Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/64f0a197-0057-458b-924a-0b7079fbd04c.roa
File: 64f0a197-0057-458b-924a-0b7079fbd04c.roa (raw, json)
Hash identifier: C9libbe6UGXCsziJ8FrdJ6zTHSBHXtwHYtaFuQ/drqs=
Subject key identifier: 38:6E:4F:F9:F2:F2:F7:19:E0:28:B6:12:9B:34:EA:EC:45:62:2C:B2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 14AD4DE7FB77E8768CE2B501630BB638035EA769
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/64f0a197-0057-458b-924a-0b7079fbd04c.roa
Signing time: Fri 16 May 2025 17:30:31 +0000
ROA not before: Fri 16 May 2025 17:30:31 +0000
ROA not after: Fri 20 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ad:4d:e7:fb:77:e8:76:8c:e2:b5:01:63:0b:b6:38:03:5e:a7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 16 17:30:31 2025 GMT
Not After : Jun 20 23:59:59 2025 GMT
Subject: serialNumber=1e877b835db85ad2219e4e0491e6bcbd792042c7b4eac945490c9afdb954b5cf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:07:fc:ff:00:09:ad:8b:b4:ca:86:d0:ca:d4:
3e:74:1c:d1:6f:25:bf:bd:7b:e0:c7:06:b6:93:ed:
e3:c5:95:9a:f7:61:22:40:40:43:d8:d9:b2:37:c2:
9a:8b:11:db:0a:a2:21:4d:06:60:f4:c7:fa:03:7c:
6c:44:94:2a:6d:56:66:2c:55:2f:2f:1b:2a:94:a1:
4a:94:09:14:7f:d0:69:e7:c6:2a:e5:2e:1d:7c:14:
b8:83:37:c9:16:87:18:e2:5e:d8:04:ec:8b:30:ee:
08:6e:30:98:43:1d:0c:64:82:98:b7:a5:a9:f7:2c:
86:a2:72:3f:e1:e8:45:13:fa:76:24:9f:99:a8:56:
35:a9:9f:e5:f5:e7:2d:a1:43:f3:a7:da:c1:01:80:
63:06:a1:a7:81:eb:4f:bf:f7:f6:b9:d1:ec:38:91:
ca:3c:7f:a0:e0:25:57:9c:d1:ca:75:8c:30:a6:ca:
f1:6d:4e:76:3d:09:02:8f:d1:5d:5c:11:bb:01:d9:
6b:8b:46:88:5c:a5:f3:b4:58:06:36:d3:ab:3e:cc:
53:69:42:54:42:a1:ca:21:44:de:3e:f7:e3:f1:d8:
60:a0:12:f9:59:39:f9:cb:23:e6:34:43:d2:d9:38:
58:0b:c2:66:77:26:23:5c:8b:06:89:13:c2:ae:5c:
45:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6E:4F:F9:F2:F2:F7:19:E0:28:B6:12:9B:34:EA:EC:45:62:2C:B2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/64f0a197-0057-458b-924a-0b7079fbd04c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:840::/48
Signature Algorithm: sha256WithRSAEncryption
35:35:bc:4b:02:aa:a8:38:08:72:a5:34:dd:dc:2c:34:f7:72:
67:f7:93:c6:b9:2b:53:67:43:92:db:a8:f7:b1:08:33:85:7d:
e1:39:2b:f7:22:80:54:10:cd:31:ad:bd:b9:d4:d0:aa:6b:cd:
11:09:a7:f5:10:19:01:47:71:2b:8a:86:ed:e3:aa:b8:32:26:
a5:fc:dc:ee:27:15:f6:ad:b9:62:35:fa:aa:d6:df:27:4f:70:
7f:f9:6b:f7:16:2d:b6:41:39:d7:2c:c4:98:43:ea:4b:69:ba:
04:27:9e:38:76:c9:a0:86:36:a3:be:18:c9:f7:c2:62:a9:61:
ad:fa:65:a5:8a:ba:a5:73:f9:d0:4c:77:80:48:83:fb:61:03:
12:46:67:90:a8:6b:e3:b2:1c:9d:a5:71:5d:7b:ea:4a:4f:27:
d5:23:2d:4e:41:fa:4b:d0:46:59:47:ba:58:f8:d9:f8:87:82:
e1:37:ca:47:f6:1c:00:a0:4e:3a:ee:e6:ef:33:6b:62:36:95:
fb:2f:3f:9c:37:fe:05:60:3a:95:36:cb:af:22:88:53:c3:a5:
b8:e1:a4:86:c8:a5:11:9e:cd:9b:56:34:17:7d:57:22:86:a4:
fc:fc:df:83:a9:b4:01:a7:23:12:08:bf:0b:e9:c4:67:13:5e:
04:17:68:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:27:07 2025 by rpki-client