Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aaddf2de-fa05-4c5d-8b77-58a3d312e2a6.roa
File: aaddf2de-fa05-4c5d-8b77-58a3d312e2a6.roa (raw, json)
Hash identifier: mX/Sx03zK0y6GJp0c/5SEJXlcNgjEfURx0aefxL4vyg=
Subject key identifier: E4:18:75:B1:25:86:DC:2C:F3:F1:CC:32:3E:60:FD:98:F3:59:E1:E1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 01FDAC729FE44375535B32BC5B378E8074AC2931
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aaddf2de-fa05-4c5d-8b77-58a3d312e2a6.roa
Signing time: Fri 11 Jul 2025 19:01:03 +0000
ROA not before: Fri 11 Jul 2025 19:01:03 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:a080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:fd:ac:72:9f:e4:43:75:53:5b:32:bc:5b:37:8e:80:74:ac:29:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:01:03 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=6dfcb7049a714b93e635e40183df6ed92b794f4817dfd77b83ae6022b49fa291, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:94:a5:16:17:e0:9f:7f:f7:e7:21:ad:da:
87:b8:85:69:b2:91:71:34:c7:81:c1:e8:3d:e5:96:
1d:6a:c6:48:b6:ff:e0:8a:41:09:be:0d:47:f7:85:
a4:b8:ac:0e:70:fc:ae:01:01:25:7e:b1:76:73:58:
54:b2:ed:d2:61:96:0a:1a:32:2b:cb:3c:df:f2:20:
ac:13:73:22:00:e0:b4:30:63:92:ba:06:05:d4:72:
53:f6:4a:c1:67:97:e8:05:e1:7c:80:1b:0f:1a:42:
1d:23:d9:b1:30:9c:80:df:59:02:7b:f1:6b:97:37:
e1:cd:c5:05:ec:ef:d9:ad:81:1b:44:f6:59:81:6e:
41:37:c5:46:e4:24:e7:6f:7f:50:d9:fe:ea:dd:17:
f4:90:ec:2f:cc:c5:88:9c:4c:72:36:3e:0b:88:0a:
19:60:82:9c:7a:73:ee:47:bb:6c:ec:a2:1d:d9:4e:
d9:b7:56:5e:23:1c:4b:66:e6:e5:6d:b2:66:37:f6:
ef:2c:d1:e7:c1:32:c3:72:50:37:8e:bf:dc:b1:11:
c1:5f:98:a3:f9:78:4a:57:f9:2e:94:16:87:5e:e6:
f3:6a:38:08:3e:92:06:66:bb:12:1a:f7:77:f1:61:
17:4b:c1:53:0d:98:f0:34:1c:a7:18:3e:b7:f4:9e:
11:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:18:75:B1:25:86:DC:2C:F3:F1:CC:32:3E:60:FD:98:F3:59:E1:E1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aaddf2de-fa05-4c5d-8b77-58a3d312e2a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:a080::/48
Signature Algorithm: sha256WithRSAEncryption
57:30:3c:ec:4a:ac:b1:60:ba:a9:df:1b:33:8a:42:8f:2c:f0:
9e:78:ba:f5:4b:38:d1:e0:a3:b1:d9:1e:31:d8:18:1c:93:11:
92:34:f8:5f:06:07:c2:19:f0:91:23:a3:9c:31:41:c3:3d:41:
7f:8b:d8:fb:cf:ef:97:29:ce:c6:16:c9:40:3e:d8:2e:9b:1e:
5b:b5:87:44:74:8d:bd:a7:12:97:8f:2f:0f:92:88:29:37:5d:
3f:8d:f8:81:b3:3c:6f:0d:1d:d2:47:27:5c:f0:f8:ae:cb:10:
9f:01:a4:0d:9b:77:82:14:25:2d:ec:7c:4c:b6:50:19:52:90:
10:6e:06:fa:89:41:69:0f:1b:7f:4b:e1:a1:cb:7c:ed:d6:43:
56:1b:ae:5e:87:cb:45:7d:fb:49:8b:bd:73:1d:8a:3c:e4:4b:
44:66:e6:9a:7b:08:62:d6:37:cb:f6:3d:7e:2c:5a:1c:7a:8f:
51:e2:02:c9:e6:4f:5a:87:12:30:1e:79:2e:e5:ff:c2:3f:ff:
31:72:65:c6:ad:e6:b8:af:d2:4b:8e:4e:f5:fa:92:a2:45:88:
95:95:8d:65:b2:7a:e9:38:97:9f:f9:6a:e8:46:80:68:74:59:
3b:ae:dd:72:66:6f:4b:c9:bb:3a:7e:80:50:8a:c6:df:e2:8c:
9a:5d:5f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 22:22:25 2025 by rpki-client