Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8757a3-5b0e-4473-9a3b-876cc134e2bd.roa
File: 1a8757a3-5b0e-4473-9a3b-876cc134e2bd.roa (raw, json)
Hash identifier: goo9Tt95+kps1O3GfHHc3g3ia9KnWkkzsSTzgyraQQM=
Subject key identifier: AC:A3:6D:23:53:36:D2:49:F9:A6:D6:A7:4F:16:50:4D:2C:C1:A1:51
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: B941B7F03412804862D9AED3F249B3D7CB1325
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8757a3-5b0e-4473-9a3b-876cc134e2bd.roa
Signing time: Fri 11 Jul 2025 19:21:29 +0000
ROA not before: Fri 11 Jul 2025 19:21:29 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b9:41:b7:f0:34:12:80:48:62:d9:ae:d3:f2:49:b3:d7:cb:13:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:21:29 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=1c238e9d02c7ec008d177278a643e624ae7bfa486b2d1e3c3c10004fc68c56a3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:89:ff:57:fd:fd:6b:a5:62:4c:f0:84:2f:
37:41:e3:6e:a0:f6:53:7c:99:f4:5b:f4:92:d1:d3:
3e:06:84:f6:52:1c:cd:1e:ac:bb:0e:e4:bc:11:2d:
dd:8b:8f:b5:b1:d5:e1:55:9c:c2:31:70:7c:9a:4f:
36:80:07:25:2c:24:2f:27:ae:c3:68:45:57:52:a6:
0d:a4:6d:78:54:ca:39:24:3f:f8:91:08:c7:10:15:
73:73:cc:ad:2c:3a:d0:50:f8:52:69:b1:f4:f8:24:
a5:8d:0c:7a:b4:56:05:12:3d:11:e2:4e:85:f8:ac:
7d:64:5e:1c:c1:22:9d:bd:ea:88:be:d6:0d:15:70:
34:18:fd:fd:d4:0c:8c:a0:27:bf:93:a2:16:e0:f9:
60:bc:13:b3:2b:e1:24:ab:6a:35:7a:82:19:15:3c:
56:09:d1:37:18:81:85:f6:2f:6a:bd:63:6f:b0:4b:
bd:b3:3f:b3:25:91:cf:6a:64:17:dc:8a:c7:25:5a:
bc:7b:4f:fe:42:84:40:e6:9b:11:64:8b:42:07:67:
f4:c1:b7:67:b6:e0:f3:96:af:6b:32:a6:82:82:d8:
79:b3:73:2f:fa:69:27:4c:96:02:29:a8:a9:92:09:
db:13:bb:1a:8a:47:7e:ff:44:5f:0f:2b:f6:ea:8e:
aa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A3:6D:23:53:36:D2:49:F9:A6:D6:A7:4F:16:50:4D:2C:C1:A1:51
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8757a3-5b0e-4473-9a3b-876cc134e2bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:e000::/40
Signature Algorithm: sha256WithRSAEncryption
32:8b:32:0b:7f:5c:b6:bc:40:36:ce:f6:e6:6f:da:ac:c5:69:
27:8d:2f:44:54:a8:b8:57:25:3b:c1:22:56:f3:0b:ac:60:71:
b3:6b:34:55:66:f3:f9:b6:b1:54:24:e9:7b:cf:87:65:db:01:
33:41:d6:2e:fb:34:d9:e7:e2:c9:f8:01:fc:14:87:2c:71:18:
4d:7c:03:53:ab:1f:3c:c9:77:2e:74:58:86:69:94:f2:4e:87:
6e:16:ec:3c:ab:fa:db:a2:aa:d5:d0:c1:1c:0a:95:ca:0e:33:
40:b7:7b:f6:75:df:3e:62:48:72:fe:d5:dd:22:f3:40:09:45:
c1:4f:a4:c6:fe:bc:71:b5:5f:5a:7d:76:e0:a0:00:51:c1:12:
38:c2:9d:89:11:1a:5e:81:29:05:50:9b:28:50:4b:9b:04:b1:
6c:be:09:d2:bb:75:f0:64:41:19:dc:34:76:e5:ed:18:7b:61:
9d:ac:a3:8d:4c:e4:c7:dd:b1:bb:e9:cd:80:ce:73:34:ac:77:
fd:fd:1a:13:5f:0e:dc:e4:6b:ec:11:05:ea:63:19:a3:0d:af:
64:95:2f:43:68:21:4d:d5:96:7d:04:0c:22:72:a1:e3:6a:e6:
43:97:ed:37:69:62:16:47:26:a6:8f:f8:2f:de:42:85:04:3d:
11:2e:00:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:42:23 2025 by rpki-client