Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/becace4c-6c39-4717-a2f1-594859d36d53.roa
File: becace4c-6c39-4717-a2f1-594859d36d53.roa (raw, json)
Hash identifier: 3mR8DeusYUygp5pQz5AbbyHObO+JTqKS4G/yPMtkCNA=
Subject key identifier: 3F:CD:0D:F6:13:5E:A7:D5:A7:04:14:04:AB:B7:C4:F8:AE:C9:15:88
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2449419F3F67CA953091A313445BEFC7C7B56AA3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/becace4c-6c39-4717-a2f1-594859d36d53.roa
Signing time: Fri 11 Jul 2025 20:00:46 +0000
ROA not before: Fri 11 Jul 2025 20:00:46 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:10c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:49:41:9f:3f:67:ca:95:30:91:a3:13:44:5b:ef:c7:c7:b5:6a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:00:46 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=0f5a70ecf01f979aac7ca0a259895626a9e6175d15c24621283903fd5b704ddc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:74:40:bf:ff:e6:73:f6:6e:a7:f5:e7:04:
9e:6f:13:12:57:07:5f:33:9d:ab:9b:25:3e:ee:dc:
7a:fd:ae:01:7c:8b:b0:e0:47:fb:47:eb:00:ba:cf:
76:44:73:14:a9:21:de:41:c1:0d:e5:b3:e9:d9:5e:
93:53:08:c8:67:07:b8:cb:c1:0c:c4:c6:99:3b:67:
de:a9:55:d4:83:4e:00:0a:07:bc:8e:6f:e2:0d:95:
c0:12:44:b7:91:ac:95:b8:9c:0c:63:1b:1c:64:a9:
a6:d7:fb:25:1d:81:9e:3c:bb:84:38:00:aa:19:f5:
86:61:10:9f:49:5b:b6:e9:89:af:fa:fd:8a:87:8e:
a8:71:85:c5:69:32:a4:0f:ab:c6:25:ef:4f:08:ab:
5d:eb:9a:6e:f9:e2:b4:6e:0d:a2:11:41:25:f1:1c:
67:eb:38:84:be:b8:68:e3:74:36:30:ee:64:a9:8a:
8d:73:56:b4:ee:34:ad:ee:26:5a:a5:60:05:f5:72:
96:11:e1:2c:08:55:c8:68:cb:f5:cf:bb:36:96:4d:
a4:96:71:5d:a6:52:85:b8:03:b0:d9:5c:51:77:46:
19:e6:88:1e:a6:19:0e:67:c1:dd:04:e2:52:0f:2c:
83:20:f6:f1:c6:5b:97:8d:89:1c:5f:06:f2:bc:88:
36:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CD:0D:F6:13:5E:A7:D5:A7:04:14:04:AB:B7:C4:F8:AE:C9:15:88
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/becace4c-6c39-4717-a2f1-594859d36d53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:10c0::/46
Signature Algorithm: sha256WithRSAEncryption
7b:6e:29:d1:70:db:88:51:ec:b4:0f:0d:07:e2:fc:b1:a6:53:
a9:97:1c:9c:be:0d:d5:85:db:c8:39:3c:40:48:39:b0:f4:96:
7d:73:0b:71:a0:8b:b7:3d:14:0f:16:ad:b1:76:51:5d:1a:fa:
4a:95:81:e0:d1:64:4e:9d:33:08:36:59:f7:b3:84:2e:02:a9:
a7:73:67:c8:2f:6f:c5:06:33:c1:3a:c9:b3:9d:6c:03:fe:80:
65:55:3a:e2:ac:43:a8:97:8f:66:17:47:d7:1e:41:e5:41:0b:
f5:9e:06:e0:ed:ea:f1:cc:26:e4:4a:43:4a:52:aa:3a:f2:7e:
89:4c:ba:32:64:a0:b4:8e:6a:66:64:f9:f7:70:a1:50:36:91:
a0:e2:d9:63:25:6f:64:36:95:41:93:28:33:fe:79:85:3f:c9:
bf:48:8d:2b:a6:ee:95:e2:6d:aa:d9:31:3e:dc:6d:c8:c9:4c:
be:79:40:fc:2c:0b:7f:e0:18:fa:e4:32:c1:52:9d:82:95:79:
42:ae:83:14:bd:99:e3:21:3a:38:a2:12:92:19:dd:8d:3c:77:
0d:24:15:3d:10:d0:cf:96:51:e9:fc:cc:40:e7:28:ab:25:03:
bb:e1:d6:36:b6:d3:bf:89:ae:c1:df:2b:41:c8:e2:50:40:7d:
22:c5:f3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 03:49:31 2025 by rpki-client