Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/130bb518-ca36-43ed-b8dd-0345f5c1b3b1.roa
File: 130bb518-ca36-43ed-b8dd-0345f5c1b3b1.roa (raw, json)
Hash identifier: e0c8mxOhsNSiHdhhS82dqwmoCd77bm0ShBIebJBXH+M=
Subject key identifier: 0C:66:D2:6E:AE:45:CC:EF:6F:04:17:FF:7C:FD:7E:A1:58:71:65:A7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7AA85F7717599A09A40773D77D8876071A44D552
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/130bb518-ca36-43ed-b8dd-0345f5c1b3b1.roa
Signing time: Tue 03 Jun 2025 20:53:44 +0000
ROA not before: Tue 03 Jun 2025 20:53:44 +0000
ROA not after: Tue 08 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:a8:5f:77:17:59:9a:09:a4:07:73:d7:7d:88:76:07:1a:44:d5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 3 20:53:44 2025 GMT
Not After : Jul 8 23:59:59 2025 GMT
Subject: serialNumber=b0feaed331ef11b45285591b7d82d2bf577fcb12e3e96af1518e6433ae9434fc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:8e:0a:0d:43:36:c8:c2:12:0d:59:35:3c:
7a:9a:2b:dd:a2:69:39:8d:0c:ac:15:2b:16:ec:59:
8a:f0:8f:0b:f5:ea:91:35:4a:df:ba:9f:f0:c4:6b:
ed:b6:8d:56:c6:20:4c:49:43:4f:73:3c:5f:64:52:
ee:e5:5c:e3:07:ca:21:3d:a4:f4:12:00:62:46:9c:
5f:65:2d:da:fb:ff:fb:fa:41:08:39:3d:d6:0b:a7:
51:98:07:34:66:e0:a0:3b:44:7d:51:b3:24:b0:45:
ed:19:16:ca:b7:09:3c:24:74:8f:14:29:7e:7a:39:
a5:bc:30:c6:4a:d3:15:d9:71:9c:ff:c4:73:fa:04:
1e:44:25:ce:75:e0:cb:0d:40:5a:d4:02:ba:de:58:
f8:25:4f:e2:ac:10:79:5b:60:28:6a:ab:18:db:89:
6a:75:dc:46:a9:5c:ba:83:46:45:46:cd:a8:54:c9:
cb:0d:11:ba:99:67:d9:3d:b7:7f:b4:1d:d3:f6:ed:
9a:ac:df:9d:80:76:fc:46:db:9e:0a:2b:58:8a:51:
b4:96:3e:91:79:0c:62:fa:39:44:ef:cb:2a:e0:29:
f8:91:04:51:de:0b:d4:2a:69:e0:7f:98:a9:af:e1:
f7:0b:c0:a5:47:e5:db:50:3f:31:c2:00:fc:73:da:
fa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:66:D2:6E:AE:45:CC:EF:6F:04:17:FF:7C:FD:7E:A1:58:71:65:A7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/130bb518-ca36-43ed-b8dd-0345f5c1b3b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:e000::/40
Signature Algorithm: sha256WithRSAEncryption
75:2c:e3:9d:37:f7:99:0f:99:33:e5:42:81:25:dd:e9:26:bc:
d1:a6:d5:7f:76:20:90:a7:ee:7e:a1:58:bd:64:bf:b7:a0:60:
f4:5e:c4:08:b0:8e:ed:e4:90:d2:f2:45:87:f0:6a:d7:14:b3:
14:b0:98:67:a2:45:70:09:cf:fe:f1:24:a6:fc:2b:41:98:b7:
bd:ad:85:8b:df:3f:f2:a7:7a:57:51:b5:a9:9d:07:fa:b1:d9:
06:41:b2:02:0c:04:3b:fa:32:1b:0b:01:10:d5:81:2a:1b:e9:
8f:35:8a:70:09:e2:cc:e2:86:31:d5:6e:fd:d9:1b:04:7a:79:
c0:1d:83:8b:a2:89:b0:c7:11:24:71:7c:c1:d0:af:3d:22:18:
f0:30:7c:54:69:67:a1:82:c6:03:03:39:14:4b:29:01:91:d9:
da:e4:92:7f:07:26:52:c5:63:8e:c0:19:9d:87:71:ce:f4:0a:
db:2a:c8:0c:8e:6a:e9:5a:2f:1b:13:8e:5f:5b:09:78:30:13:
ff:73:4a:6b:fe:b8:e7:6f:a6:55:cb:1b:2a:5a:fc:29:d3:76:
d0:e5:ea:00:a0:89:9a:48:a2:f6:78:1f:eb:12:a1:2b:41:15:
01:e2:86:7c:d3:fa:8e:49:5b:c6:2c:c9:d7:ad:83:8a:83:22:
96:6d:b2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:25:05 2025 by rpki-client