Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa
File: 17c361aa-9d23-48f1-8250-bc772fa7773a.roa (raw, json)
Hash identifier: eM0zQPEGIwMnUckZ6VNAkr38DymOXe9cLBn+cPlnuYg=
Subject key identifier: F6:E7:6D:EC:93:E1:4F:5C:CD:1E:09:E7:5F:47:80:34:9F:ED:AF:9F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 71ECEF51B15306EE7AB7D5D3F7F7B75DB3437E2C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa
Signing time: Mon 01 Sep 2025 19:40:07 +0000
ROA not before: Mon 01 Sep 2025 19:40:07 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ec:ef:51:b1:53:06:ee:7a:b7:d5:d3:f7:f7:b7:5d:b3:43:7e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 19:40:07 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=7666dbd0c89b0c430a6b65ef6a0e5112bd2fe1cd2b61b55b710e56261975bacc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:6a:00:8a:9b:d5:3e:f4:46:53:91:0a:a9:
00:df:94:c5:e2:0a:6f:c7:38:65:a3:5f:f9:e3:e3:
82:a6:20:97:47:5a:4a:03:3b:74:16:93:a1:32:23:
92:b1:80:c1:6c:a1:97:f5:e9:77:a7:4f:a9:90:99:
9c:5b:79:fb:6c:9b:fa:c6:80:1a:16:b6:63:61:71:
b0:45:f3:e9:fb:31:2a:bf:da:0a:13:4b:52:62:ff:
2a:16:aa:9a:6c:20:36:98:03:cd:a1:cb:d9:c3:8c:
9f:21:6b:05:33:9c:ff:bb:6d:0d:a1:b6:77:d5:29:
09:f2:b8:d9:73:06:9d:be:c9:63:42:1a:d0:31:f7:
f8:fc:40:76:40:bc:a4:43:80:de:43:34:eb:fb:36:
9f:f0:9b:aa:8d:70:b3:2e:f6:d2:df:de:b1:01:e5:
d7:cc:ba:33:18:a4:af:99:0b:c4:7b:e6:0d:ee:d9:
33:7c:1a:df:bd:8c:77:fc:74:56:84:33:25:5e:d4:
da:86:90:25:cf:4a:27:93:dd:54:7f:00:3b:e6:0c:
c6:5c:52:75:7a:b3:f7:aa:d8:96:d1:89:87:e4:f1:
ff:40:54:f7:c0:6d:df:95:b6:75:b1:11:fc:4c:aa:
6b:d8:da:5d:fc:55:dc:6e:bf:c0:b7:ba:0a:4d:18:
88:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E7:6D:EC:93:E1:4F:5C:CD:1E:09:E7:5F:47:80:34:9F:ED:AF:9F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
5f:2f:39:84:e7:c6:02:4a:93:a3:87:32:4a:57:18:af:c2:28:
41:bd:56:1b:bf:76:94:ea:be:20:22:56:1e:93:9a:6c:2e:27:
d3:d9:42:07:9d:09:0b:b8:fd:09:99:85:2e:78:59:0f:8f:2a:
e8:0a:81:9a:87:bd:ae:49:a4:fd:5f:0b:14:4c:3a:25:7a:bb:
d1:32:ba:a7:98:60:db:d8:9c:97:26:36:40:62:eb:d6:2d:e3:
26:7d:57:3d:e4:ab:8e:4c:fe:a9:77:b5:a6:90:28:45:1c:19:
2e:f2:a0:60:fd:e5:d5:54:c1:48:a0:ca:b5:ba:ad:9e:3f:a9:
f3:f7:bc:65:d5:0a:ff:61:5d:ae:07:ce:a8:3d:f4:81:cf:0d:
ff:c2:c6:40:fa:98:dd:38:f7:97:f2:59:85:a4:00:e4:8a:4e:
ed:07:28:16:fb:d4:e0:93:6a:c0:8b:7e:bd:af:fc:9a:06:cd:
eb:d7:e3:fb:0e:61:47:f3:4e:ae:95:88:94:12:f5:f2:ad:ad:
df:00:53:ca:ea:f6:42:e2:86:3e:f4:3c:5a:8f:82:0a:04:54:
0a:76:5b:ee:a6:f8:4d:fe:65:92:36:1f:72:48:71:6c:0c:fa:
b4:79:81:fc:1d:8e:4a:d7:bb:d8:a6:64:6d:13:9b:3a:cf:37:
57:0a:f9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:08:15 2025 by rpki-client