Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c57a644-0d1c-4126-9684-e345f93c1560.roa
File: 5c57a644-0d1c-4126-9684-e345f93c1560.roa (raw, json)
Hash identifier: t7Hh1gXUouButTF9Rjx4XxH+0Bc2Vb2cRYxXisWaXBk=
Subject key identifier: 1E:45:3A:FD:C4:84:66:0E:3D:FD:6E:CF:8B:C0:25:E3:0E:90:47:ED
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 525D3BAF566001FFFFE2EA5BE1198AECF4A5A29B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c57a644-0d1c-4126-9684-e345f93c1560.roa
Signing time: Mon 01 Sep 2025 20:20:51 +0000
ROA not before: Mon 01 Sep 2025 20:20:51 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:9040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:5d:3b:af:56:60:01:ff:ff:e2:ea:5b:e1:19:8a:ec:f4:a5:a2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:20:51 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=17004f9858e64dedd354cca2cce734dac77937472bb9c7c8566826d732a3d85b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:eb:8c:a7:c1:d5:42:1d:02:c2:23:9f:80:0b:
35:d1:fa:ff:a9:de:18:eb:b4:45:9f:9a:ad:92:50:
7c:32:09:2c:ae:77:b0:63:98:fe:06:cb:00:0e:fc:
53:3c:12:6d:37:32:e8:72:67:c7:ad:1b:c6:91:61:
02:68:c6:1d:38:6a:70:72:b9:27:b3:31:d4:81:43:
5a:fb:ff:80:b5:af:fa:a4:b7:b6:bd:3d:36:72:9e:
93:13:cc:31:2a:69:be:06:45:56:57:d3:19:80:f9:
c3:87:09:49:cd:0b:77:d3:48:8e:96:c4:8a:59:d7:
49:c4:7f:0c:7b:2b:1d:0e:07:76:3a:77:0f:c6:94:
83:5c:56:ec:9a:26:c6:2a:c3:0e:18:f8:de:02:b7:
5e:c4:94:c0:3f:ca:75:5b:61:22:88:16:46:fb:77:
99:20:c6:41:94:d6:c1:7c:ee:ef:29:f2:16:4c:99:
00:7e:e3:64:da:bf:5b:9c:d1:ee:c0:2b:fe:1a:e4:
6e:be:35:70:e7:3a:c8:eb:46:1b:a7:24:41:d0:08:
50:c0:56:08:65:b4:a9:c1:1a:cd:d2:84:b1:dd:c1:
57:7e:4b:44:d4:f0:a7:6a:fb:0c:db:03:11:45:3e:
75:dd:d8:5c:ff:7a:c2:96:8b:6a:ac:5a:6c:88:52:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:45:3A:FD:C4:84:66:0E:3D:FD:6E:CF:8B:C0:25:E3:0E:90:47:ED
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c57a644-0d1c-4126-9684-e345f93c1560.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:9040::/48
Signature Algorithm: sha256WithRSAEncryption
a8:54:87:e1:49:5f:90:2c:70:92:ce:94:46:b2:87:63:28:00:
c6:21:80:b4:b3:f0:7f:32:42:a7:bf:8e:12:16:a9:68:d1:fd:
e5:ad:2a:fb:ea:76:c4:bc:3c:82:9a:7f:06:fe:36:e5:81:52:
79:91:0b:65:76:59:57:0e:14:4f:cc:39:7f:d5:41:0b:46:11:
96:2e:71:48:7c:9c:be:cb:7d:3f:3f:ca:42:f9:f9:93:ae:bd:
8b:c9:cb:03:a8:f7:70:6d:4d:03:c3:bf:2d:17:25:d9:0f:09:
4b:be:df:4a:29:66:c1:21:a1:6e:53:be:b6:cf:48:23:26:43:
4d:a8:57:d4:db:eb:be:44:d1:8f:a3:5b:9b:f2:18:39:38:5e:
a5:b2:a9:e4:f9:2f:f2:fa:da:d5:91:ff:1a:c3:45:f6:3a:d1:
db:44:e9:c6:1c:26:bc:82:34:9c:4f:e1:45:68:31:a2:73:b8:
57:d4:08:1a:04:1a:68:4f:9c:45:38:fc:dd:bb:0d:23:52:7c:
c5:33:30:8a:63:82:b7:3a:0f:44:d6:fc:3d:a7:b7:48:87:1a:
bc:7b:b6:c7:6b:6a:00:69:fb:f9:00:31:61:e3:3f:0f:b6:f7:
9b:f5:e3:2d:90:8c:20:2a:13:2b:14:c3:5a:12:0b:11:06:55:
bd:b1:62:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:08:23 2025 by rpki-client