Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42a2bbbc-4bfd-4172-8004-b90bf9d2de72.roa
File: 42a2bbbc-4bfd-4172-8004-b90bf9d2de72.roa (raw, json)
Hash identifier: GBNAcrcZMaCOfIPiZU4vPYhM0PI745ZHc5QEd4++n6Q=
Subject key identifier: FA:93:4E:57:BB:B0:2A:F5:BA:B4:80:FE:97:39:FC:F0:94:FE:B9:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2B9CFD2A2D73DED256344AD55054E05E6D3885ED
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42a2bbbc-4bfd-4172-8004-b90bf9d2de72.roa
Signing time: Mon 25 Aug 2025 19:00:04 +0000
ROA not before: Mon 25 Aug 2025 19:00:04 +0000
ROA not after: Mon 29 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:9000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:9c:fd:2a:2d:73:de:d2:56:34:4a:d5:50:54:e0:5e:6d:38:85:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 25 19:00:04 2025 GMT
Not After : Sep 29 23:59:59 2025 GMT
Subject: serialNumber=087c518c6b2918ad931c134cfa24a5de5cfe01dfc54794aecfb9362608dd5481, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5d:95:40:09:79:6b:26:85:ad:e5:d4:ed:30:
31:27:60:00:9d:ca:e1:61:a9:2f:6d:90:c5:16:a5:
57:3c:13:3b:66:e4:df:e6:fc:7c:ef:c7:8b:82:7c:
91:43:29:58:4b:ea:7a:9f:d2:bb:54:71:04:81:c2:
8a:74:c9:7a:d3:de:50:ea:13:1c:7c:07:bf:8f:31:
86:4f:99:45:74:88:1e:d0:0b:ab:6b:c8:5c:7b:c5:
24:d2:2b:80:65:70:84:ed:12:49:ea:4b:98:9c:53:
5a:19:51:b6:f9:e1:11:b6:a6:e7:e1:1e:fc:98:54:
99:e9:fd:d9:b0:f7:d1:69:b4:2e:3c:9f:e5:41:f6:
e6:3a:b6:8e:45:f8:86:7d:a5:24:dc:87:4f:bc:27:
d9:2b:d0:84:6d:11:83:83:28:53:9a:12:90:68:73:
e9:76:7f:b4:9d:db:7b:c7:9b:54:9f:bb:fe:04:cc:
d1:9f:f6:ab:44:8e:06:02:30:61:4c:2b:ea:b1:a3:
c4:8b:af:d3:f5:51:22:d2:7b:0d:0e:b4:dd:0e:4a:
e0:de:47:8f:6a:68:6f:53:40:50:50:16:ff:ad:4d:
6f:65:49:8e:06:8a:1b:a9:af:70:16:70:22:98:e0:
cb:ba:45:26:39:4d:f6:82:b7:83:45:47:ae:d7:8a:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:93:4E:57:BB:B0:2A:F5:BA:B4:80:FE:97:39:FC:F0:94:FE:B9:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42a2bbbc-4bfd-4172-8004-b90bf9d2de72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:9000::/48
Signature Algorithm: sha256WithRSAEncryption
bd:f2:32:c0:0c:ef:93:e0:4b:3b:c0:9c:47:d4:d2:b0:0f:52:
03:0c:15:da:b9:50:48:49:f8:71:e4:cd:08:99:92:04:88:19:
13:9e:1c:9b:6e:b1:55:7a:14:8e:d4:e1:87:5d:c4:d4:fc:8b:
b6:3d:4a:ba:a6:9b:a4:ef:2b:44:b7:04:89:01:82:ed:58:ac:
44:78:de:82:d9:19:1e:95:28:ea:0a:3e:21:91:7f:63:e0:c1:
da:fb:26:ed:f8:86:db:b9:30:9f:1b:88:2f:65:b0:0f:25:e8:
64:74:84:68:20:43:ef:cc:87:73:4c:42:88:f6:02:6d:33:65:
ec:fa:2c:80:49:8b:b7:ac:a5:4b:24:76:2f:4d:7c:77:92:a2:
32:f7:04:38:7f:06:a5:d2:61:dc:bb:eb:bf:69:12:68:d9:b8:
c2:95:3d:af:8c:19:69:94:66:50:d0:66:11:eb:24:11:f9:8a:
49:01:7a:f5:06:2e:e5:41:f0:9b:14:18:f1:5a:41:e7:19:72:
35:73:5a:05:1e:0c:21:12:49:40:80:40:9d:65:b0:ff:f4:23:
f9:86:d0:03:99:df:78:25:ca:a7:9a:46:6f:3f:66:ce:97:37:
c1:f6:4a:13:c8:bb:ea:03:93:ae:ea:1b:46:46:08:b1:48:94:
79:3e:e5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:13:30 2025 by rpki-client