Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2a93bdc2-823c-416a-ac40-6f6c823bcef9.roa
File: 2a93bdc2-823c-416a-ac40-6f6c823bcef9.roa (raw, json)
Hash identifier: 8Xc/CEH1p84+ILw+Brm4/j6mRuwpNktG+enzudgGyIw=
Subject key identifier: 5F:00:9A:2C:9C:EB:C8:3C:80:D0:39:F4:72:8D:92:75:3F:8D:33:18
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E5D1B362086120901929FC19139973623F46463
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2a93bdc2-823c-416a-ac40-6f6c823bcef9.roa
Signing time: Mon 01 Sep 2025 20:00:16 +0000
ROA not before: Mon 01 Sep 2025 20:00:16 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:5d:1b:36:20:86:12:09:01:92:9f:c1:91:39:97:36:23:f4:64:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:00:16 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=23b47ff3439bd1e2a9837843703667d2c7b76ecc335023dbf0c62bc07da5dcf0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:67:9e:b2:65:67:01:7b:68:24:8e:9a:c8:7e:
a8:ca:0c:49:b6:b2:b2:c1:4a:2b:70:ac:19:b8:52:
95:cc:5e:4c:12:4f:9a:c3:ae:75:90:91:30:66:d5:
1a:83:e9:e1:5a:d3:19:ad:99:5b:69:ea:8b:49:ac:
e7:84:e5:3b:95:4c:02:9b:b2:5c:84:0f:c2:68:12:
73:c8:ff:5e:26:05:bf:8a:c9:6d:78:07:15:d4:bf:
df:c3:ec:48:71:c9:99:64:8f:3c:73:c8:84:4f:6d:
bf:7f:fa:b5:50:45:8f:4c:09:e2:4b:d2:b7:ef:89:
3d:de:15:5a:24:ec:e2:8e:5c:9e:cb:3e:63:b0:32:
0e:fa:f4:f3:b2:be:a5:0a:12:cf:8d:5e:4d:2a:1f:
7a:c4:dc:42:a7:83:12:be:12:dd:3a:dd:ec:c2:7d:
f4:12:df:d3:87:8d:9d:69:1f:bb:36:5f:bd:1b:89:
b0:65:46:fc:02:ef:c8:6b:49:8e:4c:d8:1c:d7:ea:
8c:8e:ed:b9:d5:ba:c8:e7:48:e0:03:43:f4:c1:ca:
d9:bd:c5:8c:66:ac:e6:21:57:cc:f1:f2:58:7b:15:
19:1c:35:14:ce:93:c6:5d:73:03:87:a9:dd:6d:ff:
83:a6:6a:f8:ed:5e:46:e2:d6:c3:10:51:84:c7:17:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:00:9A:2C:9C:EB:C8:3C:80:D0:39:F4:72:8D:92:75:3F:8D:33:18
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2a93bdc2-823c-416a-ac40-6f6c823bcef9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:1080::/48
Signature Algorithm: sha256WithRSAEncryption
7b:36:c8:3e:1c:d0:da:fe:97:d2:89:ea:02:b0:ef:8a:49:60:
df:10:74:14:b6:c1:81:e0:90:26:ed:e7:67:2a:bd:3f:d2:62:
97:6e:bc:c9:5c:b5:8a:54:3d:d0:45:b5:56:65:f4:10:aa:bb:
47:ac:bf:60:b1:38:3e:cf:f7:a9:08:59:01:7b:e2:f8:84:43:
2f:c5:ca:d0:0a:a5:71:bc:d4:af:98:0b:d4:3b:06:51:37:2b:
c9:2a:3e:d0:5b:c9:17:23:bd:b2:d6:90:92:77:70:e4:88:fd:
1d:96:27:c1:bd:4b:0b:60:9f:4e:87:05:31:a1:98:bb:f5:7f:
96:70:27:98:98:45:eb:bf:8d:8e:20:01:fc:d0:7d:eb:f2:3b:
29:42:eb:33:63:ac:93:54:0c:a6:67:7a:1f:a0:05:5b:d1:dd:
62:0b:9b:fd:a5:16:05:76:32:33:78:81:b2:46:a8:61:63:e0:
cc:13:10:de:76:41:b3:cf:1a:e6:ac:64:31:3c:0f:b5:6e:48:
81:41:c0:23:d9:d2:f3:68:60:fe:75:16:9b:8a:24:03:c7:57:
a8:98:54:22:3f:2d:5b:87:c7:cc:9b:c7:0a:1f:8c:ca:cb:cd:
17:aa:0f:1c:63:4d:3c:45:ea:2c:bd:47:fe:6a:61:83:dd:c1:
3e:12:46:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:13:27 2025 by rpki-client