Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4a512a3-4257-431f-b201-8d747948cebb.roa
File: d4a512a3-4257-431f-b201-8d747948cebb.roa (raw, json)
Hash identifier: 8SIAbsFE/AJxyHqWzrCB6MPpXSMMBOlU9WJUEzXRVMI=
Subject key identifier: C4:A5:0B:2C:09:0D:4B:B1:12:40:EB:9E:16:02:70:41:E5:2F:26:B7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7A084CFECFA2CC62F370EBE7CBA39B6D1337E11E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4a512a3-4257-431f-b201-8d747948cebb.roa
Signing time: Fri 11 Jul 2025 19:01:36 +0000
ROA not before: Fri 11 Jul 2025 19:01:36 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:c0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:08:4c:fe:cf:a2:cc:62:f3:70:eb:e7:cb:a3:9b:6d:13:37:e1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:01:36 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=1573f513709922d9f78337af51f28b0b12853ac21fb22b077c74cd7421809b8d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:a5:7e:8a:e3:7a:bb:d6:3c:98:97:71:90:
79:11:af:ff:3b:39:a6:3a:3e:69:f8:9f:ed:5e:4e:
c4:52:cc:7f:07:c6:5b:a7:40:fd:60:9a:84:1e:04:
8f:ae:b5:35:6e:9d:95:bb:1d:0f:68:19:4b:9f:a9:
df:c2:f7:6f:c1:18:db:0b:6f:8e:ff:28:1c:64:95:
d6:a5:68:aa:18:39:ca:29:49:d4:ba:d8:9a:79:b0:
48:91:8f:f1:10:67:f1:97:86:12:d8:81:db:3a:c1:
a6:99:4a:92:4c:bb:87:d1:1b:b7:67:84:0f:f0:c4:
29:bc:b6:9d:eb:11:63:2f:a6:82:8f:10:4a:50:f5:
be:14:73:51:66:4a:a8:22:6c:3b:34:c3:25:ae:4e:
c1:c1:15:f8:7e:c0:cf:0b:62:fc:55:b3:19:c6:a8:
8e:3b:1d:b2:5d:1b:c2:f4:75:7b:e4:d8:3b:54:d9:
a9:37:8e:e6:f6:2b:e3:ba:42:47:07:f5:ae:fc:cb:
3d:92:94:d7:08:1a:43:66:f0:57:78:ca:4e:bb:1c:
b1:dd:0d:da:ec:9f:c1:6a:50:44:58:4b:b0:f1:1e:
4b:6b:98:bf:7c:e8:72:c3:6b:bc:a6:6d:23:6e:fc:
72:99:fa:0b:f4:83:87:5d:00:c7:33:c8:63:92:9b:
20:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A5:0B:2C:09:0D:4B:B1:12:40:EB:9E:16:02:70:41:E5:2F:26:B7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4a512a3-4257-431f-b201-8d747948cebb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:c0c0::/48
Signature Algorithm: sha256WithRSAEncryption
00:64:a1:bf:be:e9:2a:a6:ed:b4:3b:ba:be:70:9c:08:47:61:
73:69:e9:77:57:4c:13:99:db:9b:bc:3a:bb:31:ff:26:39:be:
34:41:4b:8d:e9:45:d1:7c:b7:4e:86:0e:ff:6e:9d:bc:80:f8:
e6:28:39:f7:f2:02:ea:6f:0f:ba:8c:4c:96:99:e4:40:f4:a9:
14:30:ff:30:ea:9c:de:09:60:bb:e4:5c:8d:51:d4:bf:74:21:
fa:16:2b:b5:c5:f3:0d:d7:33:dd:4d:10:23:0c:9c:4d:29:3a:
c2:7c:81:3d:6a:d4:e5:c2:0f:f4:b9:93:65:af:27:7b:a3:a0:
cc:43:a0:dd:54:1a:b3:5c:53:3d:4b:15:c7:27:64:85:26:26:
d2:52:97:83:cd:dd:ec:50:5f:6c:19:da:9f:c4:07:7b:21:07:
19:f6:f1:9b:f9:bf:9c:28:e4:16:8d:64:bf:2d:24:c1:be:41:
f7:99:4f:88:4f:fa:f5:9d:cf:1f:6d:1d:a3:e3:1a:e8:b9:34:
27:a3:33:5f:f9:d1:29:9b:7d:62:54:fc:03:57:dc:6f:15:dc:
d7:4c:a4:b2:53:21:5c:f6:dd:98:2a:26:5d:9a:09:7c:66:1d:
84:92:44:a4:ce:cc:21:37:06:a8:53:e9:5a:0a:57:18:bc:59:
89:55:a0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:44:25 2025 by rpki-client