Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
File: 94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa (raw, json)
Hash identifier: wg1AuCa+zTj7VhZ7saspZAoa+cOb+dCLN2eH6bGxZXY=
Subject key identifier: 57:7B:EC:A0:7F:D5:53:18:42:52:EF:CE:AE:B7:30:B2:BB:6D:5A:BB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4361BF0E3B8B58E48FFB2783BB445F47F08E79EC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
Signing time: Fri 11 Jul 2025 19:10:03 +0000
ROA not before: Fri 11 Jul 2025 19:10:03 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:61:bf:0e:3b:8b:58:e4:8f:fb:27:83:bb:44:5f:47:f0:8e:79:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:10:03 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=499d7238a65ef06532cf6f4b04e8ead3efa1898e0b43f690e58b1c4bc4ab8d55, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:c4:25:0c:29:7c:62:46:42:01:9a:ff:5e:
05:7b:f5:d4:3e:ae:96:99:b1:5d:28:74:6c:b1:27:
aa:d2:ae:b8:c2:37:72:38:87:bf:9a:16:93:b4:83:
a0:ad:63:4e:15:f1:a1:27:0b:a6:f3:bd:09:97:c0:
8b:48:00:02:26:8c:d5:c9:42:8b:66:eb:be:4f:f7:
5c:c2:c1:c7:ab:74:08:9b:f9:98:06:3c:ec:71:7a:
98:d0:a4:37:5e:c3:e5:d2:cd:24:01:ef:e7:34:d1:
23:be:5a:1f:7a:dc:bf:e2:60:c5:a4:ef:89:dc:9c:
74:78:75:a0:9e:bc:53:72:2c:5d:26:2f:30:3d:ef:
d4:a2:f9:76:3a:ee:1f:34:cf:27:57:46:17:d1:51:
99:50:58:51:38:64:a3:c2:8a:7e:01:ee:3a:70:cc:
90:75:8e:de:6d:17:c8:b5:87:3d:8c:d3:a3:5e:1b:
ad:86:ca:a4:44:ba:96:d4:16:14:ae:fe:5e:79:a1:
19:02:0b:d9:f6:11:34:82:17:48:7d:d4:77:64:b9:
3e:e8:db:ce:06:92:ab:60:92:cf:7f:37:a9:6e:c1:
bb:6b:3a:9a:5c:56:a9:60:0b:25:9e:8e:e4:27:c2:
48:1d:c5:ca:f1:ed:05:9d:a8:80:c9:cb:f1:e2:13:
a1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7B:EC:A0:7F:D5:53:18:42:52:EF:CE:AE:B7:30:B2:BB:6D:5A:BB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:6040::/48
Signature Algorithm: sha256WithRSAEncryption
92:63:81:73:b1:51:25:e0:66:5f:06:de:6d:29:4c:52:65:cc:
1b:1d:47:c9:da:48:f8:4d:63:ee:65:65:2d:ed:d9:8a:5b:1b:
8b:db:43:d1:b2:16:e4:91:63:3c:4e:c8:78:da:80:e6:d9:b5:
ff:05:c0:af:96:bb:2a:86:c5:df:d5:8d:38:af:8d:a0:f1:36:
6a:22:bd:e5:12:f7:69:72:08:58:b8:26:20:e7:94:af:09:cc:
d2:27:8d:c2:9c:25:08:3c:e3:f8:d8:92:0d:ca:4c:ac:4d:54:
8a:1c:a7:c0:0c:9f:9b:2e:66:93:69:c7:9a:35:26:5b:d3:b2:
65:44:ae:5b:d4:c0:27:0e:e5:d2:d2:21:4b:60:b7:2d:4f:b9:
87:5c:55:34:c1:4e:68:24:62:43:e0:92:22:35:69:df:a8:6b:
b8:45:49:f2:4f:b0:ef:6f:d4:03:9f:71:5f:a9:10:9d:57:ef:
ba:65:f9:7b:27:56:3c:6d:92:ff:28:db:91:e3:72:a9:fd:fd:
ab:da:17:b8:bc:82:09:2e:6c:50:a5:e6:45:a0:02:8f:5e:d7:
b6:65:da:9e:7a:ed:e8:d4:03:e7:83:77:20:2c:49:9c:ef:ef:
9c:98:a5:3e:19:26:d0:f8:3f:db:da:f2:21:20:ba:93:fa:67:
f8:a3:67:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:32:14 2025 by rpki-client