Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5bcb770-7e3d-4ccd-bf1c-4cc17ea01c1d.roa
File: a5bcb770-7e3d-4ccd-bf1c-4cc17ea01c1d.roa (raw, json)
Hash identifier: 1pxGY9TW724rHRAcEdrF/cN2GoZXMcSzs8PWWlF/Zvk=
Subject key identifier: E9:B3:1A:D3:CC:3E:F9:43:3E:DE:9B:EA:15:38:8C:C4:49:32:CA:B2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2807A1DB09F6E28CFF86341CDEF1A4C992C7005E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5bcb770-7e3d-4ccd-bf1c-4cc17ea01c1d.roa
Signing time: Mon 30 Jun 2025 17:50:54 +0000
ROA not before: Mon 30 Jun 2025 17:50:54 +0000
ROA not after: Mon 04 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05b::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:07:a1:db:09:f6:e2:8c:ff:86:34:1c:de:f1:a4:c9:92:c7:00:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 30 17:50:54 2025 GMT
Not After : Aug 4 23:59:59 2025 GMT
Subject: serialNumber=9ccaddf04eeabbf20a6bf1b712485af307d00fe86cdd9fa7294d689000673b09, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:b4:ce:74:2e:7d:dd:79:dd:55:1c:89:e6:
42:ca:a9:6b:53:ab:d7:87:15:8b:a6:8e:9b:e2:ed:
f5:2a:6d:b0:c3:84:f1:a3:4f:9e:ba:9f:4d:8a:60:
45:48:86:d5:9f:1b:e8:95:62:76:39:28:31:48:b4:
69:b1:0a:e1:8e:9d:f7:d0:05:55:db:8e:48:dd:b1:
04:cb:6f:4b:87:50:c8:03:6b:a7:3c:94:b4:20:34:
36:be:8e:a3:f4:30:f1:ff:0c:b2:b1:15:2d:e8:21:
3c:b1:50:0a:59:fe:a6:a9:b6:ca:79:f8:f0:8c:e7:
46:df:13:d8:0c:b0:b6:69:3c:d3:09:7a:d3:49:75:
4e:de:6f:83:92:e6:ac:73:db:e8:85:29:fa:05:3c:
f9:d0:79:14:eb:06:98:63:62:26:de:1e:1c:92:77:
51:bf:5e:f4:34:c2:85:a0:0f:fd:29:12:d6:c2:6d:
cd:1a:1f:67:44:38:a7:2e:8c:5d:38:b2:90:27:16:
ff:ba:63:ed:5a:18:7f:ed:8e:5f:f3:54:a7:b1:bc:
83:8a:ef:d8:7d:cd:5d:87:b9:8d:c2:28:a5:19:06:
a6:93:af:26:86:e7:c6:6a:a1:1b:03:3c:69:9c:6e:
5c:12:0b:f8:0d:7c:1d:9c:69:68:38:62:c2:77:05:
ca:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B3:1A:D3:CC:3E:F9:43:3E:DE:9B:EA:15:38:8C:C4:49:32:CA:B2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5bcb770-7e3d-4ccd-bf1c-4cc17ea01c1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05b::/32
Signature Algorithm: sha256WithRSAEncryption
ab:23:c5:ed:1d:95:63:16:3f:b2:9f:38:31:16:d6:13:e8:6a:
88:df:a5:49:64:85:85:a9:7a:1d:5c:7f:b4:1a:87:24:ef:6b:
ce:de:f8:0b:ff:66:a4:59:64:b0:5d:d3:c7:1a:e9:89:5e:b1:
0e:6d:29:6f:56:90:e2:9c:00:1c:44:21:41:78:21:ed:a6:ad:
ef:f1:68:a1:6d:a6:1b:11:03:7d:34:92:72:cb:6d:25:b2:f3:
2d:ec:5e:74:0a:f2:e9:54:78:4d:9e:e5:d8:b2:08:12:d4:9a:
2a:f2:ab:84:dc:f4:da:ab:1e:be:ab:fc:e8:08:a6:ed:32:2f:
22:be:0f:b7:05:39:af:dc:87:6f:03:5c:a9:82:db:9f:0c:29:
43:e3:84:17:e6:33:80:22:97:93:71:16:d8:08:25:0f:19:96:
e2:bc:6b:1e:99:78:b0:c7:95:6c:86:73:af:9d:fc:bb:78:9d:
ec:38:7e:9f:a3:22:7a:44:e8:3a:75:5e:97:40:20:8f:b0:03:
a4:d8:ca:81:d1:b4:eb:c8:a9:d0:3f:f8:81:73:9e:cd:ee:53:
bb:f4:03:c3:e9:40:fd:6a:76:c2:77:db:1a:b1:cf:eb:a5:7d:
de:e0:ab:f3:39:98:e4:d2:aa:2d:c0:bb:14:d1:c5:83:a8:59:
54:61:0b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:34:32 2025 by rpki-client