Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/546828d4-9f43-44c2-bff8-aafeddca4e25.roa
File: 546828d4-9f43-44c2-bff8-aafeddca4e25.roa (raw, json)
Hash identifier: nb2zUiWngPfbtAEdK0yRTlTWzFnn7TW5tfhaXACAO5s=
Subject key identifier: 3A:05:13:F5:D6:21:D5:6C:C8:69:EE:FA:C4:0A:F7:24:D0:E4:D1:FF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4DF5FE8CEDDB44CDC9848E6088DA40E4ED2117B5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/546828d4-9f43-44c2-bff8-aafeddca4e25.roa
Signing time: Mon 01 Sep 2025 20:21:33 +0000
ROA not before: Mon 01 Sep 2025 20:21:33 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:e040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:f5:fe:8c:ed:db:44:cd:c9:84:8e:60:88:da:40:e4:ed:21:17:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:21:33 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=16c70f00b90f7e27ee978ebb53fed282deb10c0804d6dd2b013398c0fdcd0631, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:e8:f8:1c:50:b9:4d:78:cf:92:8d:e6:17:
86:d7:6a:89:a3:47:f8:e0:fb:7e:78:50:aa:30:8b:
1a:5a:49:ac:de:c8:3c:70:6c:ed:ff:61:c9:7f:5b:
dd:fb:2d:1c:f7:49:f3:79:ee:58:e2:b8:02:23:9d:
30:2f:4a:c9:ae:b6:31:e1:05:c2:59:bc:59:ba:e8:
29:84:8f:84:de:9b:1d:d3:3d:00:dc:4c:b6:d1:79:
55:41:ef:62:63:7a:39:eb:ba:a4:9e:68:c9:82:f8:
6b:ad:38:3d:07:2c:62:63:6c:2a:43:eb:00:88:cd:
d0:b9:cc:bc:11:13:aa:35:97:bd:3d:84:19:61:2c:
8d:07:fb:9d:fc:2f:8f:fb:ab:37:1d:85:06:1f:73:
3e:48:ea:e2:1a:54:a0:99:b5:08:e4:4b:68:ef:df:
a7:4c:1a:e0:25:76:fc:26:3d:38:6c:98:a8:4a:9a:
ce:87:98:4a:85:82:a9:7c:32:1b:72:d6:e8:c8:ab:
f1:83:9e:db:2e:c2:bc:6d:8a:11:cf:2a:69:d2:28:
48:3e:65:c4:be:fb:13:d5:8f:73:d4:6e:be:69:c7:
e9:6d:e4:a2:39:27:59:bc:fc:e0:d8:36:79:23:6f:
a9:09:8b:2a:b4:42:88:dd:7a:79:92:6f:73:d3:d1:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:05:13:F5:D6:21:D5:6C:C8:69:EE:FA:C4:0A:F7:24:D0:E4:D1:FF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/546828d4-9f43-44c2-bff8-aafeddca4e25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:e040::/48
Signature Algorithm: sha256WithRSAEncryption
b4:6b:5c:89:d9:48:b8:ce:0e:d3:cf:b5:16:b5:27:82:d9:68:
14:95:17:2a:b0:e7:ac:61:1d:bc:bd:2b:65:ed:d4:c2:73:cf:
99:ce:a7:96:db:ba:71:89:b6:f0:f8:68:26:70:54:9b:98:0c:
77:10:c2:7b:f9:79:3e:4c:23:d6:59:2e:87:41:e4:cc:7e:20:
55:4f:0d:72:f6:c3:c8:8f:c8:c1:48:b7:58:d7:93:c8:af:8d:
ae:03:82:8e:8e:d3:98:03:20:76:20:5e:b5:ff:cb:07:ac:31:
8a:4a:59:58:be:a0:b5:40:76:6f:c2:a2:c3:e4:e5:c9:ce:84:
5f:9c:bf:71:13:eb:d2:37:4d:38:65:4a:83:ae:6d:79:09:53:
51:c9:b8:17:44:69:eb:43:14:c3:5e:7e:64:ff:6d:7e:7a:f0:
49:e9:84:d1:80:ab:2f:e4:18:b5:bf:4e:15:94:b7:e1:af:b8:
02:6e:5c:bf:66:13:39:43:39:4e:32:4b:a4:00:69:63:8b:5b:
4e:c8:91:75:11:16:51:79:77:94:ac:cf:2b:3b:0f:4c:40:35:
65:fe:c4:cc:f4:3c:aa:a1:9b:ca:a6:4c:e3:f0:17:18:72:51:
be:64:be:cc:be:14:6d:07:c7:e3:43:b2:2d:3e:67:17:02:f9:
db:fa:72:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:08:22 2025 by rpki-client