Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/248ea861-facc-4167-976d-1e65c556b074.roa
File: 248ea861-facc-4167-976d-1e65c556b074.roa (raw, json)
Hash identifier: xGunmfPpzrB9pYuaYqXgnqBjosAh2v6VBx1cyZRpsnk=
Subject key identifier: 71:9F:E0:37:BF:29:9A:78:52:AB:53:88:16:7F:79:A2:3E:02:A4:E4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1AE7B51B83988DC8D2646C805189236A2EE22420
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/248ea861-facc-4167-976d-1e65c556b074.roa
Signing time: Mon 01 Sep 2025 20:51:32 +0000
ROA not before: Mon 01 Sep 2025 20:51:32 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:e7:b5:1b:83:98:8d:c8:d2:64:6c:80:51:89:23:6a:2e:e2:24:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:51:32 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=60da3e3010828e251abd1508e775c8f858d4353bcc198fb6ebbbc35daa2b344c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:d5:eb:6f:63:85:f0:d4:df:28:fa:58:a5:
2a:51:e7:12:be:85:60:96:5f:61:30:b9:9c:4d:c9:
42:b0:5c:91:49:f9:71:a7:12:ae:b3:38:a8:a1:b2:
e2:39:0e:5a:35:2d:cd:fd:35:17:5d:21:9a:6c:9b:
d0:02:52:ae:ae:52:d5:2d:b1:c9:8d:9f:6e:cc:9a:
4b:d8:c0:93:be:cb:95:ee:ad:f6:cf:96:2d:c7:71:
7f:ea:59:62:10:1d:17:d4:91:05:74:92:51:58:05:
f3:46:23:32:e9:4e:fa:e6:0c:3b:e0:2e:af:cb:d1:
e8:31:8f:64:23:51:b6:89:4f:93:66:8b:ac:68:ea:
f7:da:45:a0:24:47:74:72:dc:ee:9a:f1:11:5e:19:
52:a5:53:ce:b9:99:18:0b:cd:f5:4a:16:7d:3b:bf:
06:21:0d:46:8d:96:08:d9:65:fc:c7:ac:9d:29:dd:
53:01:58:58:1c:a6:3d:1c:11:95:69:a3:85:93:c4:
d9:49:1e:13:05:9d:98:48:eb:80:e0:6d:e3:40:6b:
98:ef:26:0e:2e:e0:d2:a0:d6:75:16:f4:7e:ec:f0:
45:e3:57:77:c1:90:ef:89:2d:68:aa:7f:25:4a:5b:
2d:e7:bc:e1:f4:00:0b:e1:e6:bc:cd:22:37:d9:cd:
15:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9F:E0:37:BF:29:9A:78:52:AB:53:88:16:7F:79:A2:3E:02:A4:E4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/248ea861-facc-4167-976d-1e65c556b074.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:1000::/40
Signature Algorithm: sha256WithRSAEncryption
16:88:27:25:ba:f7:a7:30:7b:90:e1:68:84:58:6f:14:1d:31:
6c:5b:27:dc:ad:ae:36:49:2f:19:9d:22:d7:9f:3d:f3:fb:0c:
7b:77:de:f5:3e:06:35:31:a9:92:95:e2:03:0b:a4:e5:99:1c:
81:05:c5:61:ea:76:f2:70:80:1c:f9:64:24:a1:29:1e:98:10:
51:42:08:a7:d6:87:75:3c:91:02:37:0b:5e:35:55:fd:d4:fd:
90:ca:17:91:9b:e5:06:19:c1:8b:be:c0:aa:7f:fa:25:a5:d8:
24:62:87:8b:18:1e:a8:6d:a2:51:9e:e4:5e:47:52:80:c4:5a:
f2:9d:13:81:3a:ab:db:8d:f3:1b:dd:bc:01:d1:8a:f0:ef:6a:
42:41:81:73:09:e4:ce:ee:13:ab:8c:66:c8:49:2b:f8:0b:20:
c9:9a:5f:b8:f2:3c:a1:92:e5:f7:d2:34:96:de:33:8f:50:b9:
54:e3:10:8c:8c:d1:05:fc:ec:e2:69:6a:69:09:c6:a5:ea:af:
9e:c4:40:e8:34:25:b3:4a:46:97:3e:21:27:03:4a:65:8f:f3:
99:00:9a:7a:9e:82:ad:9b:fd:35:0b:26:66:b4:cb:1b:cd:71:
fc:aa:6a:c2:31:b2:2b:b0:1e:af:af:6f:99:e0:04:e7:68:d2:
55:87:75:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:13:29 2025 by rpki-client