Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc69f8f6-03c8-4468-a98a-f23fe40eeaef.roa
File: bc69f8f6-03c8-4468-a98a-f23fe40eeaef.roa (raw, json)
Hash identifier: O74iDfwHUq22rL+6qctB06i5CPMWBu0UFvxjfaY+OL8=
Subject key identifier: B2:7B:39:56:FA:33:89:04:D1:D5:97:03:0C:F2:C6:D9:83:C9:70:42
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6CEA6A7AE8299A0006F618BEB08D74441A837DE8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc69f8f6-03c8-4468-a98a-f23fe40eeaef.roa
Signing time: Fri 11 Jul 2025 20:31:39 +0000
ROA not before: Fri 11 Jul 2025 20:31:39 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ea:6a:7a:e8:29:9a:00:06:f6:18:be:b0:8d:74:44:1a:83:7d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:31:39 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=05131f48f1db5149a26dfcae827843ce302d61625b8425a080765f700cb97044, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:8e:94:85:20:0e:77:6b:fb:e5:63:2d:9c:
b3:2a:04:f4:11:65:e4:2a:84:a9:6a:30:05:a7:5a:
28:aa:30:e3:bb:44:12:bc:75:9e:d7:9b:97:6d:e6:
8d:64:d5:81:78:87:d0:1b:29:33:1f:69:7a:86:25:
ed:83:f3:e7:56:b8:6e:19:81:46:22:6a:d0:e3:56:
61:a2:3b:63:b9:d5:e4:ec:1f:63:b5:30:56:08:77:
76:8a:b8:36:b4:d2:a4:cf:04:dc:56:cf:92:ed:36:
b1:63:df:ef:f4:2c:c1:96:c4:97:c2:dc:d4:ac:f3:
85:4d:33:d7:20:a7:72:20:00:e1:48:6a:7d:d8:a3:
8e:dd:7b:93:2a:14:61:fb:40:b3:f2:b2:71:57:01:
20:a2:3a:61:a8:d3:f4:fb:28:b4:e4:1d:93:3d:d3:
0a:41:15:47:10:e1:ca:ca:45:3b:9a:28:1a:ad:aa:
62:83:30:03:08:f8:a6:c2:fc:a6:fe:f3:d6:74:b2:
7f:80:3e:0d:99:85:35:7c:4c:04:a1:35:30:ce:a8:
69:61:f1:5d:55:0f:38:76:07:63:44:36:9a:d7:33:
08:52:b1:81:9c:39:51:a6:b0:d0:8f:4c:c1:8f:60:
77:e8:2b:d4:89:27:c8:eb:09:30:40:be:00:44:f0:
75:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7B:39:56:FA:33:89:04:D1:D5:97:03:0C:F2:C6:D9:83:C9:70:42
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc69f8f6-03c8-4468-a98a-f23fe40eeaef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:5000::/40
Signature Algorithm: sha256WithRSAEncryption
9f:81:59:64:f3:c2:25:d1:a5:c7:0e:0b:78:f8:c6:42:dc:23:
4d:f0:60:9b:1f:db:c7:af:4d:39:28:7d:a3:a7:fb:83:00:12:
7c:1f:b7:55:1c:d8:87:a6:bd:80:18:0e:7f:5c:32:cd:bd:5f:
09:4b:f7:82:07:81:3c:69:f0:c5:8f:ee:59:68:14:65:16:a6:
06:46:2e:60:e6:1e:dc:1f:3f:2c:45:f2:f6:9d:c1:53:32:6a:
21:9c:ec:f6:c3:b3:e4:03:01:d6:b7:a4:67:01:a8:ad:7f:a6:
f0:59:dc:ec:56:c0:a2:84:a6:43:77:4b:5b:0e:63:3f:e5:3e:
6a:c0:4d:84:30:c9:15:cc:b5:2e:dc:a0:f1:42:64:68:64:8e:
29:32:8e:a0:7e:b2:19:ea:56:22:86:50:66:85:76:5f:1b:e2:
28:6d:b1:5a:6a:9a:91:0f:f4:57:e8:e2:0c:86:36:be:47:95:
f6:30:f9:1a:87:25:d0:b7:11:07:8e:af:b8:2d:84:65:15:c5:
5a:cc:a3:9c:59:7a:dd:23:ff:a2:67:af:c8:73:b7:c6:bf:bc:
f0:7f:16:5f:69:d5:f7:8e:bc:67:5d:96:9a:3f:90:38:2d:b2:
e4:ff:73:cf:9b:90:79:ee:c0:20:94:bd:e6:92:2e:ba:1c:72:
7b:4c:d2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 00:00:18 2025 by rpki-client