Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2ab74891-6199-47fc-bcde-b8022379067c.roa
File: 2ab74891-6199-47fc-bcde-b8022379067c.roa (raw, json)
Hash identifier: CqeXchmXkyIDzYdJKuXoTbWUUaFl4GtDN0zIjn4CuZo=
Subject key identifier: 83:4F:6A:A0:C6:6B:7F:0A:48:3C:10:7A:56:A7:BE:2E:06:8C:6C:ED
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5D15A722E07D6B97934C14A26BE37DD6D13ECB5B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2ab74891-6199-47fc-bcde-b8022379067c.roa
Signing time: Mon 01 Sep 2025 21:00:58 +0000
ROA not before: Mon 01 Sep 2025 21:00:58 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:15:a7:22:e0:7d:6b:97:93:4c:14:a2:6b:e3:7d:d6:d1:3e:cb:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:00:58 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=a087f11153a2820f19b9551de0ca23f5bbadcd4f86bf6b28eb51b4b4f1f75605, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:79:da:dc:b9:4c:c6:69:e3:8c:1c:e2:2d:84:
b5:42:87:65:9e:1a:3d:d9:36:83:ee:be:3d:aa:bb:
07:86:08:a8:47:33:c7:af:22:de:d9:4f:2d:67:54:
b9:e6:fe:de:fd:57:14:dc:c9:c4:53:8c:e5:9e:05:
28:22:0c:8f:c3:b0:49:6d:91:b1:42:21:cf:9f:55:
a7:c8:ca:77:ef:a1:8a:5a:52:34:67:0f:e2:8a:75:
dc:73:4a:0f:5d:2c:0f:5e:14:bc:1c:c7:2a:ce:9d:
bd:7c:c5:08:b2:2c:a2:08:1f:d1:70:36:94:96:70:
d4:17:5e:9e:b7:c5:9b:5b:6f:21:3f:31:04:7b:0b:
1a:d9:8b:c1:ba:89:86:a3:a0:fb:dd:8a:82:2c:28:
52:36:22:1e:4e:1a:bd:a5:a8:39:00:68:c3:e5:67:
ce:3f:da:fa:7d:46:f3:61:f3:2f:c8:d0:88:77:83:
0b:8e:26:a8:48:d5:e6:16:7d:5a:b2:cd:63:77:59:
27:23:34:b6:ec:df:a1:56:64:18:bc:6d:34:e5:48:
2e:d4:4c:bb:3f:84:8f:7e:f3:de:fa:05:f0:f8:59:
94:72:0f:44:33:6b:d5:e1:90:8b:eb:40:47:60:43:
f9:54:3c:bf:a6:18:c0:e6:65:58:73:4d:d3:ec:49:
12:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4F:6A:A0:C6:6B:7F:0A:48:3C:10:7A:56:A7:BE:2E:06:8C:6C:ED
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2ab74891-6199-47fc-bcde-b8022379067c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:4000::/40
Signature Algorithm: sha256WithRSAEncryption
39:f1:4f:66:37:31:4c:2b:6c:e9:a2:16:a1:a7:f5:2d:7e:e5:
ae:f0:ce:26:b2:bc:02:09:48:84:e1:ee:db:53:f8:89:ad:da:
a0:ac:7a:ae:6f:6c:61:88:c6:2b:cb:7b:52:33:9d:47:fb:b1:
76:9a:f5:76:70:c6:b1:c4:6f:87:58:e2:95:04:db:e2:5f:60:
d8:4f:26:45:e1:6d:93:4c:d2:7b:98:49:24:5f:14:25:23:e9:
c7:7b:dd:fc:fe:67:82:12:aa:2d:ce:14:e0:48:07:9d:29:d8:
d8:58:62:b3:31:46:8e:49:bc:16:51:a3:f6:bc:ea:f7:d5:7b:
15:88:5b:e5:12:e1:e3:27:a9:64:2e:3d:66:fa:34:34:f2:dc:
d8:8e:06:37:9b:7a:d2:e0:3b:fc:ad:7d:d0:30:70:e4:32:bd:
38:1c:1b:bb:da:01:4d:70:8a:d6:29:0f:5d:70:a5:d1:56:b1:
65:5f:2f:c0:e4:f3:3a:09:44:09:84:68:80:f7:0a:60:b6:91:
e5:a0:e6:66:29:54:5a:56:fd:d6:87:88:8b:aa:a4:a8:bb:f9:
3e:aa:6f:6e:0d:1d:25:0c:35:ea:74:0e:3f:e9:d5:34:66:a4:
6c:ba:2b:78:b5:4c:a8:9e:3b:e8:e5:84:66:85:8a:32:f2:ec:
63:21:5c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:09:22 2025 by rpki-client