Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57c971db-5779-4af6-9c2f-2c7cd904e742.roa
File: 57c971db-5779-4af6-9c2f-2c7cd904e742.roa (raw, json)
Hash identifier: XRqZEDyyUPLnaMRlM2kupvBO0xAA/4j/ncg0PV7dloY=
Subject key identifier: 79:10:A7:00:8B:45:4F:1C:E4:C6:61:BE:6B:9B:3B:9F:AD:A6:8E:DF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4840F2E1FE0F1974C8D5F764ADEB448308D300DB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57c971db-5779-4af6-9c2f-2c7cd904e742.roa
Signing time: Mon 01 Sep 2025 20:11:10 +0000
ROA not before: Mon 01 Sep 2025 20:11:10 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:c000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:40:f2:e1:fe:0f:19:74:c8:d5:f7:64:ad:eb:44:83:08:d3:00:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:11:10 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=29e7525bb41bdcbfeeffad7de71ad6958bcbd87e851e8958afdb2d61f0328885, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c6:cc:05:0c:e8:a4:44:34:c4:db:89:d1:74:
3e:9f:ed:45:9e:ce:42:b6:57:aa:a2:3f:50:40:06:
b5:ea:6d:65:4a:42:5e:a0:e1:0a:16:46:7d:4b:79:
f8:58:21:68:6c:9f:10:f5:ae:0c:9d:64:0b:f2:2c:
fa:5e:03:52:f7:e7:87:0f:0e:5e:16:d3:e6:3d:53:
ff:f6:ea:5c:a8:eb:cc:14:37:28:17:ce:c2:73:ed:
12:5a:b9:7e:36:b6:1b:5b:f6:bd:94:4c:1f:e6:91:
89:a5:d2:b0:f0:40:62:6b:ea:f2:0c:e5:b6:d2:c5:
3f:41:cf:30:cc:2b:a3:1b:d1:4f:e6:e6:2d:4c:b3:
0c:dc:99:21:11:dc:cc:c2:83:aa:0f:92:1d:22:77:
66:d4:68:9e:2a:72:98:d5:aa:62:8b:5b:2f:65:3d:
1a:bf:ab:fd:04:63:2c:ba:f5:e5:62:45:5b:95:1d:
b8:86:f1:20:53:6a:9c:ef:e5:90:f3:5f:8c:e1:b5:
ee:25:7a:23:72:82:90:ad:52:2d:c8:0f:1f:40:8e:
25:8f:eb:4d:0f:dd:e4:4b:af:6b:b7:7f:37:92:d3:
16:bd:96:81:b1:e5:41:bb:5a:2c:5a:2c:55:ae:74:
2e:10:e2:11:a8:39:8d:da:b7:56:e6:bc:b1:49:11:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:10:A7:00:8B:45:4F:1C:E4:C6:61:BE:6B:9B:3B:9F:AD:A6:8E:DF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57c971db-5779-4af6-9c2f-2c7cd904e742.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:c000::/48
Signature Algorithm: sha256WithRSAEncryption
a9:75:69:1a:79:26:bc:75:e6:46:0b:bd:21:bd:cd:dc:3c:74:
d7:5b:27:5d:e9:69:d7:e0:1a:93:ab:fd:74:37:5e:ec:64:88:
eb:3a:af:42:1b:28:8d:85:23:3f:5f:b7:94:de:ee:52:19:d6:
67:c9:e4:17:f0:d9:b3:09:d3:9b:e0:41:77:c9:1e:db:84:17:
6c:b7:3a:4e:73:50:d0:b9:a9:7a:6d:e0:3e:8b:76:10:05:01:
cd:d7:46:89:ed:f3:0b:29:57:11:1e:94:97:cf:5d:b9:62:16:
05:97:e1:3c:40:d4:5d:93:32:69:20:2e:fb:a1:c3:45:d7:68:
79:11:e3:2b:e8:e1:67:cd:d2:56:b5:58:3b:41:60:9b:6c:22:
80:5f:ba:ff:d8:46:7f:da:d6:fb:d4:db:77:28:95:79:6a:8e:
35:84:f2:fa:2f:0c:a0:47:db:ea:70:db:f2:92:9c:44:93:97:
26:25:94:94:53:27:ac:62:b6:27:26:79:5a:50:16:51:da:bd:
bb:51:e4:42:b6:57:9c:0b:32:dd:9d:d5:1e:f2:d7:fc:7e:3e:
05:80:28:e7:62:2e:58:0b:2d:e1:05:0c:03:4f:47:71:b1:a6:
49:7c:f2:6c:d8:37:f6:3d:94:5b:39:ba:45:8d:f2:e5:69:50:
86:b8:21:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:06:11 2025 by rpki-client