Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa
File: ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa (raw, json)
Hash identifier: XOW+p1PfS8zI/pKC8DPqvoV08oJZoGssZg965t8o0D0=
Subject key identifier: BB:75:A9:C8:DB:4C:F1:47:48:FB:A4:C1:58:89:11:54:CA:84:8E:05
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6341B3ABD5D3E826DDBA78DFC4D6EE48748ECB53
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa
Signing time: Sat 12 Jul 2025 00:50:20 +0000
ROA not before: Sat 12 Jul 2025 00:50:20 +0000
ROA not after: Sat 16 Aug 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:41:b3:ab:d5:d3:e8:26:dd:ba:78:df:c4:d6:ee:48:74:8e:cb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 12 00:50:20 2025 GMT
Not After : Aug 16 23:59:59 2025 GMT
Subject: serialNumber=053d96277be079b74a620c651d2566e46674c458f3a21f5bc0bb1ee6b1ff8957, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c6:42:83:fd:43:9b:5e:1d:3f:ae:54:d2:9d:
9e:35:b8:99:00:49:c8:32:e0:1f:37:2a:b9:7a:24:
12:5d:61:48:42:a1:01:c8:af:63:09:c3:b5:24:a2:
57:ea:e9:94:35:5c:80:2f:5d:0f:2a:cc:f6:62:2b:
71:9c:54:e8:48:c1:6e:de:91:f5:60:94:b2:62:ff:
fd:95:b0:23:1b:c5:1c:77:16:e1:d8:21:67:95:c6:
04:71:e1:d6:c7:0f:03:90:e5:39:e8:27:27:5a:75:
24:86:56:a9:fc:21:41:45:a5:4d:56:b7:57:8b:e4:
73:dc:da:62:2f:db:3e:0d:c9:11:02:77:33:e8:f8:
82:b2:40:0c:5f:80:b6:85:d4:09:e3:b8:4e:92:55:
4b:4a:94:1b:e1:bb:50:30:69:60:83:c9:55:dd:ff:
ff:ec:46:eb:cd:a4:02:df:69:db:e9:bf:d6:8b:a6:
64:ec:7d:e6:c9:14:67:4c:a3:cf:27:c0:22:0d:d7:
2e:17:24:9f:c2:8b:a5:12:57:e8:0a:90:3a:4d:57:
b9:96:0f:7c:87:1f:0e:49:e5:19:0a:bb:ea:1d:24:
22:2d:8e:e8:ca:25:1d:a3:a3:10:79:b3:c1:88:94:
37:2b:b0:70:57:82:5b:97:65:f8:4b:33:44:d8:21:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:75:A9:C8:DB:4C:F1:47:48:FB:A4:C1:58:89:11:54:CA:84:8E:05
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:4000::/40
Signature Algorithm: sha256WithRSAEncryption
6d:fa:14:55:45:98:d8:28:c2:97:73:81:f6:01:09:c5:3b:38:
fd:a8:f9:cf:ec:24:0b:18:01:7c:22:0c:a8:e1:b7:ae:41:db:
05:2d:56:e5:f0:54:03:cb:17:e3:5d:01:cd:86:4d:f3:ce:05:
7c:d7:3c:50:2f:8f:1a:5b:f3:9a:e1:0a:5b:4a:f9:e2:31:37:
92:ab:8f:69:81:a7:d6:6c:7c:3a:e4:e0:80:24:ea:eb:69:4d:
c9:a6:19:37:7e:9a:84:c2:5f:41:7c:a6:ee:0c:46:4a:2e:c3:
f7:15:48:11:26:4b:3a:07:cc:42:6d:f8:ea:57:b4:db:2e:c3:
e1:fc:66:0b:43:2a:04:16:8f:13:4c:fc:c5:ef:5e:9e:7e:4c:
b6:eb:d8:17:df:01:0d:46:43:f2:d5:80:cd:42:69:45:c9:78:
03:4a:63:f0:a3:7a:c2:15:c6:86:ba:19:7f:46:3b:bb:d5:0a:
91:88:2c:7f:9b:c4:b7:25:85:5f:f1:bc:ce:f7:bb:6e:8e:34:
81:00:c1:0b:6d:31:d0:e7:7d:1a:da:55:86:b0:b2:6d:8b:29:
15:1d:17:e7:d3:88:d0:f6:b3:19:74:b5:b8:1c:89:cf:33:c8:
a6:35:c9:74:7f:39:ff:19:da:06:42:0b:b4:84:2a:d8:58:6d:
57:54:5b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 03:48:03 2025 by rpki-client