Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc8b1b19-8868-43a4-8d84-4c0b99202a0d.roa
File: fc8b1b19-8868-43a4-8d84-4c0b99202a0d.roa (raw, json)
Hash identifier: Fa9C2akRNJ0oUj5dSZsIcRjqxlGNdOy7iRq+Tj+e7k4=
Subject key identifier: 94:5C:C5:34:A8:50:22:96:F2:9B:BD:21:14:28:B3:15:0C:62:97:B6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 427B630F7F64038224757724C404E027CF6192D7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc8b1b19-8868-43a4-8d84-4c0b99202a0d.roa
Signing time: Fri 11 Jul 2025 19:50:51 +0000
ROA not before: Fri 11 Jul 2025 19:50:51 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:7b:63:0f:7f:64:03:82:24:75:77:24:c4:04:e0:27:cf:61:92:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:50:51 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=580ecbd72667800441d4f5baff31557757f3c40db6e9824efbe9518a55488b5b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d8:7a:40:f7:ef:b7:c7:b1:2d:59:3d:83:2a:
10:05:ba:40:1e:59:2c:07:96:16:c7:24:c3:bc:ae:
8c:cd:41:6a:8a:3c:c4:d4:2e:5a:ce:2d:37:75:f5:
2c:5e:1f:ab:17:f6:b5:e8:b1:e0:3b:a6:64:90:49:
af:da:de:82:cc:b4:af:ec:e5:90:4b:f7:6f:6f:55:
56:2d:1c:e7:47:20:25:35:85:72:bd:86:4f:c4:69:
f9:b9:3a:e5:f9:56:c7:de:29:13:7d:46:1c:e9:fa:
d9:7d:d0:81:08:54:36:7c:ac:0c:cc:95:f0:32:ba:
d6:85:99:d3:cf:5b:8f:df:0f:08:36:bb:78:34:09:
22:b5:93:ce:35:92:27:68:01:ce:f9:9c:8e:52:9c:
b9:18:25:63:47:1b:24:a0:60:fa:3a:1a:d1:91:f5:
5a:0d:e2:5b:5b:1b:95:8c:c3:87:68:c7:41:4e:ee:
61:55:3e:79:de:af:cc:a1:a0:9a:9f:7b:fa:d1:69:
09:c1:98:4e:87:55:52:2d:b7:42:62:6d:0e:5d:d2:
5d:8f:d2:7c:0f:21:81:2f:8f:95:3e:c3:e5:9e:51:
67:bc:33:c4:ca:eb:3a:bc:e6:f5:bb:fd:53:c3:a5:
b7:af:f9:37:bd:fa:87:53:86:1a:8f:fd:6a:3b:4a:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5C:C5:34:A8:50:22:96:F2:9B:BD:21:14:28:B3:15:0C:62:97:B6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc8b1b19-8868-43a4-8d84-4c0b99202a0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:6000::/40
Signature Algorithm: sha256WithRSAEncryption
0f:6b:17:de:0e:35:6c:ff:a7:5a:5b:ff:22:1f:d6:75:40:d1:
39:71:bb:9f:81:27:d5:1f:78:2c:ad:eb:cb:72:39:24:d8:a5:
31:bf:57:7f:2b:a6:34:bb:d0:70:7b:94:2c:6b:70:a6:ac:82:
df:8a:de:41:f4:34:8e:37:cf:97:5f:5a:8e:4b:e1:74:6e:05:
9e:63:03:76:8d:13:1e:8b:25:61:95:7a:32:ad:8a:f3:5f:5a:
c6:cf:9c:05:60:51:18:80:7a:c7:32:a4:5c:32:34:55:cf:56:
ef:ad:41:8d:cf:be:a3:6c:ea:48:51:c3:82:99:8e:ee:ea:f2:
26:16:64:52:8b:ed:1f:81:09:75:9e:1a:95:97:e1:45:0d:82:
ba:bc:ec:b3:dd:1f:75:43:80:62:01:c3:e6:4d:b4:77:4e:b7:
78:a2:71:24:a7:1c:cf:33:9b:b3:11:93:1f:00:9c:84:df:3b:
5d:fa:5c:fa:30:7e:ab:56:17:e9:12:9e:98:bf:f7:59:2f:e9:
18:fe:fc:e8:5f:8b:82:ae:09:76:ca:68:d8:ba:ac:6b:f2:a4:
43:8c:8e:b9:e6:0b:78:86:5b:5c:0b:61:68:b1:0f:9d:43:cf:
35:75:a5:93:65:52:16:fa:48:04:82:2c:25:2b:bf:98:a8:54:
e3:07:a8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:41:25 2025 by rpki-client