Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/24b496aa-161c-4d5d-a9ca-3ba09772390a.roa
File: 24b496aa-161c-4d5d-a9ca-3ba09772390a.roa (raw, json)
Hash identifier: JSMeqzkqyiY9z8mYEckS4tjwEwgU/UXdu+6NQ9AfT7s=
Subject key identifier: FB:02:A3:AB:C6:B5:18:49:97:80:2C:9C:7D:E7:10:87:23:93:2D:A0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 325C21005F09FE814A065B90EFFCC23B76384CAF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/24b496aa-161c-4d5d-a9ca-3ba09772390a.roa
Signing time: Mon 01 Sep 2025 20:50:10 +0000
ROA not before: Mon 01 Sep 2025 20:50:10 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:5c:21:00:5f:09:fe:81:4a:06:5b:90:ef:fc:c2:3b:76:38:4c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:50:10 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=f13c9f4d299adb7c2f50119c2525022b5ff201f5663c4dc289e5b115f54c79f1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:e8:86:15:e9:a4:8c:7d:24:1d:62:30:3b:
ea:19:65:0d:21:38:ae:40:8a:12:ad:b1:15:c8:0e:
e3:d8:c7:fb:9f:74:ae:12:f3:27:96:fd:81:34:07:
2b:3c:63:1e:1d:37:0b:15:17:0d:74:50:4e:5b:3d:
08:aa:a1:91:a6:c2:8e:6e:93:8e:02:d4:72:37:6a:
5b:8f:ab:4f:4d:be:9a:0d:66:b3:da:a2:00:cb:8b:
4f:dc:d6:23:9a:9e:ec:06:72:c5:db:96:19:a0:5f:
b5:48:92:d0:17:de:cc:da:00:b5:c6:86:e0:34:3f:
37:4a:46:ca:d6:cd:fe:0c:b6:0d:cd:75:01:4d:0a:
40:d4:9c:3b:67:cf:27:68:10:68:23:54:50:a4:6a:
07:94:df:b7:0e:25:4c:40:f8:89:0d:7c:12:d6:6d:
ff:eb:c1:25:04:9f:91:55:9b:8a:70:46:0f:6a:5c:
57:fd:fd:77:92:7f:10:e7:f9:a0:58:47:ae:b9:a7:
1b:e0:4d:bc:d0:d6:ce:54:28:a1:79:9a:51:57:9f:
8f:b8:75:02:87:57:76:e3:4b:47:57:16:4d:46:fe:
5c:a9:1b:3f:30:2c:73:ee:59:f5:35:3f:6d:6a:c8:
a3:13:0a:12:ba:79:db:1e:11:3a:6d:f2:e3:c9:3b:
48:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:02:A3:AB:C6:B5:18:49:97:80:2C:9C:7D:E7:10:87:23:93:2D:A0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/24b496aa-161c-4d5d-a9ca-3ba09772390a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:6000::/40
Signature Algorithm: sha256WithRSAEncryption
82:79:c2:af:7e:39:97:75:19:68:78:e0:13:7f:45:f5:6d:ff:
bc:c1:67:81:0f:2b:11:a2:4c:5c:b6:68:7d:ec:f6:09:c8:22:
d5:c7:f1:3e:79:61:1f:59:d1:bd:39:94:67:b7:71:fe:5a:ce:
c5:ea:a4:fd:aa:26:75:12:36:a6:23:80:61:5f:8d:a6:43:7f:
e8:d4:1d:11:22:e9:06:fa:eb:3a:8d:41:3d:e9:4c:b1:b1:69:
de:f5:e6:13:be:16:eb:07:b2:03:89:06:04:ec:36:7e:55:9c:
7d:6b:f0:40:94:98:d9:b7:ed:c8:e2:4e:93:e2:61:26:b1:f9:
1b:24:ce:d7:a8:ed:13:20:1a:8c:3c:5b:2a:dc:4d:0f:e8:df:
47:d5:f7:49:a5:60:16:fd:02:ad:c4:dc:ab:1b:52:b6:be:c3:
ea:d9:cf:98:0f:6f:40:1e:69:ad:12:62:e2:1a:d2:4e:bb:66:
e2:7d:23:89:29:52:59:94:41:44:39:97:38:4e:2f:95:b4:16:
9c:7b:1d:35:70:de:f4:8c:bc:3d:07:85:9e:14:60:36:9c:e3:
b2:9d:b1:4b:93:77:bf:c8:2c:86:2f:26:f4:5f:be:8a:9e:de:
08:7d:d7:0c:e0:ff:44:49:a8:1a:63:57:c1:79:0f:4c:42:cd:
3e:ed:c6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:18:36 2025 by rpki-client