Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aa679cd8-5924-43d7-8928-c65bc2ec3659.roa
File: aa679cd8-5924-43d7-8928-c65bc2ec3659.roa (raw, json)
Hash identifier: WzzfZGUtj8cGUJpoxIBsvM8GI27FfiG4LcjfT1vV8E0=
Subject key identifier: 10:30:C9:DA:5D:41:54:5A:A4:4D:05:00:5F:D6:4A:82:93:BF:FA:3C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2656E0B02C6EC348F8FAC9E97D766361598BB3BC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aa679cd8-5924-43d7-8928-c65bc2ec3659.roa
Signing time: Fri 11 Jul 2025 20:20:55 +0000
ROA not before: Fri 11 Jul 2025 20:20:55 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:56:e0:b0:2c:6e:c3:48:f8:fa:c9:e9:7d:76:63:61:59:8b:b3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:20:55 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=6e7204c9f6c5857801cbdfadf82d24d5cc5e89af526498cc7c54b407b92d4183, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:cb:d6:23:48:96:37:4f:b6:27:ed:f1:32:16:
46:e5:33:35:56:ba:27:56:ac:5e:89:64:46:25:59:
79:87:d3:96:62:2a:b6:32:f8:04:ba:d0:32:40:93:
b6:f3:9a:ef:d1:66:b2:0d:7a:4f:29:64:18:ef:e6:
80:35:9f:68:c8:b1:de:6a:86:96:75:8b:68:f2:15:
44:2c:d4:e3:7a:8e:c0:9f:06:56:46:88:ad:87:80:
44:9d:fa:27:f2:b9:8d:ab:09:54:6c:c1:26:1d:fa:
66:03:f3:33:9d:64:e2:48:0d:34:c0:f8:51:e8:ee:
3b:af:06:e7:08:b8:dd:d7:80:87:10:42:f1:b1:7c:
a7:15:47:3c:f3:dc:26:ae:f3:10:18:5f:01:a0:a8:
4d:20:46:8e:7b:ad:1d:72:4e:11:99:68:36:3d:ba:
91:99:e8:60:ad:a0:37:a3:07:91:b2:1b:80:1f:b2:
69:75:97:85:74:f5:23:14:f9:1d:b3:eb:5f:43:30:
7c:5d:b2:92:87:70:41:22:db:48:f4:51:76:57:32:
87:36:51:a9:39:d0:1f:79:e3:b5:79:47:41:52:02:
3b:33:08:ae:cb:f2:c9:0a:9e:59:db:b2:4e:3e:4d:
70:17:9b:1b:3b:1f:32:3c:35:7f:27:04:b8:8d:b4:
ec:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:30:C9:DA:5D:41:54:5A:A4:4D:05:00:5F:D6:4A:82:93:BF:FA:3C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aa679cd8-5924-43d7-8928-c65bc2ec3659.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:c000::/40
Signature Algorithm: sha256WithRSAEncryption
79:6a:ef:e0:dc:f3:83:75:48:8c:33:dd:96:61:ed:62:4e:1e:
d9:d7:2d:f2:c4:33:78:07:d9:d7:08:c4:c6:0b:fa:8a:42:7b:
b7:4e:db:41:1c:e1:6c:5f:e6:eb:5d:ff:56:12:af:fd:ea:4c:
8d:66:06:2f:46:08:9d:11:e5:0e:3e:32:50:3d:d5:a1:54:db:
65:67:d1:6b:df:81:e0:f3:be:ac:15:50:de:57:71:e1:a6:17:
a3:16:5e:09:7f:bb:20:86:cc:de:ed:ba:81:a2:d8:30:96:12:
7c:27:79:7a:ab:ee:8c:87:63:4a:f5:d0:64:f9:c0:26:04:dd:
e1:29:bd:84:1a:c1:0e:e6:06:df:3b:b7:09:2d:b0:f1:9a:75:
0b:60:f0:80:09:4f:44:42:ef:c5:4c:af:fd:07:41:f9:3c:9a:
db:1d:58:90:d1:c1:0e:c8:eb:b2:ba:cb:68:45:4c:08:4b:9c:
79:c6:dd:56:4b:3c:ce:3b:4d:54:cb:7a:45:96:86:00:80:f0:
e4:5c:3b:d2:5f:13:87:71:37:02:e7:74:b0:f7:0a:a1:1f:59:
12:5b:0b:06:81:da:cb:8b:5b:90:cb:df:c3:a9:ed:b0:b9:1a:
d0:37:13:22:b0:26:09:46:c9:ec:cf:8e:1b:76:3b:18:3f:55:
0c:e6:73:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:59:48 2025 by rpki-client