Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa3b401f-ea91-45a9-8182-d567cfac077a.roa
File: fa3b401f-ea91-45a9-8182-d567cfac077a.roa (raw, json)
Hash identifier: xTMc4ZcNDsNyWpOgyZR1fjK4RIOxYIpTZ6/ksGfl6Rk=
Subject key identifier: 75:AB:16:4D:5E:F7:E1:57:C7:AA:40:FF:96:06:F7:49:7A:67:5D:1A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3D32BB156D70987A9900EE927B02A3C64D86EE92
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa3b401f-ea91-45a9-8182-d567cfac077a.roa
Signing time: Fri 11 Jul 2025 18:50:46 +0000
ROA not before: Fri 11 Jul 2025 18:50:46 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:b080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:32:bb:15:6d:70:98:7a:99:00:ee:92:7b:02:a3:c6:4d:86:ee:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 18:50:46 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=efa645b43c7af2d587523938695cc11ff928d7db0d9ef340114a18a63aa0a638, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:18:34:36:52:42:e0:8d:91:ae:f4:8b:96:
e3:d5:aa:ab:10:57:e7:63:fd:4d:b7:8b:48:f5:57:
75:bb:4b:24:16:20:b0:7d:bb:01:06:68:db:19:a1:
cf:de:ab:1f:96:31:6d:08:4c:2d:cd:fa:f8:cb:20:
01:56:12:a5:db:2c:51:f4:41:d3:40:fb:f9:12:27:
30:05:32:a6:8c:33:78:20:16:ad:69:57:3a:b5:5d:
2d:64:bc:d0:b0:42:5b:62:f6:b5:1b:89:3a:37:e8:
df:6f:ab:02:68:26:06:78:8d:fa:cf:cb:88:a7:48:
f8:9e:2d:85:36:c3:cf:d5:fd:6c:e4:22:71:16:71:
63:2b:25:ea:60:ce:ad:71:ba:96:55:e6:e3:2d:29:
4a:bc:e5:ad:c4:32:91:39:7f:f9:0e:ab:62:f9:be:
c4:4b:28:e8:23:8f:9c:88:c9:17:89:03:12:f5:33:
cc:d1:62:1d:bc:f5:b6:4d:9b:96:76:e8:6b:66:7f:
fb:e7:58:69:2e:ad:d0:f6:32:e3:e0:f6:24:b4:9e:
3c:87:a3:41:1d:0d:95:fd:23:a7:e1:26:ec:a2:ef:
9c:e4:44:e5:fd:60:26:59:6a:34:5a:81:4d:9d:71:
60:79:f8:f6:e4:3e:ac:73:06:7b:d3:9a:3d:95:21:
36:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AB:16:4D:5E:F7:E1:57:C7:AA:40:FF:96:06:F7:49:7A:67:5D:1A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa3b401f-ea91-45a9-8182-d567cfac077a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:b080::/48
Signature Algorithm: sha256WithRSAEncryption
12:29:df:f4:5e:4d:ec:16:37:f2:62:46:fe:3c:fb:e5:c6:83:
0d:0d:c7:18:f2:f0:f5:82:d3:3c:10:45:de:45:78:1e:f0:15:
94:dc:9e:73:3e:5e:c9:32:46:ab:b4:ff:af:8a:9c:1c:38:e5:
a4:cd:0b:22:42:27:93:42:2c:9e:6a:5f:0b:1e:64:ac:53:b9:
e4:c7:f3:88:aa:4b:f1:99:bc:df:41:14:cd:6c:fc:65:72:3e:
66:c3:41:a7:8e:85:14:2e:9e:c5:d2:43:d3:71:78:9a:57:84:
00:ce:01:38:06:a0:9d:7c:5d:c5:87:fb:fe:b3:6b:b4:39:34:
67:99:7f:fa:7c:42:25:34:e6:9b:0f:9e:61:37:df:f6:19:3f:
57:b4:ad:ad:2d:ce:98:4c:00:80:da:00:9f:dd:32:52:94:68:
5a:e5:aa:ed:e9:db:4b:6f:9b:c9:2a:0f:05:8e:82:ef:e8:1d:
2c:70:e8:c0:41:c2:c8:d4:52:2c:85:bd:6d:43:4d:72:a9:65:
21:12:59:25:ec:e7:99:3f:94:84:85:49:2b:2e:69:7f:17:e7:
cc:3a:b2:c7:43:f5:fc:1c:b3:81:8e:d0:20:6c:42:dc:9e:54:
d5:b5:5d:fe:e2:e9:f0:86:10:69:31:fc:f2:b9:9e:c1:7b:f6:
1c:48:76:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:44:32 2025 by rpki-client