Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/00150ff4-0ab9-428f-ae9a-ccd9dc669cb8.roa
File: 00150ff4-0ab9-428f-ae9a-ccd9dc669cb8.roa (raw, json)
Hash identifier: GXRYyddRd0iDUj2vKyO/TcegKqbQIhCWj5rehOIrFoE=
Subject key identifier: CB:EA:93:8E:97:56:8E:A7:6D:82:80:5E:16:74:F0:AE:87:1E:70:50
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3B836C3B8906DF834117F2FE89D89CD60B51F14A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/00150ff4-0ab9-428f-ae9a-ccd9dc669cb8.roa
Signing time: Mon 01 Sep 2025 21:00:12 +0000
ROA not before: Mon 01 Sep 2025 21:00:12 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:83:6c:3b:89:06:df:83:41:17:f2:fe:89:d8:9c:d6:0b:51:f1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:00:12 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=ab20cf564cfdf1cd1e4d35ce01c231999aece2440d82d1dcd3946966cce7acff, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4e:4b:f4:77:e4:42:74:38:84:c0:09:2d:39:
a3:e4:c9:70:da:27:f6:19:6f:09:69:db:85:e0:ee:
ed:a3:53:41:20:fb:c2:e7:b1:a2:3f:7a:36:a4:2b:
47:b0:98:9e:5c:7c:a8:0f:c1:af:2a:cf:9f:e8:92:
94:7f:45:df:39:58:60:b9:01:2a:f2:21:75:36:2d:
86:36:d8:30:07:b9:a0:c7:3c:c5:a6:1a:e2:c6:b5:
80:f0:71:00:b5:0f:41:12:5f:71:c2:84:37:b3:7c:
b2:d4:a5:05:16:a5:36:06:64:e3:fd:34:7b:8d:67:
c4:55:8f:98:66:a9:73:b9:6c:12:b5:0c:6d:3f:e1:
76:f6:a2:9d:06:47:91:5c:0f:40:b8:08:6e:8f:7f:
f6:51:c7:91:67:fc:eb:ab:f4:85:45:48:c5:eb:4d:
ef:a7:b3:ec:15:68:37:d8:79:e1:77:f9:91:ad:be:
27:34:f6:79:2f:f1:23:d4:4f:bf:37:27:62:72:c5:
53:ef:35:b5:56:ee:2f:3e:ac:c8:b0:e1:14:aa:4d:
59:36:e8:78:5e:0a:aa:49:3d:45:ba:56:4f:30:bc:
0b:d0:fc:b1:14:f5:eb:b8:59:9b:37:9d:21:09:80:
0e:7c:69:ac:88:30:d5:c8:3f:59:db:40:ca:1b:2f:
80:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EA:93:8E:97:56:8E:A7:6D:82:80:5E:16:74:F0:AE:87:1E:70:50
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/00150ff4-0ab9-428f-ae9a-ccd9dc669cb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:6000::/40
Signature Algorithm: sha256WithRSAEncryption
3c:b0:1c:be:fc:75:2c:b1:e3:65:68:dc:a8:d4:91:bb:2b:09:
d9:50:2e:63:f2:f2:92:d5:10:11:cd:58:77:22:4c:62:7f:95:
3d:49:45:bb:f4:ad:9e:5c:9a:23:fa:40:c7:85:2b:32:36:65:
d3:a0:bf:55:a1:21:d1:d1:00:9d:15:ea:ee:28:61:56:7f:bd:
69:0f:0f:b0:0f:1a:5f:45:2a:4b:02:9c:23:12:36:e1:3b:b6:
ec:e9:5a:76:3b:0c:86:42:16:16:2e:38:1c:08:c2:42:2d:dc:
20:99:ac:53:34:71:21:1b:7f:86:4d:9f:d9:a4:19:aa:55:30:
82:87:71:35:b0:9d:f3:47:9d:c5:dc:9e:50:4e:90:0e:15:e9:
00:15:d0:c3:9b:3c:81:0d:be:77:f1:66:ee:c1:e1:2b:04:79:
16:9e:01:5f:86:0f:58:7d:30:47:b4:68:b2:88:b9:47:b5:4d:
c5:f8:0d:c9:0c:3d:65:33:26:0b:f1:ba:7f:03:45:47:bf:c7:
d1:fe:3d:e4:bd:0c:57:d6:31:f1:a5:f2:2a:22:05:af:38:2c:
f9:3c:24:5f:06:fc:97:6b:10:a8:a2:67:b1:e8:e2:76:a1:51:
e6:3a:c3:9b:1e:0b:ad:3e:1b:19:1d:57:9c:29:24:b1:c4:d9:
5f:50:5b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:08:17 2025 by rpki-client