:60:A4:00:67:2E:EE:9C:53:1D:A5:49:AF:F6:E5:A2:6E:68
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d9b5cac-e262-4659-a49b-3c498d1bc516.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:b080::/46
Signature Algorithm: sha256WithRSAEncryption
56:22:ca:9c:96:58:5d:b8:91:98:cf:9b:27:d5:88:b2:4e:06:
0e:e6:a2:f6:49:a0:a2:5b:88:75:17:b3:ef:47:2b:ca:d0:ad:
cd:27:2d:ab:e1:e5:d3:05:7b:45:2d:2b:a1:c2:42:0a:20:4b:
11:6a:77:10:84:9f:55:79:9c:4b:ff:b9:a1:25:44:44:cd:67:
aa:18:00:d9:5f:ee:40:8b:07:66:63:6b:04:70:a0:46:51:01:
66:dd:7f:27:54:1a:d2:e9:53:0f:aa:56:a8:2a:88:f5:e1:4d:
33:25:55:42:66:82:7a:65:f6:f9:ab:f1:6b:5b:1b:f3:44:17:
e2:42:6e:bc:c4:5f:3d:33:0e:16:ae:ee:53:03:a2:fa:54:43:
89:27:bf:41:4a:61:fc:d9:78:7b:31:f4:be:f8:b2:fa:8a:4a:
fe:c2:69:5b:2f:28:31:55:5e:c8:67:29:52:94:fe:de:0f:5c:
ac:ea:dd:49:74:1c:b2:1a:94:f1:2b:5a:d4:0f:6c:d3:05:22:
18:33:54:3d:d2:6c:14:a2:93:6b:8c:59:b3:96:12:fb:66:73:
e7:c4:d2:a5:87:34:3a:64:a7:e8:2d:99:91:4d:76:5e:f9:38:
9e:c5:20:d2:12:df:09:f4:bb:47:d1:2a:77:9d:96:1a:9d:b4:
16:74:a4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 22:22:24 2025 by rpki-client