Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a27d9f-3cc9-4ac4-9afb-399f66bee60b.roa
File: 19a27d9f-3cc9-4ac4-9afb-399f66bee60b.roa (raw, json)
Hash identifier: XU9KL/k0+1FwwYXJtzqIjYCpvEoGno704QbxDNkOhPI=
Subject key identifier: 0C:0E:A6:7F:5A:6F:37:2E:EF:86:1D:EF:1F:5A:42:11:1A:12:D3:A4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 34E158B1DE93BFE8A044BCA2850E91C9C6F0A081
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a27d9f-3cc9-4ac4-9afb-399f66bee60b.roa
Signing time: Mon 01 Sep 2025 19:51:29 +0000
ROA not before: Mon 01 Sep 2025 19:51:29 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:5080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:e1:58:b1:de:93:bf:e8:a0:44:bc:a2:85:0e:91:c9:c6:f0:a0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 19:51:29 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=fdd1ef1c49e65de31be4f7497e9ba27c59b54c99719ba483339d9308a2ba319f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:47:62:24:46:d3:8d:95:8d:58:36:c9:41:
80:2d:35:aa:bd:74:db:4f:a1:1d:81:fd:08:8f:dc:
2f:c9:06:e8:48:a1:37:f0:94:4b:b5:39:68:a9:0f:
e1:c4:f0:74:8e:d0:d2:43:8b:da:c8:7c:69:2a:a5:
df:6c:33:55:ce:3d:30:af:0a:82:8f:0f:04:87:4c:
0e:23:3b:cc:a5:ef:f3:0d:24:73:4f:8f:b0:8c:4d:
c0:76:23:84:e9:58:14:91:be:cf:82:29:d0:b4:ec:
dd:c8:d3:bd:18:62:a9:12:a1:cf:d4:26:cd:80:4f:
de:ce:ed:54:72:92:67:61:e3:1f:26:17:b9:34:13:
37:4b:0c:41:e1:47:c2:57:16:11:e1:9e:1f:05:fa:
cb:97:1f:02:06:38:26:f8:77:bd:4b:b8:7e:1e:fa:
88:fa:34:8f:a8:c5:25:e6:cc:56:1b:6a:b5:09:6d:
8b:ba:4e:1a:b4:f1:6d:18:7c:3c:47:db:f7:24:79:
4b:c0:b5:d7:98:70:90:5d:76:57:b1:ba:6b:81:0d:
48:f2:2c:1c:64:95:f2:b3:9c:aa:36:51:bc:00:f8:
cf:83:2b:d1:a1:31:24:35:6e:66:0f:49:ab:f4:48:
c6:a6:19:96:f5:6d:ba:3f:43:4e:42:16:89:ff:e9:
c0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0E:A6:7F:5A:6F:37:2E:EF:86:1D:EF:1F:5A:42:11:1A:12:D3:A4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a27d9f-3cc9-4ac4-9afb-399f66bee60b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:5080::/48
Signature Algorithm: sha256WithRSAEncryption
21:da:bd:87:e3:f1:42:72:92:e9:49:31:78:eb:0d:af:dd:f9:
ba:5a:e6:2d:6c:84:7a:aa:36:e2:3f:c7:c0:26:9b:9a:1d:9c:
39:2d:7a:6e:a4:21:a6:f2:fa:c2:fe:e5:ad:c6:77:f7:dd:fd:
15:88:1b:c3:39:15:ee:24:3d:e0:00:fc:73:4e:3d:e5:4a:02:
9d:25:0b:2f:21:b8:0d:c5:0d:78:c6:7c:ba:8c:28:44:6e:53:
9c:53:b4:56:44:98:6d:a6:ea:8f:ba:8e:1f:dd:67:13:9f:a8:
82:11:6f:32:1c:55:82:d8:99:81:ff:0f:fc:c1:d6:a8:ec:d9:
03:5d:1f:dc:fe:f8:9f:e8:3e:6c:ec:9e:a8:fe:06:f9:0a:fe:
51:a5:ab:01:3c:3a:23:ca:5a:7b:b8:d4:a3:97:37:5c:4f:eb:
dd:a5:f3:43:d6:90:1d:6d:86:6f:16:92:a3:02:2c:e8:17:9b:
c3:8e:23:f4:4f:c2:55:ea:d7:2a:90:5b:3c:96:d0:9e:d1:8d:
e7:70:ca:76:1b:8f:35:dd:58:47:87:08:fa:03:53:17:20:84:
a5:bf:a9:f7:3d:cb:5c:03:16:e3:9f:c3:1c:46:83:54:00:26:
c3:2a:6c:6d:e8:4e:18:dc:66:c3:6d:6a:dc:d2:43:c2:57:14:
9a:ff:5b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:06:10 2025 by rpki-client