Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/232e4c5b-5853-4200-81cf-438555b951ff.roa
File: 232e4c5b-5853-4200-81cf-438555b951ff.roa (raw, json)
Hash identifier: OE3kL1aF8S9bQoSN+f3Bqagq9ImO/T5PzTl2qjpJeOI=
Subject key identifier: E5:7C:63:88:40:78:51:EA:93:AF:EA:2A:2A:76:E7:40:1D:1C:C9:93
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2A0857599B532ABD3F7C50BDC17F1E85B4D5881B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/232e4c5b-5853-4200-81cf-438555b951ff.roa
Signing time: Fri 24 Oct 2025 00:20:12 +0000
ROA not before: Fri 24 Oct 2025 00:20:12 +0000
ROA not after: Fri 28 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:08:57:59:9b:53:2a:bd:3f:7c:50:bd:c1:7f:1e:85:b4:d5:88:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 24 00:20:12 2025 GMT
Not After : Nov 28 23:59:59 2025 GMT
Subject: serialNumber=495199c80cd805e265d63efb0fd552aab5a216832dc663784f3e39915a773908, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:bf:2f:ed:90:f7:d5:bd:38:01:0c:03:3b:
4e:85:e5:60:6d:ce:56:da:2b:ad:a1:6a:1e:ed:ba:
44:8d:6d:b5:2c:97:f8:e4:77:07:ba:5e:54:e2:27:
d9:a1:39:3e:b3:59:99:10:89:b2:f2:07:6f:85:54:
19:7f:1a:e3:ee:41:b2:21:51:8e:94:66:ed:c5:aa:
3e:67:9c:1a:f0:64:c8:61:50:cb:34:7b:b1:b2:0f:
c8:5f:9e:05:32:50:57:ab:6d:1b:6e:42:ff:8b:d2:
68:33:9b:93:6f:e0:94:56:b6:32:b1:8b:0d:c7:dc:
25:f5:69:a3:e6:99:37:95:ba:fd:a6:fb:b5:aa:2b:
dd:49:28:f9:89:ac:41:c7:3b:e2:a1:a2:77:73:9e:
e6:43:b9:4a:cd:51:3d:7c:2d:03:d8:ba:55:0a:8b:
a2:33:9d:b6:e0:2e:5d:7f:d9:c1:c5:e7:c5:39:63:
af:89:f4:3f:53:a4:32:19:5e:e3:c0:ca:8b:bc:37:
89:b0:bc:fe:1c:e6:d7:c0:ba:75:1c:ea:17:fa:dc:
05:11:33:7f:41:79:0b:4e:15:03:d6:38:e5:74:e2:
6d:ea:21:08:8d:8d:ed:46:97:9b:d8:e5:cd:02:03:
67:82:17:0f:ba:2f:d9:6e:39:cd:15:b9:9f:7a:23:
4c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7C:63:88:40:78:51:EA:93:AF:EA:2A:2A:76:E7:40:1D:1C:C9:93
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/232e4c5b-5853-4200-81cf-438555b951ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:8000::/40
Signature Algorithm: sha256WithRSAEncryption
00:e6:e7:20:43:c8:1a:78:7f:fb:62:e8:70:e6:65:bc:cc:e0:
66:23:c1:2f:f4:d4:2f:67:c7:df:e0:59:ea:af:51:98:d1:ca:
25:7c:c5:b1:1b:be:e1:4a:37:5f:ee:f1:fa:b8:30:fd:90:cf:
5f:f2:3e:bc:2c:7e:ea:94:ca:c7:02:ad:bc:ec:49:fe:02:9b:
d1:82:bd:ed:5b:4b:f0:6e:a4:74:ab:16:7f:9e:4c:7a:2d:ae:
ec:73:7c:65:3d:96:90:51:da:b2:00:ca:f7:4f:b3:52:9f:b5:
97:4d:4b:ea:09:18:00:e5:b2:3f:be:e5:9b:c2:4d:84:43:8a:
29:4c:87:3a:bc:17:8a:94:71:ec:4c:51:5a:03:78:b8:0b:db:
54:d0:30:72:a2:ec:5f:65:2f:5e:c7:71:df:37:22:a4:41:dc:
62:3a:88:a4:5d:15:2d:a7:e8:2c:8c:44:b8:cf:88:d3:f1:e0:
ce:c6:73:58:97:3b:f1:05:8d:4b:52:ca:01:84:3b:89:93:e5:
16:ac:55:70:ae:f4:3c:0c:f7:50:b8:1e:42:be:1e:99:b0:4d:
35:20:77:51:54:70:15:fc:b5:09:30:f1:6a:9a:6a:35:c8:5a:
7f:88:e5:dc:4b:66:3f:13:71:48:70:4f:f2:92:2e:fb:e1:9c:
b7:2a:70:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:21:10 2025 by rpki-client