Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28840fdb-fbc9-4b51-b09b-bc08d6342ea7.roa
File: 28840fdb-fbc9-4b51-b09b-bc08d6342ea7.roa (raw, json)
Hash identifier: JXYLTUeBfU0z79lr+5q73fFdXHSBdeBRxcmUGXwZsSQ=
Subject key identifier: A9:3D:D2:AE:A4:87:39:CE:7A:E2:79:99:C3:13:FD:92:69:90:3D:7B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2A564E0A29CA9A2B86F329239293522369B319F5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28840fdb-fbc9-4b51-b09b-bc08d6342ea7.roa
Signing time: Tue 19 Aug 2025 16:50:45 +0000
ROA not before: Tue 19 Aug 2025 16:50:45 +0000
ROA not after: Tue 23 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:56:4e:0a:29:ca:9a:2b:86:f3:29:23:92:93:52:23:69:b3:19:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 16:50:45 2025 GMT
Not After : Sep 23 23:59:59 2025 GMT
Subject: serialNumber=8cf0cca7074dbe4ffae5eddb753eff75ebe6fcb26315a26415a0a008678d3370, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4f:46:1b:c4:5c:1d:79:e0:3f:51:35:c2:cc:
e1:bd:ee:3a:0d:21:ea:7f:90:ca:fb:45:e9:4b:63:
2c:f6:a0:2f:84:92:ff:f0:09:19:81:92:7c:a6:fd:
e8:e0:4a:dc:e3:fa:a7:d9:5e:91:8f:3a:26:7f:af:
24:a9:46:78:2e:fc:11:6e:35:c7:ea:a8:57:d3:bb:
be:85:59:8a:7a:65:6a:be:c4:7a:3e:86:f7:f6:6e:
3a:53:bd:91:2b:52:44:bc:47:b3:08:2a:15:f7:38:
89:e0:bc:c7:a8:bc:0a:49:99:58:e8:12:41:6e:85:
f2:58:0b:d0:ac:fc:85:a5:1a:5e:96:ab:0c:05:e2:
2f:8c:88:14:b8:cb:da:e3:3b:6d:66:24:83:34:5f:
a6:8d:00:8e:a4:cb:25:4a:0f:69:d6:5f:63:48:d3:
b5:89:d3:d5:5f:48:04:30:74:21:b0:37:bd:98:f8:
29:ad:d4:94:2d:f6:80:47:58:33:58:6d:61:a8:43:
84:39:f8:9f:80:8d:e3:ff:d4:6e:aa:34:d7:a9:37:
a1:79:6a:42:b1:c9:48:78:06:90:3f:7b:f2:ee:79:
3e:db:85:8f:7e:a4:7a:29:9c:41:ca:0a:6a:4a:66:
c9:c4:2e:6e:ae:3c:01:2d:ca:f4:ad:58:61:bc:81:
41:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3D:D2:AE:A4:87:39:CE:7A:E2:79:99:C3:13:FD:92:69:90:3D:7B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28840fdb-fbc9-4b51-b09b-bc08d6342ea7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:1000::/40
Signature Algorithm: sha256WithRSAEncryption
92:47:95:40:b5:8d:53:4f:d5:50:7a:1d:c6:e9:ab:97:d8:d2:
31:1c:25:b7:b5:34:0b:c6:d9:98:d6:4c:f9:c8:3f:b8:55:0b:
ff:f5:88:79:86:f6:fa:4d:51:82:70:4d:9c:fc:cb:d3:9a:44:
cb:2d:6c:cf:5a:3f:78:a1:da:fe:46:28:96:1b:4b:1a:81:61:
24:f3:a0:5b:a2:bf:b0:8a:c7:59:94:f7:82:9f:ab:5a:d8:ff:
9d:05:46:ae:19:10:f4:a4:07:da:ca:a8:f8:9c:49:20:f6:d5:
0b:39:06:8b:10:d3:f9:c7:72:be:f7:9a:65:9b:b5:d0:fe:f2:
a6:af:77:7d:d7:f8:54:3b:56:4a:a1:d2:09:e6:75:89:29:9e:
bf:5b:74:14:33:0a:0c:5c:ea:6a:75:fb:35:fc:fc:bd:69:4f:
2f:97:d3:60:c9:94:2b:d0:92:3d:85:4b:3b:5b:9f:aa:fb:38:
71:45:d5:1b:f5:9f:fa:80:53:32:dc:61:05:d0:e0:06:5b:ab:
17:5d:96:f9:16:3b:df:e2:3e:f6:89:14:98:bf:a5:12:39:48:
21:c4:e9:51:85:9f:6e:c9:c5:30:64:c9:82:00:a3:42:4f:f3:
b6:6d:89:81:04:1a:93:f8:bc:7d:2e:f7:05:7f:0c:0d:3e:d1:
fd:a6:05:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:37:44 2025 by rpki-client