Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa
File: a6c61029-f559-411c-89fd-a1970cac6bc1.roa (raw, json)
Hash identifier: llf111p7eq/1QKeKt2d3QKErqEd14UbBDtWm/Me2jnI=
Subject key identifier: BC:77:AC:96:28:D6:E8:10:30:CB:69:98:7F:AF:B7:2D:96:6C:FA:62
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 03F9EC4BE3243C266C6B63581D4DC9B0C15D0276
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa
Signing time: Fri 11 Jul 2025 20:31:46 +0000
ROA not before: Fri 11 Jul 2025 20:31:46 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:f9:ec:4b:e3:24:3c:26:6c:6b:63:58:1d:4d:c9:b0:c1:5d:02:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:31:46 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=9f4fb04c9da7d190ffe1299e37918bfb7d93357f5fdd874d4f9cf3feb88ff1be, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:1b:23:c1:2b:d6:68:3f:2a:33:01:45:37:
8f:3f:88:a0:78:da:d2:41:2c:9f:4b:9e:87:5e:17:
f5:a2:5b:a2:43:dc:2e:54:b8:f0:be:96:c0:fc:c8:
04:01:a4:87:50:48:66:10:96:da:7b:8d:55:72:88:
0a:c3:83:8f:19:e9:7e:64:a9:52:f3:95:eb:73:33:
7d:e5:31:95:ee:6a:fb:c8:e9:2d:9e:5a:82:8a:06:
62:11:02:bb:33:f8:a4:e7:bd:ec:3e:e1:d4:1b:f4:
29:a1:eb:f1:7e:1c:d1:b5:8e:ef:1a:ff:b3:9d:97:
72:08:82:06:c3:7f:32:1a:dd:9e:e6:cf:8b:00:a5:
61:51:c3:a9:d3:48:7f:f2:dc:97:ad:f4:be:8c:a5:
6e:ae:60:e6:15:a2:c0:0c:e7:e5:54:b3:18:86:16:
eb:5e:0a:5f:3f:94:ed:cf:fe:ab:d6:c0:ab:61:81:
fe:3a:f2:ad:51:98:ad:08:5d:e9:7a:38:18:c0:f4:
86:98:90:e1:e9:ea:3f:65:31:60:eb:13:3c:f9:66:
ea:0c:ac:da:2b:85:22:0e:3d:36:cd:da:da:8c:13:
6d:ad:75:ee:44:5b:61:d9:30:ea:47:e4:fe:08:e6:
9c:eb:f2:f0:4b:59:b2:4d:f9:70:0f:59:ea:38:5e:
df:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:77:AC:96:28:D6:E8:10:30:CB:69:98:7F:AF:B7:2D:96:6C:FA:62
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:9000::/40
Signature Algorithm: sha256WithRSAEncryption
89:47:74:79:c5:c5:a2:98:f7:ca:86:96:a9:4b:16:9d:db:fc:
75:70:94:8c:2d:67:fd:c1:b5:12:2e:b9:a8:32:72:7a:93:df:
ab:94:c1:d9:87:f9:ac:b8:5f:9f:46:68:3e:73:18:9c:6f:9d:
89:03:b5:81:8d:d8:33:81:86:ce:a7:b7:7d:f2:c7:26:b1:56:
7e:50:20:04:bb:20:97:df:59:3c:89:06:bb:51:6b:74:e3:a0:
d1:f8:84:83:a4:f7:25:68:1b:65:f1:5e:b0:db:cc:ac:43:11:
6c:2b:a4:82:bc:ac:60:f3:73:2d:75:ed:18:39:02:d8:bb:58:
a6:16:97:b5:f2:b4:fe:71:bc:47:24:32:18:75:cc:26:7d:4d:
aa:95:a2:3f:b4:36:e9:94:13:ad:5f:f5:92:cf:70:2f:7d:85:
a8:a1:64:ac:d1:1d:b4:3a:44:a9:eb:f5:c6:8d:df:c0:09:6b:
3b:96:04:dc:90:af:c8:94:fe:b2:69:0e:f9:1e:2e:57:94:70:
5e:36:f5:8e:77:98:21:36:ef:46:85:4b:a5:75:79:d0:ff:e2:
68:2e:79:e9:28:88:95:b4:8c:a4:6c:26:9a:26:1f:9f:d6:d3:
b7:09:00:bc:20:92:d0:27:1b:78:4f:9f:6b:73:0b:5f:c6:cf:
7a:4f:cf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:48:57 2025 by rpki-client