Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa
File: fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa (raw, json)
Hash identifier: KUvhvihh+74NxBieza3RoY5q/MpAk2yYW4+gSi8t+2E=
Subject key identifier: C1:A3:B8:A3:66:7F:63:B5:D9:2A:CB:B6:DF:E4:D2:15:63:AB:AD:FA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 21C11879958866E4C18DD6DD955BED27F1CC09CF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa
Signing time: Fri 11 Jul 2025 19:10:07 +0000
ROA not before: Fri 11 Jul 2025 19:10:07 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:2080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c1:18:79:95:88:66:e4:c1:8d:d6:dd:95:5b:ed:27:f1:cc:09:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:10:07 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=ada33dd962f77bcc4e2426ead47896f26efb58981c66c85062550a7d7a079f4b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:9f:3f:26:10:d0:0c:bb:0e:25:ed:76:aa:
44:57:c3:3f:4b:8c:07:65:46:3b:c6:4c:ce:7c:76:
48:4f:fd:d4:d5:16:23:db:70:b3:57:bc:e4:d5:13:
dc:91:3a:2c:f7:cc:29:3d:2e:68:24:a8:8c:c8:b0:
78:9e:00:b0:32:4f:f3:b8:32:11:97:71:ad:be:62:
c7:48:ff:46:e3:6b:42:f4:46:25:91:45:52:6f:f4:
66:b3:19:bb:50:2c:17:8a:e2:3f:b0:05:08:40:3c:
ec:c2:14:13:ee:45:a5:45:75:88:d9:37:5a:45:e8:
a8:b0:3d:56:71:2d:c8:3b:f5:9a:06:e4:39:ad:74:
ec:20:f9:4a:3f:e4:34:d6:97:e6:51:c6:2f:59:c6:
32:8c:12:f0:ee:76:d6:7e:12:5a:69:a1:cb:ed:ed:
fd:64:6c:18:af:26:59:e0:0a:6d:3b:66:56:53:2f:
8c:20:eb:92:1f:a1:81:38:db:6e:e0:44:89:83:74:
50:ab:85:c6:2a:f0:92:d0:7f:96:26:86:4b:a0:9f:
4e:0d:5a:08:3a:d1:67:e0:41:31:12:50:73:3e:38:
f5:fa:2e:27:6b:81:c4:bb:41:9e:9a:96:e6:b6:81:
07:f5:d8:75:e2:ef:4a:69:89:53:c8:cf:07:d8:6e:
54:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A3:B8:A3:66:7F:63:B5:D9:2A:CB:B6:DF:E4:D2:15:63:AB:AD:FA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:2080::/48
Signature Algorithm: sha256WithRSAEncryption
9c:ac:06:95:64:a6:1a:f3:84:5b:7f:34:e7:b3:47:27:39:45:
bb:40:8f:7c:59:08:8b:2e:1a:8f:b1:de:05:7b:54:7e:87:81:
f1:10:1c:46:12:e1:37:83:09:03:0a:d3:3c:38:20:ec:10:c8:
e0:78:26:dd:62:7c:08:94:26:f3:67:17:17:db:8e:8e:35:5f:
6b:e5:d8:98:17:d0:e5:22:bd:d5:eb:d8:f2:5a:4f:ca:62:35:
94:50:49:46:84:67:31:e1:2d:4d:fb:4e:45:6c:43:98:e0:66:
88:57:63:18:b6:f4:4c:ec:e3:ae:26:35:32:b3:29:08:4b:f5:
18:ec:a3:41:a8:a9:68:c1:8c:c2:df:5c:f6:d0:3d:21:8e:5a:
f1:c2:5e:89:f6:1b:20:cf:36:04:fb:dd:84:f8:74:a8:63:63:
e4:d0:ff:c2:94:16:2d:43:04:90:67:4d:42:17:fb:76:d1:af:
11:04:e6:e8:88:7f:e9:0b:ed:bd:2e:9f:4a:3f:1c:64:d9:5a:
a6:81:9c:29:11:96:27:0b:7b:d0:65:33:c1:9b:08:36:df:67:
84:02:ea:73:cb:9e:9a:3a:f7:58:f7:65:8f:43:a6:fa:18:d9:
28:61:06:cd:b8:bf:84:ab:1b:7b:ab:27:74:b0:91:4e:04:1a:
21:da:cb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:36:31 2025 by rpki-client