Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c9e649-eee0-4a0a-a4f3-716c5082d6ea.roa
File: 14c9e649-eee0-4a0a-a4f3-716c5082d6ea.roa (raw, json)
Hash identifier: 6AgO+tfmr59LzPiZVrfw+DakvHre6H1L+WQBaFWy6BY=
Subject key identifier: B0:F9:6B:52:81:A9:93:50:DA:61:9A:86:36:91:78:5B:C7:56:2C:73
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 678C9CF9D817645E76AD526EFA032E7F9C3FD36A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c9e649-eee0-4a0a-a4f3-716c5082d6ea.roa
Signing time: Fri 15 Aug 2025 15:40:44 +0000
ROA not before: Fri 15 Aug 2025 15:40:44 +0000
ROA not after: Fri 19 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:c020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:8c:9c:f9:d8:17:64:5e:76:ad:52:6e:fa:03:2e:7f:9c:3f:d3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 15 15:40:44 2025 GMT
Not After : Sep 19 23:59:59 2025 GMT
Subject: serialNumber=6068996f3dbe25cf866f744e0517f89bfda5bc68fbe66a25249eb69cc6051d03, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:cc:a8:17:0b:e1:46:ea:50:fa:f6:af:27:
97:6e:3b:d2:86:cb:50:f6:9a:c4:93:57:cd:cc:42:
76:01:5c:bd:70:df:29:e9:bb:8b:6e:7a:16:b4:11:
45:eb:a9:4f:eb:b7:2f:4d:ac:e4:f6:c0:5e:ab:9b:
cb:6e:4d:1b:9a:a8:fd:44:41:2f:ce:cf:d5:51:88:
ec:88:07:6e:9b:a6:7a:6d:a0:6d:84:e2:6e:00:2c:
c7:44:8e:cb:82:20:7e:b0:a3:41:52:58:f3:26:f6:
5d:97:2a:35:73:9b:4e:48:b6:7d:a3:41:29:9d:2f:
11:76:c9:20:06:7c:cf:73:8a:0a:3b:57:17:d0:92:
41:d4:6b:c1:69:52:b4:7d:91:33:2e:e4:fd:a5:51:
5f:4e:1e:e0:bc:1d:03:12:e0:46:14:de:89:98:94:
b6:ba:81:65:6d:ee:04:86:e4:2d:5c:19:5b:ac:2f:
02:43:ba:ef:73:f3:ad:eb:ea:81:a7:f2:22:65:38:
46:4a:86:7b:4e:a3:2d:b0:b2:cf:7d:52:3f:91:a7:
76:c6:52:93:97:74:31:2f:d0:70:51:48:3c:b5:07:
4d:ac:8c:d7:f7:45:9a:1c:81:fb:c0:8a:59:3f:6a:
84:3c:f1:d2:e3:97:64:28:73:91:1d:0c:c3:a9:42:
72:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F9:6B:52:81:A9:93:50:DA:61:9A:86:36:91:78:5B:C7:56:2C:73
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c9e649-eee0-4a0a-a4f3-716c5082d6ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:c020::/48
Signature Algorithm: sha256WithRSAEncryption
b6:75:7c:c1:16:c4:4b:da:4e:2d:dc:1f:f1:fd:9d:4b:f0:cb:
86:26:1f:6a:f1:1c:67:84:16:f9:a6:27:7e:2e:e7:cb:a4:10:
77:93:31:fa:83:e1:f8:cc:54:85:0c:35:05:a6:56:2e:b0:01:
6a:a3:4a:e9:f6:5c:1c:3b:68:20:a0:06:42:30:c4:fe:7e:a2:
76:ab:57:90:dc:91:25:60:7f:41:ff:48:38:92:22:7a:95:5b:
4f:bc:b4:83:1e:fb:c7:1d:20:80:92:d6:fa:27:e3:92:74:5c:
8d:e3:4d:f9:13:3f:96:8d:43:70:52:fa:56:15:c6:6c:ae:c3:
3a:17:ea:6f:72:dd:2d:f6:aa:58:7e:9f:21:53:60:20:7a:07:
b0:0b:c7:34:5b:69:29:29:ea:ae:0b:6e:96:1b:d4:58:20:2a:
53:3b:61:80:9c:a8:ff:b3:8d:c7:8f:7c:4d:ef:2d:b4:ba:3f:
fe:32:e8:74:cf:4a:57:0b:d0:30:a2:cd:14:e3:d6:55:07:61:
86:fd:d6:79:87:a0:3c:b6:b6:10:4e:eb:3d:2b:59:b7:d9:3b:
77:6c:62:5e:2b:47:87:37:9b:e4:4f:ab:db:fd:ce:90:83:ed:
91:29:a5:80:ed:07:3f:6f:49:32:f3:68:05:4f:c7:20:4a:60:
1a:d0:db:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:37:36 2025 by rpki-client