Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cbd21b9e-7627-4ebc-a1f8-63890b5d4144.roa
File: cbd21b9e-7627-4ebc-a1f8-63890b5d4144.roa (raw, json)
Hash identifier: 90OG7yIy17AHIX0rfFUbtMQoH0HJ3wiQD4jAWnjEdOQ=
Subject key identifier: 59:77:4F:08:CE:F7:F5:7F:8E:C7:96:5E:98:4C:D0:A6:86:E7:25:68
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 119C7B26D5A8FCD04BDEF548263E218D5DF53ACF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cbd21b9e-7627-4ebc-a1f8-63890b5d4144.roa
Signing time: Mon 30 Jun 2025 17:50:48 +0000
ROA not before: Mon 30 Jun 2025 17:50:48 +0000
ROA not after: Mon 04 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:9c:7b:26:d5:a8:fc:d0:4b:de:f5:48:26:3e:21:8d:5d:f5:3a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 30 17:50:48 2025 GMT
Not After : Aug 4 23:59:59 2025 GMT
Subject: serialNumber=905678ab6f10ad79021b8e46db794a8dd34095090d2a2b4569b9d2385e1c0f9e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:fb:85:03:2a:02:0e:4b:2a:c4:67:c9:08:
84:73:85:49:20:04:7b:6e:bf:9d:8b:39:27:07:aa:
2a:0f:e7:3f:79:8e:66:67:2c:cd:5e:53:93:c1:89:
d7:ea:d1:d3:fa:b2:94:41:b0:94:15:84:af:22:90:
e0:d6:23:c6:ed:4c:fa:ea:36:94:40:72:68:6c:db:
2d:65:7d:0a:da:49:c1:46:4f:e9:98:1b:a3:ab:83:
fd:c0:67:79:01:4b:db:18:82:57:e9:f3:ed:6f:99:
25:8b:c0:94:c7:09:37:3d:8c:df:6e:17:cf:0f:2e:
0c:f0:73:01:9c:ab:06:ed:ae:38:a8:b9:01:1b:f1:
89:8b:ad:35:3a:ee:48:93:8b:1f:dc:ad:32:33:65:
1f:b1:e4:80:4a:bd:8d:84:fa:9e:f7:87:11:31:a9:
b7:03:48:0a:75:b9:92:cf:53:21:69:5b:05:52:29:
a2:5a:1a:65:e4:91:40:46:ad:41:23:93:64:16:1a:
48:b2:cc:47:de:e8:f8:09:07:17:d5:ad:d0:00:08:
80:01:ad:95:71:88:a0:fd:0c:9a:47:3c:5c:3d:95:
7b:1b:e8:6b:52:6b:61:ea:31:4f:59:50:76:6c:2a:
76:af:aa:59:8b:93:e9:88:66:d7:a5:d6:2f:99:b9:
9e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:77:4F:08:CE:F7:F5:7F:8E:C7:96:5E:98:4C:D0:A6:86:E7:25:68
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cbd21b9e-7627-4ebc-a1f8-63890b5d4144.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:800::/40
Signature Algorithm: sha256WithRSAEncryption
ab:c4:a9:a0:60:a2:1f:28:07:2f:12:e6:8e:1d:a9:4b:1a:34:
14:9c:72:50:e7:b0:72:f7:0b:77:1b:27:eb:bf:4b:32:d4:ff:
ce:1b:26:67:26:b1:54:2e:c1:88:23:6f:c2:9f:83:d9:1c:41:
91:cc:fe:e4:da:9c:34:1e:12:9a:ca:ea:ab:a2:85:b2:1c:72:
ff:a9:cc:a0:eb:7b:ce:89:26:e9:39:03:7b:32:ff:60:82:5b:
d7:67:07:0a:70:fd:d3:e3:ed:f8:24:df:36:c3:40:84:61:f0:
95:ce:fd:3e:13:f0:5d:b3:b2:78:15:9a:88:67:ac:75:fd:4f:
f7:0f:ff:11:59:6a:db:df:ef:bb:69:0f:03:1b:0f:25:06:32:
af:8b:f1:48:33:99:84:0a:b6:a7:e4:5e:da:9b:5b:5f:1d:f1:
fe:02:97:44:5e:ca:6b:46:80:36:3d:47:41:b3:89:02:f5:75:
b0:cb:c6:19:fc:9b:ca:ec:34:a8:54:5d:c6:c2:c3:26:52:ff:
14:73:29:2e:b0:ac:14:fe:68:a5:0f:e6:3e:c6:50:ec:00:d3:
c7:cd:e0:0c:a9:91:2d:f3:c6:a9:ba:42:03:4e:a1:8f:85:8c:
ba:1c:9c:1b:4a:b1:54:3d:c6:b5:31:ef:62:5c:94:a5:bf:21:
9e:18:67:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:51:45 2025 by rpki-client