Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da7b8c4e-ee0a-45cd-b6e3-7bacf8a9e2f0.roa
File: da7b8c4e-ee0a-45cd-b6e3-7bacf8a9e2f0.roa (raw, json)
Hash identifier: 7hF3cAgLiIsQ/doBwPC0RLCRPqW/ZGZzJCd+RClFMf8=
Subject key identifier: 36:F5:29:FF:6D:38:17:4C:42:48:11:FC:B6:12:4C:49:11:89:2F:20
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7A47AB8C9090EB18C7C7F3FA1F4DAB0C8BC59F51
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da7b8c4e-ee0a-45cd-b6e3-7bacf8a9e2f0.roa
Signing time: Mon 07 Jul 2025 18:20:43 +0000
ROA not before: Mon 07 Jul 2025 18:20:43 +0000
ROA not after: Mon 11 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:47:ab:8c:90:90:eb:18:c7:c7:f3:fa:1f:4d:ab:0c:8b:c5:9f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 7 18:20:43 2025 GMT
Not After : Aug 11 23:59:59 2025 GMT
Subject: serialNumber=b9eeeb5fd0870d52444de8215027c868a495f0b5088c772a7a1b10cedfe6b813, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b5:c4:39:6f:98:f7:3e:c3:0b:ac:07:a5:98:
a6:1f:dd:fd:00:52:bc:ed:ac:91:97:4c:25:19:1d:
91:8d:d7:ed:ac:b1:92:41:6d:40:9a:27:ac:9a:71:
1a:7d:cb:b9:93:49:67:1a:2b:9e:b9:eb:80:55:35:
50:22:13:3b:0e:ff:40:6d:54:3c:5f:aa:2b:cd:e7:
85:04:e2:54:95:cb:b9:32:f7:16:10:86:a8:79:6f:
89:c7:3e:66:bb:77:02:3f:0a:0c:67:5c:bc:61:d2:
08:5e:7d:43:f5:9f:67:97:d6:0e:3b:18:2d:90:3f:
75:de:59:3c:8d:19:eb:d1:63:5f:d4:a0:83:7b:60:
76:d3:a8:48:ae:a3:6e:ce:cd:38:a7:1b:8f:38:d4:
e3:83:8a:bd:ca:d0:df:59:e6:9c:e4:96:61:de:e9:
4b:5e:2e:08:28:43:4f:46:28:af:58:04:17:af:5b:
11:90:9b:c7:2d:a1:ac:ca:df:0d:18:bd:ca:cb:a4:
74:70:01:fa:f4:6c:c3:a2:78:1a:a3:7c:2c:fe:bb:
e3:b1:d1:65:83:83:eb:92:6b:e3:33:eb:dc:b8:2f:
5f:31:10:f9:c9:6d:37:02:10:4f:62:92:81:49:0d:
49:53:84:da:99:16:76:91:71:11:dd:01:94:87:b0:
5e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F5:29:FF:6D:38:17:4C:42:48:11:FC:B6:12:4C:49:11:89:2F:20
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da7b8c4e-ee0a-45cd-b6e3-7bacf8a9e2f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:880::/48
Signature Algorithm: sha256WithRSAEncryption
4e:7c:b1:24:3c:bc:31:89:9b:46:bd:0d:05:13:23:e9:fc:63:
19:a8:38:ac:a6:aa:ff:0c:80:1f:83:9c:6f:1b:bf:c7:25:a7:
08:71:f1:f6:41:8e:e9:88:19:dc:4b:3f:9e:f1:0f:72:0b:df:
39:c1:48:01:8a:56:fd:88:b9:de:9e:c9:3c:46:21:e7:e7:fb:
89:81:82:ea:8a:ae:8d:6a:ae:13:75:b4:90:74:03:7e:a9:ae:
8d:2b:36:fd:c8:f4:a4:dc:59:9b:8c:51:c2:8a:7d:30:92:ba:
e1:4f:5c:6c:7a:6a:db:0b:74:8f:0e:21:f3:79:55:8d:d6:68:
9f:71:9a:7c:08:d1:82:a6:39:d1:92:e5:c7:98:3c:46:b5:23:
21:ec:33:71:dc:19:89:bf:42:45:de:4d:c2:26:17:3b:2e:85:
96:21:58:ca:ba:ca:e3:68:6f:46:19:f4:62:e0:bb:9e:27:76:
52:86:e8:81:04:72:1e:ea:83:b2:e7:25:4a:8a:0d:91:c0:9e:
ca:bd:89:a2:d3:c6:fb:6d:97:84:ea:ca:4d:ae:d5:27:fa:75:
ca:ce:bd:a5:cc:9b:2c:f6:25:86:07:b6:04:df:3b:2c:cb:41:
37:dc:7d:71:82:32:d3:2f:ca:41:8a:48:19:f6:52:6d:1d:50:
34:a3:48:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:59:15 2025 by rpki-client