Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0849241f-abaf-4c57-aadb-d881485a0aac.roa
File: 0849241f-abaf-4c57-aadb-d881485a0aac.roa (raw, json)
Hash identifier: E3nqJSQ1qps4pDQc+RK34QWULFoJPou+GPZPG7MEVyM=
Subject key identifier: 5A:B5:27:D8:3A:7F:3A:5D:FE:8B:27:40:0B:8B:98:78:94:DE:C1:23
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 51AD6AE648783FB4E37112B974F94045A352EB26
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0849241f-abaf-4c57-aadb-d881485a0aac.roa
Signing time: Fri 11 Jul 2025 20:41:12 +0000
ROA not before: Fri 11 Jul 2025 20:41:12 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d012::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ad:6a:e6:48:78:3f:b4:e3:71:12:b9:74:f9:40:45:a3:52:eb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:41:12 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=7dbc7f441328015cf19685c6b76bb2d3097028e2b067abe00e0103ab7a075991, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:ea:be:85:c2:9b:97:5e:21:3f:f5:93:2d:
69:65:24:d1:57:09:ac:53:c3:f4:04:54:8e:f4:f9:
6c:1f:a8:35:b6:f3:22:5e:0f:8c:0c:58:e7:0d:9f:
2b:6c:11:81:74:5e:43:90:43:c2:c4:41:5b:19:a5:
cd:c1:8c:3e:1f:8e:a1:65:01:60:3c:eb:f0:2e:8b:
e9:eb:df:41:65:01:15:47:a8:a7:90:6c:63:c6:85:
66:ad:75:0b:83:8c:3b:11:e4:8e:01:62:7b:57:26:
75:13:f5:58:6a:f6:1b:7e:b3:00:42:a5:5c:8e:27:
85:a7:54:93:c4:37:bf:5c:b3:7f:b8:d2:04:8f:38:
16:bb:b8:1f:51:5d:29:69:70:b1:c7:c4:0f:20:7a:
2a:38:3a:88:47:05:57:d6:18:bf:24:82:bc:0c:1c:
14:ef:1e:73:da:8b:9c:5d:70:a4:8c:49:66:32:51:
33:2d:72:e5:96:7d:b3:b5:d4:85:68:25:9b:91:6d:
f9:66:cc:88:5a:75:c2:28:0c:99:34:f8:de:51:44:
01:38:fa:a6:14:43:62:30:8b:41:d0:ce:01:8c:ae:
25:0d:92:28:3a:ed:8f:c4:73:97:26:71:43:c0:0d:
4f:54:6c:c6:d1:ab:e3:25:6d:6b:65:e7:5c:b1:1e:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B5:27:D8:3A:7F:3A:5D:FE:8B:27:40:0B:8B:98:78:94:DE:C1:23
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0849241f-abaf-4c57-aadb-d881485a0aac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d012::/38
Signature Algorithm: sha256WithRSAEncryption
35:fb:22:f0:72:38:f9:d7:fd:83:c4:8c:a5:88:e6:94:e0:b2:
6c:9a:f4:e7:08:ca:42:39:02:d1:a4:49:e4:46:10:e5:12:89:
5a:dc:ce:b9:e1:ce:17:41:7e:5b:0f:c5:0b:f8:be:4a:8a:e2:
4c:81:0b:28:e2:51:8c:84:a0:de:d9:9b:fa:8b:9d:f0:cc:92:
e6:f0:46:cb:1f:74:dc:b7:1a:b0:17:f2:0c:3d:bc:a5:a5:a6:
1d:dd:9b:f6:3c:46:71:a7:55:47:e7:72:f7:47:52:b8:d9:70:
9d:7b:c0:71:0a:22:8a:4f:12:af:91:40:b3:80:16:9b:eb:a4:
08:14:fa:3a:9f:46:70:c9:fe:9e:09:d1:12:68:66:f1:9e:4a:
ce:58:20:ce:57:04:63:20:dc:87:c1:45:d8:3f:2f:88:51:2b:
02:4b:f9:d0:46:09:a6:41:f4:47:61:bc:1b:13:81:13:a1:45:
5d:fe:5d:23:02:57:5f:91:78:d1:9a:4b:09:ed:05:7c:ec:83:
30:7c:33:28:03:b8:dd:3e:59:d5:a2:20:8d:c2:99:7e:52:87:
3f:a7:60:6c:4c:27:b7:3d:4e:0f:e9:ab:1f:61:0c:2d:3c:8d:
ac:ea:80:52:6c:dc:df:3f:d8:d7:19:26:b9:c6:41:33:e9:80:
30:ed:d7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:59:47 2025 by rpki-client