Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/301d1d15-dd00-41e7-9f44-49159e46a51a.roa
File: 301d1d15-dd00-41e7-9f44-49159e46a51a.roa (raw, json)
Hash identifier: 0NM6e/sGusQNsVmWQaKhEbZFUeuxlLlrNh7cBLVlbeo=
Subject key identifier: 05:6A:0B:DC:5F:86:2C:C3:2B:02:0C:DF:E2:94:27:79:5A:BD:78:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3CA576C4B8A00F6BA1A780022941D9B951584B24
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/301d1d15-dd00-41e7-9f44-49159e46a51a.roa
Signing time: Mon 01 Sep 2025 20:01:39 +0000
ROA not before: Mon 01 Sep 2025 20:01:39 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:a5:76:c4:b8:a0:0f:6b:a1:a7:80:02:29:41:d9:b9:51:58:4b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:01:39 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=32f5a9e028ff4cbfb65079702a5a9fa75aae2a00fa7c9fda04f6d6f42d0d003b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:3b:a7:63:0c:e0:92:3e:48:bb:eb:dc:d9:
cb:dc:6e:5b:9d:f5:55:fd:aa:17:6c:ed:55:2f:b2:
fc:b4:f2:62:f5:1a:8c:8d:ea:95:d9:af:95:a5:59:
0a:3f:3b:2c:97:bd:a0:45:3b:f7:68:be:74:5f:6a:
b2:4c:1c:ed:e9:ce:84:33:41:94:a3:89:20:68:90:
28:83:ab:78:16:d3:26:57:c0:77:df:bf:66:2c:d5:
28:33:69:15:c1:13:a6:10:14:c6:2e:ba:7d:0b:f2:
ba:18:e6:d7:43:90:c6:3b:2f:ba:f9:3b:83:1d:e9:
6c:f8:52:16:df:7d:e5:20:67:cd:a2:06:bd:e6:aa:
fb:fd:2f:6c:b4:46:18:6f:80:21:d2:16:48:f4:5a:
2b:54:fe:ad:84:29:c2:e7:ae:1a:11:82:d0:ca:69:
e5:04:cf:e2:d2:73:7e:10:e5:c0:8f:67:a2:a4:3c:
5a:98:6d:60:42:7b:d6:89:d3:19:58:7b:47:a9:6d:
ef:98:e4:7a:91:19:ad:b9:66:1d:c9:98:79:f7:67:
4d:2a:db:fd:c5:c6:43:61:d8:71:d1:dc:82:76:a4:
d2:6b:e1:82:02:8f:09:db:c0:87:90:c2:64:2e:70:
bd:d4:d8:b0:30:3d:11:59:00:22:c0:de:62:6d:cd:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6A:0B:DC:5F:86:2C:C3:2B:02:0C:DF:E2:94:27:79:5A:BD:78:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/301d1d15-dd00-41e7-9f44-49159e46a51a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8040::/48
Signature Algorithm: sha256WithRSAEncryption
2f:bc:c6:b4:61:46:5b:3a:90:c5:df:ff:7e:40:6c:74:6a:6e:
66:39:b2:63:a2:d4:bf:40:ee:cf:de:f0:6b:f4:b9:07:55:29:
12:97:07:9d:f2:b3:36:b3:d1:44:7f:3a:9e:29:e9:db:6e:1b:
54:f8:5a:4c:4f:1b:81:14:d2:e8:3f:cd:f4:a1:2c:3b:9b:79:
80:e7:d3:ae:3e:08:3a:e5:7a:3b:51:47:94:a6:a3:16:1c:96:
f6:f2:7c:ad:34:55:82:f6:83:5e:28:a7:27:51:65:d8:50:fe:
8e:b8:31:e3:65:0b:0e:e2:8d:d3:e0:20:90:29:b9:c1:e2:17:
88:f7:c1:46:8f:d0:68:c0:cc:88:25:c1:25:cc:1e:6e:2b:a5:
2c:ce:e4:eb:b5:1b:89:d5:01:a5:7d:6c:c2:7f:d6:cc:22:9f:
72:16:89:1e:3a:e4:10:9a:b3:74:ef:28:5f:66:14:63:36:2f:
c5:45:ed:13:09:46:b7:d7:6b:a3:ff:53:1f:6a:44:89:c7:c6:
a7:72:7a:5d:9b:10:e4:52:7b:c7:4c:6f:67:8e:41:f8:06:f5:
b7:77:3c:91:90:02:ea:04:ca:ae:ad:c0:46:28:98:d6:ea:77:
9d:09:19:0e:d8:14:ca:d9:07:59:92:8c:2f:91:48:c3:61:57:
1b:fe:80:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:06:09 2025 by rpki-client