Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa
File: 119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa (raw, json)
Hash identifier: D4Sluw15dpRkZP6AzoiKcNoyGDmC2rYloQOKObp3KEg=
Subject key identifier: B3:E1:CA:0A:40:FE:84:CC:EF:EA:7A:74:C9:F0:17:D0:7D:62:B4:63
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 48081D154EB7226AD07DA28BB2D06ADBBD8A655A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa
Signing time: Fri 15 Aug 2025 15:41:22 +0000
ROA not before: Fri 15 Aug 2025 15:41:22 +0000
ROA not after: Fri 19 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:08:1d:15:4e:b7:22:6a:d0:7d:a2:8b:b2:d0:6a:db:bd:8a:65:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 15 15:41:22 2025 GMT
Not After : Sep 19 23:59:59 2025 GMT
Subject: serialNumber=d9374f11eeb699ed8546029b7b29db12a910bc89bf4a573d3a1c30500c13b316, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a8:ec:ed:e3:8c:f9:0b:d6:44:b8:f8:82:83:
cd:a6:2f:e2:d4:7b:dc:84:b0:3c:42:e0:4b:71:67:
21:83:66:8d:b3:65:3b:c7:ea:37:e1:1d:da:50:d7:
fe:d0:a8:c3:94:ea:8c:47:90:98:71:e9:69:c3:eb:
7d:a9:98:29:cf:a5:98:fd:dc:0c:43:86:ce:0f:dc:
6b:d8:de:77:6a:4f:2b:51:93:4b:c6:fd:50:3f:ce:
90:e5:63:ac:fa:65:c7:23:61:4e:6b:ff:43:f1:9b:
1f:5f:53:4f:db:d7:5e:39:83:b1:29:6c:02:fc:e2:
d3:9d:5c:a6:82:ba:67:89:01:7c:2e:7f:77:ef:d5:
1e:19:b4:84:f9:be:c5:41:5a:66:8b:87:66:46:23:
a8:60:1e:d6:60:09:09:51:45:8a:74:3c:8c:43:1e:
a8:d0:34:2e:67:96:a9:d5:ba:b4:b7:c3:0e:b2:b3:
74:6c:c6:f7:3b:6d:01:30:fb:93:56:09:03:be:36:
6c:31:39:c9:fa:2e:b0:3c:e9:a2:d2:62:d1:6b:3c:
88:f7:85:e0:0e:9d:21:e7:d8:7c:e5:3b:ed:ca:88:
8e:40:02:98:0c:7f:3d:d7:b5:f7:eb:a2:df:ea:a8:
01:48:c9:c9:cc:e0:14:33:87:fb:13:c7:01:d6:7d:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E1:CA:0A:40:FE:84:CC:EF:EA:7A:74:C9:F0:17:D0:7D:62:B4:63
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:4000::/40
Signature Algorithm: sha256WithRSAEncryption
06:a5:4f:a4:07:9d:de:33:e7:58:98:9f:a0:67:d3:a0:9d:ce:
c2:35:f2:17:25:bb:9d:36:0e:b1:a7:35:b0:72:d2:ad:12:d8:
da:4f:c0:45:5a:86:f1:55:78:bd:b0:e3:c0:d5:d4:78:80:5b:
c8:fa:32:f7:55:49:59:61:bb:ff:90:32:50:ea:d5:02:8e:59:
22:24:05:89:a1:27:a5:0a:46:14:e4:d9:2d:81:0f:60:cd:e4:
76:f0:a8:80:2d:9b:ab:a4:24:5c:fd:f3:6c:87:91:4e:72:32:
83:29:af:65:1d:03:07:92:32:a7:f3:48:1f:17:cf:ef:32:3a:
04:db:55:5b:f8:b1:d9:2a:64:3e:60:01:bb:fc:1b:47:ef:1a:
2e:90:90:38:70:bd:2a:e3:79:8d:09:53:13:54:79:47:2b:4e:
c4:9e:b5:dc:5c:13:74:5c:c3:bb:94:d2:1a:9a:66:ac:3b:81:
d5:74:5f:8a:a6:1b:69:70:25:ed:40:a5:cf:51:fc:0d:9d:07:
99:37:58:e2:fd:26:f0:c9:de:0b:6d:c5:5d:b6:5f:7f:cb:2b:
97:36:4a:8b:2c:7a:5f:1e:46:83:ab:9d:4a:33:64:95:86:ed:
8c:0b:09:90:e0:47:78:c0:97:0b:6d:b4:84:a9:f5:bf:74:96:
83:9c:09:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:37:37 2025 by rpki-client