Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb8f4f37-fecd-4bc6-8edc-80be9f2fbeda.roa
File: cb8f4f37-fecd-4bc6-8edc-80be9f2fbeda.roa (raw, json)
Hash identifier: TyoUvjyToFB6G/dSsjvVXVQ6hP6wyk5CA1oPng8WjaE=
Subject key identifier: CF:14:3C:CA:37:6D:E3:DB:15:37:0F:8D:33:CF:B6:5B:52:D5:9A:39
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 261B1AEA32FAC290ABBE18CFB6E05B61A5F3B1CB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb8f4f37-fecd-4bc6-8edc-80be9f2fbeda.roa
Signing time: Tue 20 May 2025 20:11:33 +0000
ROA not before: Tue 20 May 2025 20:11:33 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:1b:1a:ea:32:fa:c2:90:ab:be:18:cf:b6:e0:5b:61:a5:f3:b1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 20:11:33 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=5e0669563ec01b1802639eb80bcd579ea875c0e9330d0a7c3ce6ea818dbbdad5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1a:8d:75:04:ad:46:88:eb:7a:7d:f8:e5:27:
45:48:b6:22:2a:0e:bc:7a:ef:0e:40:2c:86:b4:ce:
6c:8e:c7:c7:27:35:d4:1d:96:57:da:55:e7:f5:d8:
04:b2:4d:3c:55:36:b4:d9:18:b8:e0:f4:18:b8:b4:
13:6b:f8:db:87:ac:fd:63:d5:23:7d:dc:c1:9a:9f:
6b:1f:7e:11:aa:6e:69:e7:2c:2c:02:39:5c:21:ac:
54:4c:d3:ca:f9:09:17:bc:e5:44:30:d5:c9:9a:3e:
04:b6:7b:8d:fd:29:25:e2:a2:b7:e7:dc:9b:cd:95:
c7:f8:9d:86:ad:99:c3:54:1f:09:1e:e0:59:c8:e9:
ab:72:8a:fb:1a:29:3d:77:e0:a3:5e:72:fc:58:89:
1a:52:44:e4:ac:80:24:d8:13:b6:02:85:7f:1b:b2:
52:4c:ba:e5:14:86:8b:7d:16:9c:d9:64:5f:0b:af:
6e:c2:1d:05:6c:f5:b5:b4:84:88:98:f5:87:cf:39:
3d:bc:ad:b7:4d:5a:92:af:10:79:ab:ea:0d:31:41:
e1:00:f2:7e:b3:2b:37:57:a9:31:74:e9:d5:36:d8:
57:ba:fb:4b:3e:cd:ae:95:24:6f:b3:35:ad:20:54:
e1:fb:57:de:e0:b1:7a:52:96:b1:bc:1f:cb:29:57:
73:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:14:3C:CA:37:6D:E3:DB:15:37:0F:8D:33:CF:B6:5B:52:D5:9A:39
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb8f4f37-fecd-4bc6-8edc-80be9f2fbeda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:c000::/40
Signature Algorithm: sha256WithRSAEncryption
38:52:00:ca:b0:29:8a:d5:03:8d:0c:9f:50:42:c5:9a:b7:5b:
4f:1f:5e:80:78:36:b0:49:fb:b7:83:a6:a0:e8:96:d4:83:74:
9c:ce:76:42:03:8b:f6:d8:10:bb:ed:4e:ad:9f:c2:45:8b:e5:
32:4c:5d:b1:2f:fb:84:92:c2:c7:a4:46:14:e5:39:67:5b:db:
5a:6e:65:04:28:a7:11:5e:d5:8b:0d:90:90:bf:cd:c3:17:f2:
cf:ab:0d:97:fe:30:f6:55:4d:0b:dc:3e:ed:92:3e:f2:8d:c3:
42:82:7b:7b:fd:3b:9d:2d:ea:4c:2b:b0:be:b5:ff:1d:07:3e:
c8:50:c2:00:57:81:73:6b:e6:16:1d:d4:7c:14:72:1c:28:3f:
be:33:db:8c:88:14:1b:eb:7a:55:c5:86:6b:34:4e:e5:55:c0:
66:fe:ab:ba:57:c2:f6:77:dd:ec:83:d8:0f:4e:8c:0b:e1:25:
3b:59:83:b9:56:09:23:66:32:30:cb:3a:34:2d:c5:ed:58:32:
29:57:55:a6:ee:86:55:5f:8c:28:9b:f6:99:a2:ad:aa:52:01:
d9:f5:ef:15:50:d5:48:fc:02:93:d8:21:ef:c7:96:cb:56:b0:
94:63:00:8a:76:68:fe:b7:4c:c9:da:4d:cd:d5:21:63:3c:a5:
c7:4d:ef:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:25:31 2025 by rpki-client