Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25b2b0c2-5313-4108-9379-3a551ea46c87.roa
File: 25b2b0c2-5313-4108-9379-3a551ea46c87.roa (raw, json)
Hash identifier: QQlXy9nmSc3DsupGGACplFvDFz0pNDCqXgEyBbCj9bA=
Subject key identifier: 99:9A:C3:71:0A:8C:FA:75:E7:E3:C9:71:9B:8B:E5:CD:7B:A6:3D:1F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2C2614189391A9ED40EF58F623012A578937DDAB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25b2b0c2-5313-4108-9379-3a551ea46c87.roa
Signing time: Tue 03 Jun 2025 20:53:43 +0000
ROA not before: Tue 03 Jun 2025 20:53:43 +0000
ROA not after: Tue 08 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:26:14:18:93:91:a9:ed:40:ef:58:f6:23:01:2a:57:89:37:dd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 3 20:53:43 2025 GMT
Not After : Jul 8 23:59:59 2025 GMT
Subject: serialNumber=4243008aec0c2a1f7d83e47481d41db282e1d860ead3e09047ec45202b31ffce, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:f1:35:5f:54:48:e3:7f:d8:69:83:ca:f2:
58:76:1e:3e:f2:8a:67:2d:e7:81:06:d4:88:8b:ad:
2a:c8:c7:b8:fc:dc:85:cd:f2:b2:f6:0f:01:70:c6:
ed:15:6c:58:a9:57:43:48:38:f4:ca:0f:18:17:79:
52:76:52:a6:e5:ad:0f:a2:ef:38:d1:0e:5d:49:5c:
c5:0d:aa:65:5f:00:f5:57:79:32:02:32:89:85:df:
9e:61:82:98:1f:ef:a7:45:14:f7:26:b9:73:cf:0d:
66:40:6e:d4:e2:e8:5e:a0:66:e0:27:cd:53:cd:8a:
7d:12:d1:a1:d6:95:40:20:fe:d1:3b:d5:5c:68:d0:
44:99:f7:b7:90:c5:63:21:03:31:c4:3e:4b:07:8d:
da:4d:e4:0e:61:aa:a9:32:37:7f:72:ac:71:32:d9:
27:fe:8a:24:6e:65:bf:d0:6f:22:8d:28:98:81:5c:
a1:37:7e:f4:ee:a4:c3:91:7a:7f:25:4b:e3:a1:6c:
95:32:e4:ca:bc:3c:18:17:ee:3b:77:33:d0:fe:ed:
26:0f:94:43:95:6e:4c:ee:90:c0:50:f6:89:15:88:
f1:23:d9:f6:6f:27:47:4c:71:75:e6:11:02:97:73:
a7:80:73:ee:fe:c2:d4:71:6f:9f:db:76:18:86:7d:
41:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9A:C3:71:0A:8C:FA:75:E7:E3:C9:71:9B:8B:E5:CD:7B:A6:3D:1F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25b2b0c2-5313-4108-9379-3a551ea46c87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:c000::/40
Signature Algorithm: sha256WithRSAEncryption
bb:e4:af:e5:a0:61:5d:6c:5f:57:95:ba:a1:bd:6d:a3:6d:d7:
f1:df:cc:b0:dd:99:3c:64:24:1d:8c:70:5f:87:1e:eb:34:1e:
51:6f:df:cd:5c:9a:8a:b3:aa:5f:d3:df:1b:7a:0f:f9:03:af:
75:89:89:70:45:fa:00:19:49:03:32:55:34:30:87:1d:6a:a0:
92:5f:9f:74:b5:dd:ee:3f:81:ea:b5:e1:7f:ea:f3:d6:74:3f:
ff:65:05:a2:3f:48:b8:1d:7b:0f:c5:17:0f:dc:58:24:8b:77:
7d:21:50:bd:89:a9:37:73:cb:14:2b:45:3e:70:89:3c:d5:b6:
b0:89:de:00:35:48:1d:47:71:e5:5b:9f:3b:65:f8:c5:af:7f:
83:6f:15:a3:b0:43:82:ea:83:7a:82:6e:97:c0:34:2e:c8:1b:
8e:ae:18:7d:93:f8:27:79:cb:70:4d:64:ec:70:10:dd:1b:cf:
81:14:87:11:65:94:35:e4:5b:aa:12:24:87:cd:a5:c8:b4:22:
7c:97:b9:a8:a9:5c:8e:22:1e:75:38:5a:f1:a4:81:ad:bc:e0:
72:b0:25:98:61:8b:1a:4b:9c:b8:e7:63:8a:ff:d5:ff:c0:96:
8a:df:6e:9b:ca:34:99:ed:38:a7:86:72:f1:1c:39:f9:33:d5:
ec:bb:1c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:55:52 2025 by rpki-client