Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3736673-707b-4dfc-aca4-88dcbb52a94d.roa
File: c3736673-707b-4dfc-aca4-88dcbb52a94d.roa (raw, json)
Hash identifier: CSR4bTCAxCzcrdb/34daN705DDCE8GsP9oGbn+MHCZo=
Subject key identifier: 98:2E:D0:34:2A:90:39:CA:33:18:D9:1F:05:A7:34:7E:BA:27:01:8C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2E7EF7BEE31D653479790F65E1220FF6EF13DECC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3736673-707b-4dfc-aca4-88dcbb52a94d.roa
Signing time: Fri 16 May 2025 17:40:15 +0000
ROA not before: Fri 16 May 2025 17:40:15 +0000
ROA not after: Fri 20 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:7e:f7:be:e3:1d:65:34:79:79:0f:65:e1:22:0f:f6:ef:13:de:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 16 17:40:15 2025 GMT
Not After : Jun 20 23:59:59 2025 GMT
Subject: serialNumber=ae91a42ddeee0aabbca538ed7fc58b027fa7457aa2e2b5aa1cd7a15febfacd8b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:e8:a8:a1:ba:d4:cf:7c:c0:55:71:e7:81:
9f:fe:9e:64:c7:63:49:04:0f:56:fc:f5:44:eb:fd:
c3:ab:74:ee:3b:20:b0:12:37:4d:45:b7:39:9d:88:
94:a9:71:c8:f3:1a:96:26:d6:74:0f:40:a3:e7:62:
32:29:19:28:e6:75:c1:f6:55:6e:1e:4e:44:81:09:
1d:17:d8:96:de:0c:d6:12:1d:94:2c:01:c4:7d:70:
cd:94:ad:e4:04:a5:3d:bc:dd:a6:72:78:06:ff:07:
4b:66:33:2c:53:89:d8:46:39:32:2e:a5:59:47:e0:
6c:76:44:52:cf:1a:0e:13:d9:c2:4a:30:5a:b5:0a:
59:bf:81:35:3b:33:bd:7c:dd:da:ed:57:10:76:7d:
f9:ef:21:87:07:dc:ef:bc:4d:ae:8a:79:a9:5d:dc:
bd:5d:9c:ce:a0:63:03:52:0d:99:2f:77:a2:69:90:
e5:67:38:98:7d:84:ca:61:c4:44:cd:5f:c1:66:64:
96:59:92:c4:9c:ec:ba:4f:72:91:da:fc:60:4a:4f:
40:39:df:1c:9b:24:c9:1b:9c:a8:18:ce:c6:21:95:
76:f2:55:7b:e6:33:28:80:f2:28:db:bc:46:c9:87:
a0:b4:de:4d:49:77:32:b7:a6:6f:8d:61:9f:19:50:
ed:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2E:D0:34:2A:90:39:CA:33:18:D9:1F:05:A7:34:7E:BA:27:01:8C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3736673-707b-4dfc-aca4-88dcbb52a94d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:800::/40
Signature Algorithm: sha256WithRSAEncryption
01:01:d2:62:a1:ae:62:80:f4:fd:9b:e7:4b:f4:f7:12:33:f7:
6f:90:9f:3e:1c:b4:48:7b:a6:79:14:83:e7:4d:23:08:6c:3e:
f5:83:4d:16:28:ec:24:16:8f:21:ce:34:a2:fe:01:70:84:d1:
34:91:73:d0:41:42:2e:fe:75:2b:f3:e5:ef:a9:92:97:72:2f:
8d:b5:bf:fc:0d:0d:77:57:55:f6:38:2d:94:f1:ce:86:69:6d:
13:44:29:b3:12:0b:84:f2:78:e5:a8:a0:9e:4e:04:35:24:f0:
e3:2f:3b:3b:42:e6:a0:bf:03:4c:34:56:9d:b1:43:ac:ff:b3:
d2:07:cf:2c:f7:6b:2f:47:11:52:5e:cd:43:43:51:44:c0:f0:
00:53:97:b6:ae:e9:34:f8:38:d5:55:92:c3:50:50:90:fa:be:
68:94:1e:a8:f1:cd:e4:a9:15:45:3d:c1:b2:50:00:23:15:e3:
51:21:53:11:9f:14:89:9d:dd:31:ef:67:dc:89:ae:61:6b:3d:
8d:90:fa:94:d7:16:1b:d6:29:2d:59:09:d5:76:16:b7:74:4b:
5b:9d:45:4e:93:a1:ad:ff:7f:9a:9c:79:13:6c:8e:9f:b8:13:
c4:16:73:5b:47:42:65:34:92:3e:64:62:95:d1:ed:4e:4f:d7:
dd:ea:ae:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:25:15 2025 by rpki-client