Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57b964c4-07ca-4501-bd01-5cb8936846cc.roa
File: 57b964c4-07ca-4501-bd01-5cb8936846cc.roa (raw, json)
Hash identifier: u+bFhHwUYd7QzAhxDDol9pRzP5/8QOCdx54gMwCdYLM=
Subject key identifier: 3A:9B:83:31:9B:F1:CE:A1:9E:D5:36:09:51:51:72:20:2F:39:98:4D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1525CECF2EC29823C35D6D150755347CE1E006B8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57b964c4-07ca-4501-bd01-5cb8936846cc.roa
Signing time: Mon 01 Sep 2025 21:00:59 +0000
ROA not before: Mon 01 Sep 2025 21:00:59 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:25:ce:cf:2e:c2:98:23:c3:5d:6d:15:07:55:34:7c:e1:e0:06:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:00:59 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=9a0d4b00d75ef872d407d7d83bc7ce6eb3043c7327d2c7eec25b060bfd5c2b03, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c2:36:9e:64:7f:d7:29:62:2e:70:7e:36:9d:
d1:5b:38:38:1f:f6:e8:6a:5a:ce:ef:66:68:2e:2f:
d7:1f:90:dc:a6:24:9d:d5:74:be:46:69:3d:2a:19:
59:7d:d0:00:7b:a6:b9:f0:13:17:fa:00:1a:8d:38:
16:e8:bc:1d:40:66:b8:10:86:e4:55:d1:fc:54:af:
fa:84:65:34:65:ff:7d:9c:17:27:72:01:e1:5b:14:
bf:cb:58:4c:b9:f6:63:3a:f3:78:a0:aa:3d:37:b4:
2a:1f:ac:74:b8:9e:42:1f:7f:65:f8:48:83:0a:57:
de:3a:de:9a:93:51:49:56:ab:ad:4f:b8:85:e4:95:
0e:e3:b5:23:e3:8c:05:f1:cb:2b:18:30:25:3c:53:
f4:b1:a2:3d:21:9c:0b:42:2e:ac:e8:8e:ba:02:50:
c3:e7:e6:88:f6:c1:6a:68:ef:b3:de:41:2d:85:59:
24:c0:39:f6:16:61:06:b3:14:14:51:f3:d6:85:21:
cc:c3:90:7f:75:97:ae:52:81:d8:09:b5:a0:27:65:
ba:d0:be:ca:d2:10:88:84:5f:8a:a6:1a:d2:02:47:
94:2e:2f:74:95:6e:83:da:04:95:04:d4:2b:6d:ab:
33:fd:5d:fa:ae:7a:6e:a0:69:eb:51:b7:08:61:81:
ed:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9B:83:31:9B:F1:CE:A1:9E:D5:36:09:51:51:72:20:2F:39:98:4D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57b964c4-07ca-4501-bd01-5cb8936846cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:b000::/40
Signature Algorithm: sha256WithRSAEncryption
80:d4:58:63:db:8e:e8:43:f0:8c:89:79:d6:17:e2:cb:54:ad:
56:13:2a:f6:25:d0:e3:87:46:9f:22:ee:1e:59:a3:2d:2e:5f:
42:42:5e:0a:84:5d:46:68:2e:2c:fe:7a:86:dc:ce:6c:37:ec:
b1:e8:5e:17:ec:db:ac:78:e5:a9:30:f1:5e:64:40:bb:a2:a8:
30:06:9f:81:6f:52:bf:2a:8f:0d:36:01:2b:21:27:30:dc:9f:
74:2a:a7:01:75:4c:b0:f4:9d:6f:f8:62:ea:29:2a:c7:db:cc:
67:98:2c:9c:2d:8c:19:ad:b9:c7:23:47:71:41:5e:97:2c:f2:
bf:b3:d1:44:8c:dd:a9:7b:74:04:bf:c9:f9:d1:0a:0c:3d:b3:
ff:f1:dc:36:de:8b:30:0f:35:c1:35:e8:1b:00:ed:49:d0:28:
9e:84:52:3c:4c:3f:9f:33:e0:cf:62:66:24:c9:8e:e7:c6:2f:
54:29:a8:a8:58:8f:ae:d7:67:73:a4:da:dd:41:ff:cc:02:65:
12:a8:df:bc:5d:17:8e:77:d7:af:0b:5f:49:75:4e:c7:19:37:
fe:56:b0:cf:01:4f:bb:8f:f3:31:61:14:bf:27:c2:a9:8a:e8:
dc:1f:75:79:2a:c8:29:34:c3:41:02:33:af:0f:3e:5f:de:d0:
a0:2c:af:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:09:22 2025 by rpki-client