Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bbba23f6-dc95-4602-8972-c409631731f1.roa
File: bbba23f6-dc95-4602-8972-c409631731f1.roa (raw, json)
Hash identifier: 83EG7jD9POkS8+CW+Ovfcir9r50rl2kLKTdvVx7zj/g=
Subject key identifier: E6:2B:E3:32:76:24:98:74:A7:F5:C0:1E:8B:81:57:CA:30:F9:59:F7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 36703315C3100694FA94CDC26CAF85BC56A301
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bbba23f6-dc95-4602-8972-c409631731f1.roa
Signing time: Tue 03 Jun 2025 20:53:47 +0000
ROA not before: Tue 03 Jun 2025 20:53:47 +0000
ROA not after: Tue 08 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:70:33:15:c3:10:06:94:fa:94:cd:c2:6c:af:85:bc:56:a3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 3 20:53:47 2025 GMT
Not After : Jul 8 23:59:59 2025 GMT
Subject: serialNumber=358858e1453fad8caeed8bcce4440d835528f839fc56bb7862aadd53abb2f7fe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2a:c9:97:d3:54:81:93:d9:e3:17:f4:6a:dd:
9f:49:a5:5d:8d:79:41:6b:2d:e5:3d:5f:da:fc:52:
ac:51:95:1e:7d:52:99:c3:a8:f2:37:2b:fd:f7:bb:
f7:bf:5c:9b:c7:11:52:72:cc:d2:18:ea:e0:3e:0b:
4d:87:ee:86:9e:f3:73:74:47:f0:21:1f:0a:d5:79:
7c:b1:47:50:19:12:7d:04:53:ab:cc:14:c1:ad:52:
df:a2:fa:8c:8c:c4:06:da:29:2c:5c:a7:d2:f4:08:
23:ce:e1:15:f5:ef:cb:6c:46:78:41:40:f5:d6:27:
a2:e5:8e:f0:e8:f5:a8:8d:99:9f:59:be:12:6d:e2:
01:8b:58:a9:5b:9a:6e:0f:10:3f:b7:12:1a:15:11:
41:0f:45:41:28:8a:b8:0a:7b:f0:0e:45:77:08:25:
cc:44:c6:c7:80:c2:17:a5:01:51:6e:97:a4:02:00:
8d:22:dc:3f:77:ea:7f:10:76:3d:ac:f1:8a:54:17:
10:18:cc:4f:6c:28:37:89:3b:96:88:5d:f9:f6:36:
af:53:86:98:2e:bd:a4:a4:21:1e:35:34:34:ac:ff:
5b:93:ab:78:c2:da:19:27:31:7c:ae:51:97:83:f7:
8e:f4:fb:f3:76:7b:b4:53:cc:df:3c:1c:60:60:6e:
52:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2B:E3:32:76:24:98:74:A7:F5:C0:1E:8B:81:57:CA:30:F9:59:F7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bbba23f6-dc95-4602-8972-c409631731f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:800::/40
Signature Algorithm: sha256WithRSAEncryption
47:e0:eb:19:3c:e6:cb:b4:1f:7e:a3:c8:64:99:6d:00:64:ab:
cc:52:77:34:10:ad:d7:f3:8b:b0:0a:e8:6a:8d:62:1f:02:71:
38:a9:6f:9d:12:45:e3:f3:52:4f:cb:ac:5c:03:cd:f8:fd:26:
26:19:6d:67:57:4d:f4:08:ff:72:dd:7d:ca:84:8c:56:99:51:
05:09:ab:f5:c1:6b:7f:ab:9b:bc:71:b5:fb:4d:c3:91:b0:64:
56:50:47:75:97:68:74:92:83:6e:1a:6c:37:4f:b6:c2:c5:d0:
11:ce:3e:d3:0d:e0:6d:16:7f:18:c8:d0:ab:cb:e0:a1:fe:52:
d2:27:34:98:20:5f:17:c9:89:8b:32:11:ef:a3:b8:5c:a6:cb:
ec:5b:3e:14:ea:f6:3c:30:5a:7f:d9:11:f4:0e:1d:ba:67:01:
97:fc:52:8f:9d:fb:64:20:c4:06:9e:ef:1a:1c:90:d0:2e:71:
6e:cf:ca:ce:9c:ba:a9:22:60:b6:1a:42:99:d5:95:45:64:7e:
37:07:ee:92:66:ad:57:82:51:5d:6d:a5:33:bf:1e:cf:1a:ef:
e5:4d:5c:44:b7:a3:cf:50:ca:8f:b8:f9:78:5d:7c:0f:02:d5:
2d:9d:ba:49:d4:74:7a:7c:c4:97:bd:d1:47:fa:b2:c9:91:3c:
8c:09:2d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:55:28 2025 by rpki-client