Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12099bf5-f9c1-463e-9fc9-eaf791e339e4.roa
File: 12099bf5-f9c1-463e-9fc9-eaf791e339e4.roa (raw, json)
Hash identifier: 48D5PQ/3RfF7uKPMfaSleaCoUaUSfPORxK05gwgufBI=
Subject key identifier: A7:B6:CD:34:79:96:D1:E7:F2:8D:46:29:14:33:5F:F0:AC:FA:06:A5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 245FD589675ABFB15080F38ACAF830698FC38819
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12099bf5-f9c1-463e-9fc9-eaf791e339e4.roa
Signing time: Mon 01 Sep 2025 21:10:40 +0000
ROA not before: Mon 01 Sep 2025 21:10:40 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d011::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:5f:d5:89:67:5a:bf:b1:50:80:f3:8a:ca:f8:30:69:8f:c3:88:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:10:40 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=39a6a70d103a97bb7f66b2f869d219b5e6dee0bca8c0d89d94050bc928afe0a3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:66:b3:ea:c9:84:80:31:88:ee:2e:d4:82:13:
7e:19:af:f0:c9:fe:65:57:2b:2f:fa:6b:fe:79:3e:
fd:0b:19:b2:ab:df:f0:55:ff:51:2d:78:0a:4d:61:
51:d8:2a:83:d8:cf:60:f8:9b:fd:29:54:4c:91:8a:
b0:08:ed:07:4f:b8:29:90:b6:48:2c:56:a7:18:a7:
2c:8c:91:86:f0:29:7b:99:1c:f5:66:27:d9:7b:3d:
db:cc:63:79:36:2c:10:54:2a:de:f4:0c:86:36:d2:
e1:28:ad:fe:23:ba:1c:24:d6:61:d9:5d:a8:3f:fc:
73:74:46:e9:41:b0:b4:bc:1d:2a:8d:f5:7f:84:3e:
cf:ac:67:2f:4a:e1:ed:ac:8c:13:cd:60:81:c6:81:
26:93:fe:ef:7e:6e:1b:32:74:df:0e:cd:24:90:3f:
01:90:66:cc:f5:25:38:37:fe:97:c0:34:b5:78:37:
98:ec:fb:fd:72:38:2a:56:ba:d4:9f:ea:b6:04:e1:
1b:b2:81:ec:75:d8:20:42:d6:28:e4:f6:88:7c:c7:
e3:cd:35:4e:36:cf:aa:e1:ee:a7:69:75:13:3e:62:
48:e2:9b:5b:07:7a:6c:33:82:d2:bf:58:c9:23:8a:
de:60:03:e5:1e:e6:b0:38:4b:d0:2f:32:f7:fb:fb:
9b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B6:CD:34:79:96:D1:E7:F2:8D:46:29:14:33:5F:F0:AC:FA:06:A5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12099bf5-f9c1-463e-9fc9-eaf791e339e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d011::/38
Signature Algorithm: sha256WithRSAEncryption
40:91:5a:d9:82:12:0f:e6:5b:06:2a:f4:c6:29:39:8f:56:1e:
5d:dc:9d:3f:80:51:24:ab:5d:1e:26:75:88:cf:55:a3:51:4a:
fd:2b:05:bc:1f:6b:cd:42:4d:61:e1:99:b4:1c:ca:b9:c0:a2:
76:f1:cf:4c:a5:8d:96:30:b8:02:35:27:38:d6:d0:0e:92:e7:
fc:c3:f6:c4:98:7c:88:2d:74:36:ca:c4:11:64:df:53:67:27:
ff:30:ba:ab:26:4b:85:c8:99:38:94:96:27:ff:ad:2a:df:8f:
cb:ef:1b:1b:80:1d:67:80:36:64:c8:c3:cb:45:db:43:aa:59:
09:48:94:e5:d2:4d:da:f8:2f:2d:1c:06:9f:84:cb:91:02:40:
85:93:86:1a:7e:1c:61:02:c7:a7:72:11:c6:a9:e5:c5:19:85:
14:e8:5b:9d:e4:4f:6c:79:dc:d6:9b:ca:eb:de:fb:be:5c:5d:
44:e3:bd:b0:26:dd:de:f0:fa:b5:f1:10:f4:4a:8e:a3:ef:29:
af:e6:61:ae:bd:79:0b:90:8b:c0:9b:87:aa:be:19:8c:63:32:
c8:97:72:7c:ce:1d:d1:32:2b:16:fe:58:37:b1:7d:24:b6:ac:
5f:c0:b7:51:bb:f3:b8:0d:ca:35:54:18:a8:99:42:38:f0:64:
ee:8f:38:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:07:08 2025 by rpki-client