Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0d7cce47-064e-4ba2-aec5-2acc2ca04a59.roa
File: 0d7cce47-064e-4ba2-aec5-2acc2ca04a59.roa (raw, json)
Hash identifier: y5bfwCvyen1LgTlZv75w38E693D3al7MA315zChyF0A=
Subject key identifier: C4:B0:42:56:EC:5C:43:3A:34:BC:8A:37:2F:D9:EE:BE:77:30:66:2C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 715CF76AC5C1D0753833A162C732FE2BE8BD1BE7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0d7cce47-064e-4ba2-aec5-2acc2ca04a59.roa
Signing time: Fri 16 May 2025 17:40:16 +0000
ROA not before: Fri 16 May 2025 17:40:16 +0000
ROA not after: Fri 20 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:5c:f7:6a:c5:c1:d0:75:38:33:a1:62:c7:32:fe:2b:e8:bd:1b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 16 17:40:16 2025 GMT
Not After : Jun 20 23:59:59 2025 GMT
Subject: serialNumber=bd01cc88af1281e78e6293fca9799cfdc3576077ab9b18771513400a864dacf4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:f6:e7:7e:53:04:ab:17:f8:91:79:6a:a1:
52:5e:a9:3c:e9:d8:f3:04:c4:01:80:1b:34:19:d9:
3d:c5:41:e3:32:8e:c7:c3:58:70:3a:a0:4b:23:d2:
4a:5e:99:bb:9a:e7:a0:50:b6:55:42:4a:a1:6d:c9:
45:ea:48:8b:56:ae:a5:a4:f1:e5:ad:da:dd:5f:30:
7a:e1:7d:6d:7b:e6:6a:c6:95:ba:a8:6d:20:fa:ac:
f9:ed:58:8d:e9:03:bd:c2:38:2f:5d:96:2e:b8:83:
f7:ce:24:1c:7a:fc:13:64:d5:bc:95:1f:5f:75:ea:
d1:a4:0a:85:7a:a5:0c:4c:91:b6:a7:ae:70:72:dd:
cb:15:f3:fe:75:41:d6:41:aa:f4:e9:40:06:d6:68:
26:22:f3:64:57:1f:dc:21:19:36:93:5c:fe:08:3f:
07:c4:40:86:f4:4e:69:d9:e8:c5:76:47:6f:af:b4:
84:f2:8f:93:f0:7c:89:57:33:08:c8:8c:df:ea:55:
ac:c4:b3:18:5e:01:c3:98:b5:e5:56:56:08:51:28:
fd:ef:72:77:2a:f6:ef:f6:34:55:70:85:e1:88:29:
45:ab:6d:5c:2b:66:f0:3d:4e:fd:5f:87:e3:4e:12:
c1:9a:50:46:9f:96:53:6f:30:0d:8f:64:c0:1a:13:
0e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B0:42:56:EC:5C:43:3A:34:BC:8A:37:2F:D9:EE:BE:77:30:66:2C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0d7cce47-064e-4ba2-aec5-2acc2ca04a59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:800::/40
Signature Algorithm: sha256WithRSAEncryption
5b:24:b5:fe:5b:a0:9f:93:2f:c6:c7:2f:af:70:9c:d1:2f:0c:
05:f2:c0:f2:46:7b:dd:27:fb:fb:b6:c8:53:4c:ca:d2:40:20:
5d:23:6a:30:12:b3:24:1f:97:93:64:f9:dc:b0:30:51:03:8c:
a4:0e:4b:ea:89:a8:69:a5:7f:56:69:cf:72:1a:e4:b2:4c:3b:
54:75:ba:69:4b:e0:89:11:2e:0c:f4:d5:06:97:6b:65:3f:c8:
4c:72:83:21:80:58:1e:b4:0a:e3:4c:bc:24:38:ad:78:65:35:
44:4e:9d:88:3b:28:3d:a9:b0:6c:4d:72:fb:0e:76:79:b1:55:
66:cb:7c:34:52:ba:fa:c1:58:ff:5b:51:8b:49:d8:fa:1f:4c:
a7:64:de:3b:49:c8:07:60:87:5e:9e:bf:58:c4:84:9b:4d:0e:
a4:00:ff:eb:58:38:7c:64:f3:1b:cd:6b:72:35:c8:26:92:36:
62:ad:eb:37:f2:56:43:e1:77:16:73:52:60:10:fc:69:3b:33:
9d:55:94:49:2b:42:3f:22:e7:3c:0e:0a:41:89:1b:7f:86:5c:
eb:f4:b2:48:f5:bd:1f:ab:c1:3b:e7:e6:a2:6e:8c:57:29:fe:
43:72:c8:8c:4b:c9:4e:b9:04:69:7f:32:ab:b7:7d:ce:80:cc:
63:10:23:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:25:04 2025 by rpki-client