Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cdfefba-9573-485f-8040-202e038ebf78.roa
File: 4cdfefba-9573-485f-8040-202e038ebf78.roa (raw, json)
Hash identifier: KyyAOwaViLp2ztUUKUsxJjVi3VhEMlGhIqkv2WBm+Q4=
Subject key identifier: 4F:C5:7B:95:9D:34:DE:96:FF:34:D0:2E:6D:88:95:1A:9F:65:D5:92
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 02E86356D0321A82E327F550F40465D6446DD9E5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cdfefba-9573-485f-8040-202e038ebf78.roa
Signing time: Mon 01 Sep 2025 21:21:37 +0000
ROA not before: Mon 01 Sep 2025 21:21:37 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e8:63:56:d0:32:1a:82:e3:27:f5:50:f4:04:65:d6:44:6d:d9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:21:37 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=46f7258a34e48da47e2fdc9a031d29e3e862e7a6f3376718772e55efe9a3d792, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:c3:a9:41:bc:47:9a:56:ee:c7:fd:52:f8:
29:f3:fb:a3:3f:80:16:ac:8f:e5:9c:f3:37:6c:a6:
86:d8:b5:30:5a:63:54:03:86:97:34:05:e6:57:c1:
0d:4f:13:80:37:83:e9:52:f7:e2:b9:44:6d:93:ae:
02:f7:5c:03:2d:63:65:fe:25:5a:24:f8:7e:03:a0:
19:5c:0e:3b:46:31:f4:37:e3:8c:d4:e1:42:05:a2:
21:99:da:54:43:58:6f:5a:ed:a8:c0:ba:08:12:49:
15:ed:eb:86:92:a3:7d:86:6e:f9:4f:ce:77:b2:a1:
f9:97:68:e1:ca:42:e7:c6:c2:d1:65:b1:07:14:19:
e6:9c:a2:fb:14:b9:9d:d7:4f:6b:d8:05:84:f7:ab:
9c:2f:81:db:47:cf:e6:6e:7a:71:5d:10:b1:3a:f6:
1a:41:8a:a4:4c:b3:39:89:18:45:93:df:da:77:13:
7d:65:8a:7f:fb:87:f6:c6:c5:3f:9f:55:d3:3e:cd:
e5:8a:19:41:dc:3f:63:30:53:06:b2:8b:2b:af:c0:
79:b7:71:0e:a1:3f:2e:f4:4f:b5:3a:4d:da:ba:53:
be:72:53:72:8d:02:fa:39:68:65:1a:c9:57:22:0d:
96:dd:1c:aa:6c:e9:7d:0b:60:e3:75:43:45:96:f8:
3d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C5:7B:95:9D:34:DE:96:FF:34:D0:2E:6D:88:95:1A:9F:65:D5:92
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cdfefba-9573-485f-8040-202e038ebf78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.8.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:e9:e3:e1:b5:d2:83:7a:4c:d3:36:1f:59:c5:fb:10:b4:d6:
40:83:5f:fe:1e:55:77:b8:4e:0a:e2:c8:20:bd:f0:a7:6f:84:
e8:7e:2f:81:00:29:7d:ad:8c:b8:fd:62:9f:72:0e:80:07:f2:
1a:d5:e5:09:f5:0e:d9:f2:dc:9e:09:8e:d0:00:21:12:db:0a:
0d:3c:20:28:0f:41:e2:49:ad:16:ab:79:bd:2c:e4:65:22:dd:
52:47:91:30:99:b4:2c:c8:ba:e8:f0:e0:4e:b7:1f:0d:be:dc:
b1:e9:4f:4d:f3:e8:b5:8f:40:c2:d9:c2:f0:b7:27:08:58:2a:
19:07:41:63:9a:f3:73:db:50:dc:2c:2b:70:c1:22:f5:34:ff:
7e:43:c6:13:e2:1e:8f:47:f7:b1:0c:ad:f6:34:da:4e:ac:8a:
a6:8b:35:09:b7:12:d4:f2:fe:83:d1:61:f8:5c:82:3e:b8:26:
d7:d3:46:04:cc:9a:be:78:c8:7f:9a:11:2c:28:5a:fe:bb:e0:
93:ae:ea:6d:60:21:f8:6c:46:18:98:a4:99:aa:5a:29:5c:31:
bd:d9:4b:c0:1e:39:83:cf:c7:c7:0d:62:22:9b:be:30:a1:ef:
1a:b7:e1:b7:0b:40:89:b4:26:c5:87:be:4d:a9:1e:08:13:27:
19:ca:3c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:14:48 2025 by rpki-client