Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2b0de12a-ec1d-465b-8f38-68a2dd6a19df.roa
File: 2b0de12a-ec1d-465b-8f38-68a2dd6a19df.roa (raw, json)
Hash identifier: XNFfnxMgbM/BgDOS/1+cbdn2AygG9yIb5BmibPd1o8o=
Subject key identifier: 2C:60:E5:0C:C5:B9:B6:AF:44:E5:EF:34:23:E9:28:69:1D:0F:A1:52
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2780BD8C55CB24CE3A11AEF75FB5ADE3FEC929AB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2b0de12a-ec1d-465b-8f38-68a2dd6a19df.roa
Signing time: Mon 01 Sep 2025 20:30:18 +0000
ROA not before: Mon 01 Sep 2025 20:30:18 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:80:bd:8c:55:cb:24:ce:3a:11:ae:f7:5f:b5:ad:e3:fe:c9:29:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:30:18 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=fc4dc76e516c584b245039b915a96026a72c14ff0515d97fad9b80a4134b3a6c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:49:ee:e0:c2:19:af:af:88:d7:55:1d:7f:
58:48:cd:ab:ff:31:63:5b:77:1c:66:06:e7:2e:7d:
ee:06:04:23:c6:4b:91:2e:eb:01:4c:19:ef:fd:cb:
28:e8:8f:95:f6:6e:37:44:61:3a:3b:79:c9:e1:77:
8b:48:02:b4:51:95:0e:cb:61:52:1e:c3:fc:95:2e:
86:e3:94:22:5e:b2:f6:60:98:ac:38:7a:ad:8f:83:
58:15:a5:b9:8f:e6:18:87:39:5a:af:62:19:e2:f4:
c7:08:59:2a:ba:5f:30:fa:ae:e5:e4:4e:02:af:89:
09:93:ea:b2:6c:8a:98:2c:10:b5:2c:0f:ff:c3:6b:
61:28:23:89:ac:a0:c3:63:6c:9e:a7:55:ec:96:8d:
b2:dd:06:ed:33:3e:bd:10:a7:3d:be:d6:62:21:0b:
12:1e:6d:5a:89:8d:98:60:b7:1e:c2:0a:8d:4b:6f:
13:a1:03:8c:3b:4a:78:75:6c:be:19:95:8f:a0:20:
8a:fc:9f:cb:3d:a2:98:6b:fc:60:4c:ec:d4:1c:7d:
f2:e0:ac:b6:b9:eb:ed:91:15:f7:e0:26:74:56:79:
29:1c:f7:e5:da:30:d6:8e:b4:6c:71:47:94:12:1c:
f4:3e:99:b1:26:f3:9e:a6:48:12:8f:cb:4d:10:ed:
d9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:60:E5:0C:C5:B9:B6:AF:44:E5:EF:34:23:E9:28:69:1D:0F:A1:52
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2b0de12a-ec1d-465b-8f38-68a2dd6a19df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:6000::/40
Signature Algorithm: sha256WithRSAEncryption
2d:17:70:ca:1a:14:6f:f6:6d:3e:6b:a9:1f:26:e7:be:9d:cd:
d1:42:8c:22:b2:ca:07:52:81:e2:06:54:cb:52:9b:f2:0a:4e:
ac:c7:bd:10:27:7c:90:78:da:ef:18:a7:e7:4d:b6:b0:c8:0a:
c1:80:53:35:41:2c:82:6c:56:dd:57:b0:9a:2c:e8:bb:35:c1:
39:cf:7f:8b:b9:50:85:6a:46:e7:a4:61:55:9d:c9:68:a3:ed:
ea:fa:0e:85:51:a7:e5:18:c2:d2:a7:f7:ac:40:f3:3c:f3:ca:
45:18:e3:cb:73:6b:09:db:96:1f:da:b0:e5:65:f9:52:5e:7c:
63:5b:ce:ca:dd:7d:af:bb:a7:f5:ae:22:2e:a5:5c:7b:c9:e8:
09:e2:3d:b4:34:ce:c3:e4:be:a1:25:a4:45:13:58:5a:ef:73:
c0:c2:20:61:5d:17:8e:01:62:cb:25:0e:82:77:f9:c1:27:f4:
01:96:2f:c5:35:8c:e2:10:05:54:93:9d:f3:0b:77:f4:5a:b3:
07:52:60:2e:03:84:17:3e:36:5b:47:a5:79:cd:27:b9:12:01:
f2:23:06:30:a1:6f:a7:72:43:3e:5b:82:1e:b4:61:1a:e1:33:
1c:86:cb:93:73:0a:58:f0:40:dc:36:94:27:f6:52:16:5a:0f:
94:b2:00:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:07:05 2025 by rpki-client