Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a0c32c3b-d8db-4386-9538-641f27723456.roa
File: a0c32c3b-d8db-4386-9538-641f27723456.roa (raw, json)
Hash identifier: rk7A/OpVgzkfyf/tYJwEafjgvyo+4xP6jKXqDKMdmvg=
Subject key identifier: 1A:A0:A8:CB:06:CB:63:75:11:B4:39:BA:BA:2E:CC:B9:2F:F1:74:BC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5829F3FE170D36D23CC2DE057BE5620AF01ECA50
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a0c32c3b-d8db-4386-9538-641f27723456.roa
Signing time: Mon 14 Jul 2025 16:54:08 +0000
ROA not before: Mon 14 Jul 2025 16:54:08 +0000
ROA not after: Mon 18 Aug 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d059:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:29:f3:fe:17:0d:36:d2:3c:c2:de:05:7b:e5:62:0a:f0:1e:ca:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 14 16:54:08 2025 GMT
Not After : Aug 18 23:59:59 2025 GMT
Subject: serialNumber=855b0833dfcd1521df49fe9fb99a6c49cd8879d78bc8565a523517c9dc6fc071, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:26:a9:dc:3f:2a:9a:1c:dc:1e:c3:9a:ec:27:
f7:6e:29:a3:e4:70:2a:57:81:5d:93:e1:75:8a:f4:
88:b0:e4:21:57:7e:2c:f5:92:e0:24:9b:6b:92:ea:
d3:80:4a:a6:96:1b:3f:8f:f0:93:e6:e9:c4:35:3f:
64:c5:6e:e8:59:f0:a3:9d:27:ea:d6:45:0b:30:87:
5d:52:d8:20:f6:52:55:c0:5c:27:ab:d9:bc:21:b7:
a2:12:f5:56:7e:0f:7a:e4:34:a2:36:58:77:10:51:
9d:be:20:f7:c0:07:d7:16:cf:27:90:62:90:62:cb:
a1:ef:5f:c8:2b:36:52:ab:a7:d7:5b:f0:94:f2:37:
06:41:df:f6:c2:9a:e2:de:71:ee:a1:6a:d8:d7:6a:
eb:c0:a6:b5:e8:2c:d2:b6:73:ff:d4:a9:5d:d8:1c:
0f:dd:a5:db:6e:0f:a8:26:83:4c:21:3a:93:3b:4b:
1f:7b:1b:d7:df:fc:ef:76:85:f1:10:e6:00:e8:34:
6f:a7:39:93:3d:ea:af:6e:f0:2c:49:4c:ba:db:6f:
af:60:e8:d4:a9:9a:35:17:35:5a:4e:f3:87:21:3f:
74:2b:e0:78:54:1b:f2:0a:63:bd:0a:2d:df:af:16:
52:0a:e6:5b:8e:45:c3:39:3c:3c:10:8c:e0:68:ef:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A0:A8:CB:06:CB:63:75:11:B4:39:BA:BA:2E:CC:B9:2F:F1:74:BC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a0c32c3b-d8db-4386-9538-641f27723456.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:5000::/40
Signature Algorithm: sha256WithRSAEncryption
73:8c:04:e5:0e:82:ba:a4:2b:87:53:d5:82:9d:89:2d:e9:db:
7d:e3:4e:25:3e:62:54:08:d9:8c:d1:c1:d8:77:1b:cf:11:ea:
a8:40:b0:84:54:fb:a0:b7:9b:cd:93:6f:c6:56:a9:df:fc:86:
94:50:5a:a6:75:2b:69:f7:0e:ca:ca:d6:b3:a6:e7:ea:d9:54:
65:1e:de:24:d1:c8:f6:37:d1:98:1e:e8:41:80:04:bd:a3:4a:
43:d7:02:eb:14:02:79:b6:fb:0a:45:52:b9:5b:a8:2f:12:14:
a5:b2:59:ae:fd:24:c5:30:65:07:b0:63:4b:59:7d:91:60:bd:
49:2b:00:f1:3e:63:ec:be:79:f4:28:36:18:02:1f:8c:8b:84:
9d:32:81:ee:c2:5a:fa:78:9f:a0:5d:b3:58:37:9a:b6:26:f8:
65:46:42:30:cd:ac:33:87:c6:f5:9f:48:0f:20:0b:d7:87:56:
a5:d7:1f:ad:8e:91:db:27:06:e7:89:d4:25:1e:03:77:d8:03:
52:df:3d:cb:50:12:76:8c:88:40:8c:1a:5a:54:63:0d:57:8d:
86:b6:c6:05:07:71:66:9e:a9:a3:9b:67:89:1c:ae:01:55:be:
5b:9f:66:53:22:d6:e4:b4:60:84:60:a9:4f:91:a7:10:34:c3:
25:78:d2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:36:18 2025 by rpki-client