Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/216e1c1f-35c3-4c02-a0c3-0b5815c016d7.roa
File: 216e1c1f-35c3-4c02-a0c3-0b5815c016d7.roa (raw, json)
Hash identifier: RHB6cR7yriqFOah5bT830wG5/CVu2R1foHpOS7IaBv0=
Subject key identifier: 8A:AA:5F:7C:C6:C1:02:C3:7B:BA:C7:6B:75:0C:DD:29:0A:20:11:E2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5B5D299CEC17AEA7DD3DE52CD0F729CDC0352F78
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/216e1c1f-35c3-4c02-a0c3-0b5815c016d7.roa
Signing time: Mon 01 Sep 2025 19:41:03 +0000
ROA not before: Mon 01 Sep 2025 19:41:03 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:5d:29:9c:ec:17:ae:a7:dd:3d:e5:2c:d0:f7:29:cd:c0:35:2f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 19:41:03 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=33518201a3fe5f768566570f2705e739a46f15ef9cced8898a259fb9bcdfffa0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:91:31:2d:a4:05:29:e9:f0:2d:87:7e:47:
b5:89:df:5b:d5:c1:f9:72:52:be:39:76:17:ed:f7:
25:94:bd:98:cb:5f:f4:0f:3e:45:32:84:7d:9f:16:
3f:96:cf:4b:26:9b:55:3d:70:8a:28:30:d2:d6:e5:
0b:4f:0f:17:61:23:5d:00:a9:e0:db:40:9d:71:d3:
f0:e7:65:b2:70:8b:d5:85:39:31:ba:4b:bc:f6:24:
b2:1a:f9:6c:83:7c:2b:23:1b:55:fe:43:04:c7:6d:
a4:62:52:bc:0c:ad:91:2c:df:26:36:b7:60:db:ce:
74:bf:3f:19:3e:5e:1c:cf:ec:7e:62:7d:0d:29:00:
8b:6d:ba:bb:ea:9a:bf:c2:08:23:77:e2:e4:70:c3:
84:16:08:0e:b2:ee:0a:2f:86:86:3c:94:d2:67:03:
96:63:2c:af:3e:31:17:f3:39:df:d3:7b:f3:fd:1e:
a6:b2:65:d9:9e:cd:6d:32:94:67:55:94:df:61:97:
31:73:4d:60:8b:c1:ea:1d:bc:13:f1:56:1b:8d:ca:
b1:74:04:98:57:0e:63:d9:99:19:d6:41:9b:04:12:
5c:80:1a:e4:35:a9:96:57:0f:e7:22:88:df:a2:c1:
c5:37:1f:c4:82:77:d0:dd:46:d7:76:13:61:0b:68:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AA:5F:7C:C6:C1:02:C3:7B:BA:C7:6B:75:0C:DD:29:0A:20:11:E2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/216e1c1f-35c3-4c02-a0c3-0b5815c016d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
98:d9:eb:bf:d2:25:31:66:08:49:a7:6c:a9:ce:67:3e:ff:ed:
5e:27:fc:dd:d2:d2:95:75:9e:82:4b:6e:f2:83:0a:97:bc:57:
92:ab:1b:7f:b6:7f:91:e4:92:59:74:ed:73:eb:4f:69:6c:75:
0f:6a:28:84:87:78:e5:dc:e8:c4:1a:fb:bc:af:27:8e:b8:1d:
d6:e2:1b:8d:72:77:a7:1a:f4:7e:48:28:8b:a7:04:fb:88:b4:
25:a4:87:f3:8c:c2:90:24:00:25:88:df:5b:3b:81:b9:c1:4c:
ef:9e:98:d0:e4:45:a3:38:ab:11:41:a9:bc:a1:d0:ce:b0:2e:
d2:f5:d6:c7:0f:a5:b2:87:3c:36:01:13:4c:57:f6:e6:18:49:
ff:31:fd:fc:5b:ed:2a:ad:cc:d7:c4:98:5a:44:07:63:d6:5b:
e8:6a:89:3e:0d:62:d3:43:fc:e4:4c:99:07:88:e3:d2:3e:ad:
d5:e8:36:66:d8:70:7f:f3:84:33:c8:46:a7:1e:93:08:11:02:
85:b0:2c:d0:6c:c5:00:14:85:82:cd:1e:8c:d0:45:92:95:cd:
b5:12:9a:38:64:12:d1:70:60:05:2f:07:37:7e:74:0d:5b:f2:
08:57:69:f9:5a:18:83:f5:91:5d:b7:a1:31:6d:44:9c:87:df:
a9:ed:e0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:17:08 2025 by rpki-client