Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b50b516-b90a-4f69-ace2-8e904f240f1d.roa
File: 0b50b516-b90a-4f69-ace2-8e904f240f1d.roa (raw, json)
Hash identifier: hrxXHSC1F6c2814oWU5NICkaHjFiDhm4wdUkcjvJZYM=
Subject key identifier: 0C:98:B3:22:F7:FD:F6:91:79:38:E5:F5:63:9B:A9:CA:8F:D2:24:79
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 38412395016A66611771B105A5D20D8C98656A36
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b50b516-b90a-4f69-ace2-8e904f240f1d.roa
Signing time: Mon 01 Sep 2025 21:01:30 +0000
ROA not before: Mon 01 Sep 2025 21:01:30 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01a:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:41:23:95:01:6a:66:61:17:71:b1:05:a5:d2:0d:8c:98:65:6a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:01:30 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=07a4ef60485bcdbe23598d9546261dec7585c57d4052e14e6d02b0d711e034d5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:59:d8:ea:2c:17:0f:af:22:cc:cd:8e:71:96:
c9:83:68:61:21:e4:c4:d4:b4:e7:e7:c2:2a:e6:35:
c1:7f:d9:46:33:cc:4a:e8:00:18:71:6d:1c:38:ef:
7e:23:a3:64:79:e5:74:dd:55:34:fc:d9:91:45:ec:
9c:61:63:45:e5:88:6f:46:20:9b:db:89:08:6e:5b:
f6:e4:a6:ca:96:0d:60:4c:1d:d7:73:52:59:e8:14:
37:a3:1c:b2:22:0f:c6:0d:fb:02:d5:57:4f:3c:21:
b8:b9:da:5b:ca:22:aa:5f:ae:8b:0e:b5:a3:b7:49:
9b:d3:48:13:95:3b:40:57:ec:db:9e:fc:a7:3b:62:
26:7a:1a:04:e3:19:40:3e:ce:4a:61:a9:db:74:9f:
5e:68:d7:4e:9c:14:25:4b:2c:0b:9a:78:c0:b0:fd:
3f:c8:b4:a1:28:e1:de:bf:47:ab:4d:33:fc:8a:d7:
69:43:ee:e7:c1:93:07:2a:0e:9c:88:17:5c:0f:99:
e8:8b:2f:b2:6c:6a:94:fb:93:a9:46:37:41:be:62:
5b:56:0c:75:a4:df:28:28:ed:34:54:0b:98:12:92:
18:80:d5:28:53:32:f0:86:93:cf:f2:dd:a2:b6:02:
23:f3:f4:fd:ff:12:d3:28:1b:0e:c8:0b:dc:c4:0c:
63:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:98:B3:22:F7:FD:F6:91:79:38:E5:F5:63:9B:A9:CA:8F:D2:24:79
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b50b516-b90a-4f69-ace2-8e904f240f1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01a:c00::/38
Signature Algorithm: sha256WithRSAEncryption
1e:e1:5a:5c:29:4b:91:e1:59:7c:06:fd:4a:6f:f9:34:0e:97:
68:54:37:9c:c4:da:3e:50:7b:23:f6:6b:2f:b6:20:63:47:b4:
30:d0:49:5b:c9:ee:af:40:8a:4b:e5:40:28:a7:81:0c:5a:15:
3f:39:f5:cf:cd:61:7a:b0:81:13:1f:0f:1c:05:fb:7f:77:fb:
4f:65:28:dc:37:0b:9c:fc:61:7e:c8:33:d7:5a:07:eb:85:6f:
cd:f1:c7:58:bc:d5:9f:4b:b6:84:8e:42:f1:52:9e:5f:e7:08:
f5:eb:bd:75:7d:5c:a1:f8:43:2f:9b:2b:9b:86:6e:7a:b1:f7:
a0:1e:26:51:ef:e9:4e:62:4e:41:ab:d1:9d:4f:3b:ff:7a:c8:
b5:1d:80:d3:c5:ea:7e:ca:60:30:49:6c:72:d1:d0:e2:10:24:
16:bc:4e:6d:d4:d2:95:f7:ad:c8:2a:0f:de:7b:94:fb:29:2a:
d1:ea:27:e0:3f:95:c2:e9:49:86:a8:bb:4b:71:e3:49:d2:f6:
ae:6f:1d:02:72:b6:c1:a3:bd:2c:03:b0:79:e4:bc:83:90:44:
17:97:f0:e2:6a:ad:7c:82:b7:54:db:fc:9f:88:85:83:19:f1:
a3:b6:ef:fc:e8:2e:2a:97:24:1f:6c:33:c3:25:bb:cb:cd:96:
97:4e:99:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:07:02 2025 by rpki-client