Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
File: cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa (raw, json)
Hash identifier: iibTlegAKYAwPeayIgiXU13+KccOQ0gpOC5Z5ug5KYQ=
Subject key identifier: 57:2F:7C:2A:00:FA:30:EB:C7:EC:9B:28:6B:83:C8:12:0A:EA:33:4D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 12CC05F7D926C237AC495265626D057789E4FE8D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
Signing time: Fri 11 Jul 2025 19:00:09 +0000
ROA not before: Fri 11 Jul 2025 19:00:09 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:80a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:cc:05:f7:d9:26:c2:37:ac:49:52:65:62:6d:05:77:89:e4:fe:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:00:09 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=43a8e2e2ce51f79bca2365794152833baa3cab996194aaf3166b4588ebc1dfce, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:4f:8d:ba:fa:21:15:27:62:e2:77:ac:0b:
0a:06:ad:25:38:ab:48:e6:51:f3:ad:40:58:31:43:
0c:8d:b7:d2:86:90:dd:05:2b:9d:94:39:a0:57:0d:
ff:09:1a:a4:ea:7c:f4:fd:e1:5a:30:24:1f:a3:f8:
5c:c0:de:58:2b:f5:f1:52:75:72:c4:14:24:7d:64:
b3:9b:87:82:6c:d2:8d:6e:7c:54:23:c3:6e:a6:d9:
a6:67:0a:1c:11:0c:3e:05:00:06:e6:60:39:61:c7:
ef:21:ec:0d:67:1f:35:61:86:03:b0:eb:b0:3e:ec:
1d:f3:db:28:dd:74:da:1b:89:0f:8b:da:df:ae:44:
69:67:90:07:20:f1:27:5e:22:a0:bc:ca:20:6f:d4:
43:e6:58:5b:23:0f:aa:96:2e:17:b4:8a:1f:d7:05:
10:b0:2c:58:3b:b5:59:89:cf:69:fe:89:bd:82:78:
2f:80:86:cc:d3:b4:c7:e9:7a:47:5f:76:2c:9f:c3:
47:5b:25:95:8a:e0:50:a7:8c:ae:2c:05:fa:07:70:
ac:95:55:31:1b:1d:8e:76:40:c6:4c:ed:1b:fe:22:
b4:9c:9b:66:4b:95:29:ff:31:03:a2:bb:9c:66:2b:
c2:f2:5a:9a:a5:9b:c9:13:b1:d6:e4:1b:0c:72:a5:
a8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2F:7C:2A:00:FA:30:EB:C7:EC:9B:28:6B:83:C8:12:0A:EA:33:4D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:80a0::/48
Signature Algorithm: sha256WithRSAEncryption
8c:40:29:1e:55:f2:63:86:9a:e8:a6:41:8c:1f:f8:8e:9f:f0:
7d:7a:44:09:a2:c5:4d:a9:64:a9:36:95:ec:44:08:f5:55:ea:
b0:af:c3:81:b2:1a:33:a2:fa:2a:14:24:4c:6e:a5:49:45:50:
7c:28:12:9b:73:74:62:cb:61:f2:99:d3:84:d6:8c:79:f4:f6:
20:7f:28:55:b4:ab:cc:dc:b0:fe:3b:cb:b9:08:42:fe:43:af:
ba:e3:b4:32:5a:c1:54:4f:82:98:c4:3f:3d:fe:02:db:38:79:
e2:8f:a9:72:88:a4:98:aa:a6:47:35:06:f8:a3:a0:e0:8d:34:
6e:05:c3:cb:bd:a1:d6:ee:64:63:69:7d:69:1c:9d:63:8b:2f:
f4:51:ea:ef:83:67:7e:4a:63:f6:f3:7f:eb:43:e4:e8:e1:99:
d1:27:77:59:20:96:d9:25:7a:e0:1a:0c:39:4f:4c:a0:66:5b:
99:62:54:04:51:c2:2e:db:2c:f5:64:5b:46:66:a2:9c:94:3c:
8a:bf:22:09:84:c9:74:e0:94:cf:76:1a:a4:09:f1:bb:9d:32:
cb:87:be:f0:cb:e0:b7:64:3e:c4:06:7b:1d:72:35:c4:06:a8:
62:1b:9f:be:ab:fa:21:a4:74:15:21:6e:b3:f0:4d:35:50:07:
b4:9e:7b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:36:51 2025 by rpki-client