Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da7b8c4e-ee0a-45cd-b6e3-7bacf8a9e2f0.roa
File: da7b8c4e-ee0a-45cd-b6e3-7bacf8a9e2f0.roa (raw, json)
Hash identifier: oDzqOerr9/hAfGN7kdIoLnvH1KB8xq8OEtYj3afeYig=
Subject key identifier: A2:1B:61:56:E5:C8:C1:98:85:D6:EF:B0:C1:D8:D1:B5:01:FA:F2:3E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5F2E6EBFAE4CE8E3ED66103C9A44454721BE5310
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da7b8c4e-ee0a-45cd-b6e3-7bacf8a9e2f0.roa
Signing time: Fri 16 May 2025 17:30:25 +0000
ROA not before: Fri 16 May 2025 17:30:25 +0000
ROA not after: Fri 20 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:2e:6e:bf:ae:4c:e8:e3:ed:66:10:3c:9a:44:45:47:21:be:53:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 16 17:30:25 2025 GMT
Not After : Jun 20 23:59:59 2025 GMT
Subject: serialNumber=2f93af122a48d60766903ed8a97e0f650e6a8c2fa021c71cc99aecfb94639e9c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:88:98:56:27:a1:8f:56:77:15:9c:ed:9d:b6:
1e:7e:ec:ee:85:13:f7:19:b0:6e:06:45:a9:b8:ce:
bb:d8:a8:9c:55:76:a1:5d:5b:74:42:58:77:fd:f7:
98:79:19:07:d2:b7:d5:b9:c2:52:c9:94:dc:cf:2a:
1d:f5:e6:af:ff:52:aa:ea:b1:43:fc:b8:10:f1:fc:
61:87:44:01:28:36:45:e4:bd:31:25:9d:26:b7:f9:
3e:f3:90:71:5e:d3:bc:ac:6a:ef:fd:7b:ef:6a:51:
bc:e0:62:9a:6f:20:0d:3b:40:82:02:9e:18:83:4d:
8a:02:1a:b5:81:3a:95:bc:e3:34:a7:33:8e:29:a1:
2e:5f:40:ec:9b:a7:4c:55:62:65:a0:88:b6:69:91:
fc:e4:fb:f2:4d:39:c6:81:64:47:1e:d8:b7:40:14:
32:87:4a:a0:ce:c9:21:34:51:32:ac:b9:fb:f1:44:
ab:67:02:01:9e:1c:d3:ab:43:45:ef:47:61:31:55:
0f:26:91:85:64:8e:bb:3e:9b:99:84:9d:c0:ca:f9:
85:db:36:a4:fc:67:3f:37:25:26:ee:ae:73:aa:7f:
b1:0d:6c:71:85:d4:72:99:f8:f0:63:9a:3a:16:a2:
59:9a:6b:0a:1d:0b:21:62:cf:87:21:66:cf:c8:7c:
87:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1B:61:56:E5:C8:C1:98:85:D6:EF:B0:C1:D8:D1:B5:01:FA:F2:3E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da7b8c4e-ee0a-45cd-b6e3-7bacf8a9e2f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:880::/48
Signature Algorithm: sha256WithRSAEncryption
7d:6d:06:b7:d9:7b:92:df:7c:63:90:c4:d0:08:90:f9:1e:dc:
71:38:4c:79:fd:a7:98:2c:3f:bf:ee:53:88:4b:d0:95:45:bb:
5b:2d:8b:71:71:52:c2:50:56:68:b2:20:52:9e:21:8a:41:e1:
2e:e5:a5:40:39:e8:c8:05:d1:f4:d9:c9:05:bf:c6:7d:0d:23:
0e:c4:e2:ad:8f:2a:02:65:43:59:e9:85:92:cc:ee:30:ca:76:
f1:04:c7:35:fa:b5:8e:60:8b:f5:a6:24:eb:e2:ac:4f:64:72:
6e:b9:95:fe:6f:2d:71:89:40:d1:1c:3f:83:66:34:3d:9e:77:
f2:92:eb:18:b5:fc:7c:a3:7d:0f:48:c2:84:2f:01:0f:8d:2a:
b6:54:fd:2b:ec:2e:63:21:bb:de:e8:80:87:53:8e:6f:58:dd:
5a:a2:dc:ad:c0:c2:9c:ee:75:b2:29:26:ca:ce:c8:4a:32:e2:
ae:99:69:dd:bd:ec:a8:0d:a9:7b:be:bf:31:5e:54:25:80:fd:
dd:4b:2f:99:49:b8:d0:f0:61:2a:23:73:1c:12:9e:4f:62:09:
e9:48:35:a9:34:94:30:15:a7:d9:e1:bb:0f:a5:91:3f:15:6e:
d5:ac:70:83:5b:92:5c:f7:e3:7a:ab:8b:fd:94:94:ce:c4:ae:
87:30:d5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:26:18 2025 by rpki-client