Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/541034be-1844-4bf7-9c43-91bf5b83fa3d.roa
File: 541034be-1844-4bf7-9c43-91bf5b83fa3d.roa (raw, json)
Hash identifier: wy5kju+Eyo4MRXTLpFERCMR3CxHjsiM1DhXi9QKNsxQ=
Subject key identifier: 17:B5:E1:81:53:05:BA:07:A4:87:0C:FA:41:9F:5C:E0:91:3E:8E:84
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 192F35054A0555C1999775E0A70B0EA169B90053
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/541034be-1844-4bf7-9c43-91bf5b83fa3d.roa
Signing time: Mon 12 May 2025 16:11:39 +0000
ROA not before: Mon 12 May 2025 16:11:39 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:2f:35:05:4a:05:55:c1:99:97:75:e0:a7:0b:0e:a1:69:b9:00:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 12 16:11:39 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=bcb75bb41fbf522fd4a39a99175bd18cd047ac49f8f3ee7e28f54dfdc799e171, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6c:8c:e8:25:2c:ab:e4:e1:ed:50:96:6d:ff:
5c:8d:37:67:11:f5:c5:e9:4c:1b:85:8b:51:d6:28:
94:bc:ad:15:dc:c9:dc:cb:b0:c6:b9:a7:a8:0a:a4:
42:4e:33:4d:2a:9c:16:7f:bc:28:b4:b7:dd:a9:19:
01:44:f3:03:92:ec:a9:56:9c:32:73:cf:83:5d:b6:
cc:da:1b:3d:44:6b:0b:cd:df:fb:48:0f:4c:c3:4a:
ab:51:02:16:d8:28:72:44:8c:6c:de:03:91:09:2e:
7f:9d:be:69:d5:8d:01:d8:8b:8c:3b:b8:29:4a:81:
d5:a8:dc:c4:0c:9d:b0:30:65:ba:81:ed:08:f8:b1:
d0:ab:7d:57:5b:02:85:2f:c9:e9:8a:ce:38:30:43:
42:8b:61:d5:c7:53:12:03:80:0d:e6:85:c2:e4:31:
a3:db:5e:fa:4b:eb:af:15:51:87:59:ca:8d:4c:8f:
0d:b5:43:2b:ae:35:e3:82:af:c6:c7:4d:8c:c8:5b:
08:fe:d5:3e:f0:d2:14:44:03:55:c7:0f:3a:ff:81:
73:1e:f6:c8:40:6b:31:dc:48:88:90:a9:a9:47:26:
b0:c5:1f:b5:24:83:7a:7b:2d:9e:dc:6c:64:94:c0:
81:37:f0:7c:8f:2c:b0:e6:16:35:c3:0c:eb:01:f2:
25:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B5:E1:81:53:05:BA:07:A4:87:0C:FA:41:9F:5C:E0:91:3E:8E:84
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/541034be-1844-4bf7-9c43-91bf5b83fa3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:8000::/40
Signature Algorithm: sha256WithRSAEncryption
11:2a:4d:b3:99:6d:87:4b:b6:77:a7:b4:6e:6f:c9:ae:20:60:
61:35:76:df:ed:6e:55:f2:02:06:7d:90:0c:ed:a5:d2:b0:bb:
e5:66:87:34:fa:6c:cb:be:ac:76:b4:03:ce:27:0a:d7:d4:8a:
31:a6:11:8f:49:0a:07:0b:6f:44:86:f1:7d:e7:01:13:12:b8:
fe:8a:a7:5b:95:2c:fd:41:5a:cc:9d:d1:e9:ac:49:fa:62:41:
49:84:4d:6e:6c:25:85:ba:99:99:94:29:4e:d0:01:dd:c6:23:
3a:0a:9e:14:9d:68:09:45:9b:98:dc:48:fb:79:c1:71:97:c3:
80:c9:8f:4e:fc:c8:bf:7c:28:b4:38:2c:86:e3:5f:8b:8c:f2:
61:6a:9a:4e:0e:65:7b:23:1a:33:2e:57:22:ff:3e:0a:c0:e0:
94:87:35:6e:ae:11:0d:e5:25:51:c3:6f:9a:7f:bc:be:5a:29:
6d:8f:0e:df:8b:6f:84:42:ad:e0:24:8c:78:ae:38:b8:cf:08:
d5:6e:90:a6:ce:70:26:6c:61:f5:19:4d:47:0d:16:0b:3e:94:
6a:91:1f:92:13:4b:39:82:97:25:86:4b:3f:7d:d2:07:b9:58:
fe:4f:2d:e0:d1:74:45:c8:88:2c:74:19:8b:dc:19:c3:6d:41:
42:3e:6f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:26:14 2025 by rpki-client