Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea31a166-ce12-4108-9868-894ac9df0e65.roa
File: ea31a166-ce12-4108-9868-894ac9df0e65.roa (raw, json)
Hash identifier: zjiEjHxdq8s+hXYlsITySw7xofIGvkAWQBCDWT2L24A=
Subject key identifier: 4D:6F:34:4E:30:8B:E2:06:FE:5F:20:33:62:E5:3A:6A:14:C5:A0:53
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0A10DFD42403F563323B0D0FA45800FB1ED6CFF7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea31a166-ce12-4108-9868-894ac9df0e65.roa
Signing time: Fri 11 Jul 2025 18:50:15 +0000
ROA not before: Fri 11 Jul 2025 18:50:15 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:b080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:10:df:d4:24:03:f5:63:32:3b:0d:0f:a4:58:00:fb:1e:d6:cf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 18:50:15 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=9df4d66ef81cbee1cc25b32a6c60d17098d60d89108cfe383b02778426a52a27, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fc:81:6f:8c:c5:2e:fb:8e:e3:f2:35:15:88:
cb:69:78:cc:fa:9d:a7:9c:07:be:43:49:4d:7b:5a:
0f:88:5d:6d:86:61:44:60:bc:ef:92:d0:4f:0d:8c:
1a:ad:c4:08:d3:62:4d:1b:b4:2f:63:f7:44:6a:63:
a7:1c:59:30:71:2b:56:57:31:93:a2:a3:b3:b7:1b:
ce:5f:d3:f3:63:92:64:9b:92:82:09:eb:a5:80:cc:
5c:6c:c1:ec:cd:26:93:e9:7d:19:45:53:5a:d5:f6:
cf:92:ae:31:0f:7b:3c:be:f6:05:28:e2:54:11:24:
79:93:8c:59:ab:fb:ae:28:c4:1a:74:5c:46:d7:09:
40:2f:4a:55:91:b2:14:ef:60:5c:83:36:52:51:0a:
b0:6b:29:d4:ff:25:8d:cd:4c:b4:28:5f:51:bb:eb:
69:59:81:a5:1e:18:88:26:35:5c:f2:35:2e:77:5f:
37:41:60:73:d9:ba:01:16:ba:15:90:e2:8b:03:f1:
b1:ca:ce:65:69:7d:d6:23:81:48:ea:0b:0c:d2:b6:
41:03:29:16:bb:a6:70:5b:58:11:ff:b6:b5:c6:a2:
e0:3d:28:1c:95:c2:66:51:4b:80:01:37:15:0a:c1:
db:26:ba:4b:9c:c8:86:b3:6e:89:b9:eb:7e:7d:e7:
8e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6F:34:4E:30:8B:E2:06:FE:5F:20:33:62:E5:3A:6A:14:C5:A0:53
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea31a166-ce12-4108-9868-894ac9df0e65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:b080::/48
Signature Algorithm: sha256WithRSAEncryption
10:df:bd:8b:90:63:b6:9e:7f:93:23:c1:58:dc:f1:81:b2:be:
43:a0:7e:0c:57:14:b0:c7:5e:f5:25:0b:5c:22:1f:48:42:30:
52:46:19:8b:3a:40:54:f0:82:cf:9d:33:b8:a3:b0:a9:ec:d6:
74:43:ea:55:04:78:ea:d7:53:db:ff:63:1a:03:b5:0b:1d:73:
6f:3f:a4:8a:3e:66:6b:22:64:29:51:c4:85:5e:90:64:c9:29:
f6:31:af:e4:16:7e:1c:9a:2a:50:dd:5d:87:85:58:bb:37:c2:
79:29:a4:e0:b0:72:92:17:e1:ed:ae:0f:fe:72:b8:6a:b9:46:
c4:1d:46:f2:8a:44:36:64:4e:80:7e:09:aa:b9:d2:26:6e:7c:
bb:d0:b6:c2:de:04:e1:00:be:ce:a5:62:90:05:87:ca:8e:19:
df:07:de:d9:00:27:bc:3b:55:71:4e:da:b3:8c:a2:b3:b3:16:
c7:bd:2e:5a:7b:e4:9d:a5:ff:65:5b:e8:7a:13:b1:ad:78:8e:
9a:d7:12:a1:06:24:86:df:67:e3:fe:60:30:ce:17:40:1b:7a:
a4:bd:a7:4a:aa:a9:0f:68:cb:b9:ba:a6:62:d4:48:be:27:20:
92:5b:21:88:ee:cf:52:07:8f:38:00:fd:9f:47:1f:97:45:6a:
bd:62:89:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 22:23:40 2025 by rpki-client