Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48202432-610c-42b2-9763-e895c6cbe70d.roa
File: 48202432-610c-42b2-9763-e895c6cbe70d.roa (raw, json)
Hash identifier: QsK8ce0hHBYgx4OSC+99h9aOa36LRabQ3FHTdr9i/KQ=
Subject key identifier: 72:EB:73:96:D6:EE:05:F9:47:77:22:84:D5:67:8A:A2:57:AF:3A:63
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7B8D06949CCC6C1F1645EF1E76EFDA9D752123AD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48202432-610c-42b2-9763-e895c6cbe70d.roa
Signing time: Tue 13 May 2025 18:30:33 +0000
ROA not before: Tue 13 May 2025 18:30:33 +0000
ROA not after: Tue 17 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:8d:06:94:9c:cc:6c:1f:16:45:ef:1e:76:ef:da:9d:75:21:23:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 13 18:30:33 2025 GMT
Not After : Jun 17 23:59:59 2025 GMT
Subject: serialNumber=7ad76662840f761129eea0e386db720e95e46e999d5abe84bf05eac9e7c0a302, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:6e:33:18:79:48:32:95:5c:25:97:bd:e4:
21:37:66:c2:32:f8:0b:6d:59:47:41:2a:b3:be:8a:
37:68:21:98:51:1a:45:64:e7:9b:a2:42:e9:71:cf:
c3:66:06:ac:7b:5e:1c:ad:56:ac:17:8b:5a:59:71:
36:d0:87:18:6e:73:aa:7e:f2:88:05:88:bc:f7:fa:
2c:c0:05:84:ec:2f:59:3c:c9:33:dd:e2:cd:10:a2:
46:4a:36:ad:0b:5b:31:e5:1c:d4:43:95:d5:43:4e:
b2:9d:22:fc:0e:09:18:5d:02:b3:9d:bb:be:2e:cf:
2e:91:05:bd:4e:20:07:8e:f8:a4:9f:25:6f:c1:58:
56:85:c8:9a:08:d8:03:63:27:07:ad:9f:ec:b8:95:
2b:29:8d:e4:49:31:55:23:2c:c5:75:60:e2:84:49:
07:40:fb:44:7f:67:b6:d8:4e:24:51:5d:af:14:b4:
ee:38:d7:e2:53:bc:96:4c:91:8d:bc:fd:4d:80:f7:
09:49:dd:37:f2:5b:2e:6a:98:93:16:ef:a3:b0:03:
73:8d:45:44:10:f0:f6:6e:eb:ad:34:b7:7b:09:d0:
ac:e1:36:37:f4:f2:e2:ec:e8:5e:e5:48:55:d9:97:
1d:8b:1e:47:7b:10:3f:3f:5c:e7:53:e6:d5:52:d1:
91:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EB:73:96:D6:EE:05:F9:47:77:22:84:D5:67:8A:A2:57:AF:3A:63
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48202432-610c-42b2-9763-e895c6cbe70d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:1000::/48
Signature Algorithm: sha256WithRSAEncryption
78:1c:c6:58:a6:5c:c0:1d:cc:f4:59:bb:56:2b:56:c6:38:df:
3e:65:f1:de:79:32:bb:3c:7d:2c:f6:a6:21:3e:6d:4d:1f:d8:
a1:08:54:56:fc:fe:55:0f:5c:98:5e:2b:d7:ca:9e:a4:17:b5:
53:e6:69:bd:a8:b4:08:e3:8f:e7:7b:fc:d6:69:8a:aa:40:7e:
83:f5:38:69:85:8a:9c:97:90:95:12:1e:10:ec:30:65:5a:71:
7b:a0:6d:59:31:35:ed:2e:fd:c9:e5:0c:36:28:17:b1:3f:85:
b4:86:54:fb:82:34:81:6a:95:e0:92:ae:16:6b:a0:31:ff:14:
73:4b:96:3e:2f:06:01:a6:e7:97:af:ac:7a:e3:21:1e:b5:95:
50:a7:8e:51:e6:b1:de:97:8f:18:ab:4d:46:4d:bc:27:93:17:
97:58:af:ff:b3:52:1f:b8:c3:42:6d:59:c4:e0:99:56:b9:c4:
8c:df:d6:1e:25:fc:b5:de:24:92:4a:09:7b:d3:e8:65:08:d4:
05:5d:90:a7:87:16:f5:80:04:1c:66:40:4d:f3:39:11:a5:e4:
a6:b9:cd:91:f3:5a:3b:76:58:93:5c:a8:4a:a2:fd:b5:98:96:
93:dc:b5:cd:59:3b:df:4e:7b:48:05:35:72:38:95:8b:ce:e2:
1e:fc:c0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:26:57 2025 by rpki-client