Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe68f71c-32d4-46a2-be36-53b6d6e7b801.roa
File: fe68f71c-32d4-46a2-be36-53b6d6e7b801.roa (raw, json)
Hash identifier: xGxj5+5B/TItqjs7iOXdao6erCpMKGhKJHYIvwdte+M=
Subject key identifier: 8C:7F:4F:86:7B:9D:57:75:81:2E:C2:C2:22:94:45:A8:9F:16:A5:25
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 627C2590E85472AD858E371E15858B2BA2C7CDD5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe68f71c-32d4-46a2-be36-53b6d6e7b801.roa
Signing time: Fri 11 Jul 2025 19:50:18 +0000
ROA not before: Fri 11 Jul 2025 19:50:18 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:2080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:7c:25:90:e8:54:72:ad:85:8e:37:1e:15:85:8b:2b:a2:c7:cd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:50:18 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=9bca9caeab5a2343756737ac612707bb4255fe9c89d746434ec9e8b0a0274b54, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:11:d7:06:43:03:ae:06:32:41:d1:36:0a:
a7:e8:3b:11:7b:1f:74:66:27:d3:c6:75:57:a9:83:
ce:9e:9a:31:f3:0f:d4:8b:33:32:59:dc:a1:93:4b:
70:02:b6:01:04:31:60:f3:2d:75:5b:07:63:27:21:
a8:63:43:47:b8:19:37:dc:8c:56:ba:eb:36:cc:1f:
d1:02:0e:0f:1b:f2:5c:88:0d:bf:82:d2:4e:bc:34:
54:e1:4e:65:e0:5e:a5:7b:02:77:1a:f6:df:85:0d:
36:31:e2:ee:9a:f9:8c:2a:84:d5:5c:4b:92:7c:cd:
fa:25:3b:24:e7:26:15:58:13:73:08:76:04:c8:3e:
85:9d:97:9d:00:9c:15:c4:31:5f:68:d3:e1:4b:bf:
52:67:79:21:51:bb:87:f0:38:af:56:96:18:72:17:
19:02:e0:4d:7e:09:bb:fc:3b:ba:14:25:48:b0:bf:
85:c9:87:ea:53:00:a3:f5:ed:50:b6:db:94:13:07:
ac:74:da:76:86:ec:6d:eb:d4:33:3c:21:99:31:38:
43:52:ea:3c:ca:84:04:86:23:b1:e8:17:d3:61:a1:
61:98:cf:ef:04:07:2e:14:1a:4c:51:1a:a5:93:63:
74:3e:df:11:f7:b2:35:32:eb:a6:30:68:3b:9b:b6:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7F:4F:86:7B:9D:57:75:81:2E:C2:C2:22:94:45:A8:9F:16:A5:25
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe68f71c-32d4-46a2-be36-53b6d6e7b801.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:2080::/46
Signature Algorithm: sha256WithRSAEncryption
44:41:0c:d6:c8:a2:f3:ed:91:29:6f:63:14:54:b0:c1:d5:4a:
08:07:af:55:27:49:2d:9b:7c:93:28:1f:10:9b:9f:8f:c1:2f:
33:70:67:44:cd:3b:0f:48:92:29:42:64:41:f8:c2:e9:96:0c:
4d:0c:bb:5a:d4:46:3c:19:dd:01:a7:35:54:54:3e:98:3f:32:
ee:d5:ee:69:1c:62:80:8c:ce:af:49:f2:81:82:b4:66:83:88:
f1:c4:f6:be:3d:cf:d1:1c:00:d3:27:5c:41:00:58:81:77:df:
0a:6e:de:dd:dd:a8:f6:89:a5:73:80:3e:cf:17:c7:4b:f1:b2:
0b:f4:77:e8:8d:b6:74:ff:f7:4e:14:36:ea:ab:2a:8a:03:a1:
20:46:4d:a4:d5:79:d9:92:35:7a:7e:a3:a5:73:74:f1:19:8d:
a5:18:1b:78:24:e4:e9:d1:40:41:5f:da:24:08:7c:e6:11:9d:
17:35:4e:62:a1:ef:99:91:48:b2:d2:fa:b2:bb:df:30:1e:89:
a9:34:bd:2a:ce:57:cf:e8:f6:3c:8b:38:48:1b:b9:81:a7:4b:
35:d4:88:02:87:8e:b1:a7:38:d2:0e:8e:66:50:3e:dc:5a:9f:
cc:5b:14:e5:8c:cf:78:f4:24:6b:16:4c:34:91:fa:79:20:df:
02:05:f2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:34:01 2025 by rpki-client