Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cdaa55d-528e-4856-8132-c186e079b4cb.roa
File: 8cdaa55d-528e-4856-8132-c186e079b4cb.roa (raw, json)
Hash identifier: Rb5MwcJzDbYkbB+tIF51WQHJ5TpsiO/r6xA26T5yXg4=
Subject key identifier: 6C:37:99:F1:31:DC:BB:8F:22:EE:0D:42:B9:4F:73:C3:2A:EF:59:78
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 48FCD7B9E9DAB8A9D98400759B07BB9F3A20F50C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cdaa55d-528e-4856-8132-c186e079b4cb.roa
Signing time: Fri 04 Jul 2025 18:30:17 +0000
ROA not before: Fri 04 Jul 2025 18:30:17 +0000
ROA not after: Fri 08 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:fc:d7:b9:e9:da:b8:a9:d9:84:00:75:9b:07:bb:9f:3a:20:f5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 4 18:30:17 2025 GMT
Not After : Aug 8 23:59:59 2025 GMT
Subject: serialNumber=55b34343c3505585fc0a8429bfd7514191d3ad9c761bee5d8b640d36f3e1468c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:6b:98:b4:66:46:b3:e2:ee:5a:ce:f7:ba:
3b:74:2c:6b:34:8c:d8:03:74:f2:8b:8b:fa:14:c6:
df:e5:a5:56:33:02:4e:d2:4c:49:ad:4d:0f:71:87:
c1:11:ca:29:33:16:f1:56:92:98:b6:bc:3c:58:b6:
24:47:6a:be:22:20:93:6a:c1:a6:e9:6f:32:d4:e8:
9b:23:7f:b2:9f:30:2c:4a:a1:4b:54:55:aa:a0:dd:
6c:d1:93:67:68:e8:51:13:e4:8f:7c:04:62:fa:0f:
4f:18:fe:fd:19:2c:8f:c1:34:4a:c1:ec:46:c4:df:
67:2f:39:77:e7:41:0c:e0:57:ad:f6:94:2d:34:6f:
e2:4a:9f:01:9c:c6:b4:1d:0b:a3:c2:be:31:2b:7f:
56:58:e0:cf:b6:50:1a:ce:87:25:40:43:bc:34:2a:
99:aa:0d:4a:4b:fe:3c:db:87:d8:5f:f4:9a:a7:4e:
51:14:9c:88:6e:23:cb:1e:b3:56:ea:06:bf:04:79:
6f:cc:da:44:58:d5:b2:8a:14:fe:ee:9b:51:d3:83:
be:04:50:95:07:0f:c2:4d:a0:97:22:8b:e7:36:79:
d6:56:92:ec:36:7e:ab:55:3b:79:e2:58:9c:24:3c:
cb:da:d3:d4:20:8d:3a:0c:28:6b:3d:92:a8:7c:00:
56:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:37:99:F1:31:DC:BB:8F:22:EE:0D:42:B9:4F:73:C3:2A:EF:59:78
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cdaa55d-528e-4856-8132-c186e079b4cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:4000::/40
Signature Algorithm: sha256WithRSAEncryption
11:49:e1:70:3d:55:e1:af:4a:3f:9b:7c:60:06:f8:4c:6b:14:
bc:a8:bc:a8:66:a2:c1:2c:89:a5:eb:b5:87:12:8b:c2:1f:ed:
63:3f:e3:1d:00:c4:3b:d9:1a:f4:65:aa:b5:79:4a:89:de:c2:
c1:50:81:76:fc:70:62:fc:d6:73:c1:c6:3e:bf:4d:d7:43:09:
0b:77:eb:eb:42:e8:9d:3d:a4:26:5d:79:37:83:a7:38:a6:04:
d5:e3:91:24:a0:87:57:eb:7c:c2:6e:4e:cc:75:9a:19:1f:26:
c1:69:00:55:3c:a4:c3:c5:56:71:df:c7:36:84:54:3d:a2:65:
c6:a7:ce:c3:17:3d:14:7d:4b:72:fd:fb:ba:4c:61:b5:20:f7:
28:b4:77:e2:49:fd:c8:2b:6e:4b:a3:60:06:ba:70:1f:ed:b6:
dc:6a:24:bf:b3:fe:10:f4:d2:31:27:77:99:42:f6:4e:ee:30:
ff:e6:b0:0e:85:34:de:70:e8:da:35:4f:38:07:9f:8f:f7:96:
69:85:27:2b:86:62:86:fa:a6:cf:fe:e3:13:f0:57:c2:93:e9:
f0:82:93:81:c8:76:dd:30:4f:c7:6e:41:03:3f:ae:d4:a1:6c:
20:a6:54:ff:87:0c:c1:20:7a:ee:ed:ca:e8:f4:08:df:f9:4f:
a0:32:9f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:43:12 2025 by rpki-client