Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cca7c73-7a82-43fc-81aa-657ae0b0bc30.roa
File: 5cca7c73-7a82-43fc-81aa-657ae0b0bc30.roa (raw, json)
Hash identifier: UZN+aKLPyMyygmO0BnItm4lLrn9ryaJSK5jskUbfzyY=
Subject key identifier: CC:54:8F:BA:21:9D:F1:FB:15:43:15:B3:37:64:0E:7E:2C:04:FE:C7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 30BBB2E33C0349B32A38849F425DD694FF4CB6EE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cca7c73-7a82-43fc-81aa-657ae0b0bc30.roa
Signing time: Thu 04 Sep 2025 19:52:14 +0000
ROA not before: Thu 04 Sep 2025 19:52:14 +0000
ROA not after: Thu 09 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06d:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:bb:b2:e3:3c:03:49:b3:2a:38:84:9f:42:5d:d6:94:ff:4c:b6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 4 19:52:14 2025 GMT
Not After : Oct 9 23:59:59 2025 GMT
Subject: serialNumber=1b76d6d0e8c074da7cb451a02f788e5fe2008a7cb25073e8f5c28b47cdf8dea2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2b:1f:88:a6:3f:f3:75:8e:fd:e6:62:b4:7f:
e1:f0:f2:69:b1:c8:d3:0f:23:a2:fe:4d:e2:69:82:
f0:29:5d:34:fb:c1:d1:7e:f7:f8:d8:00:26:eb:48:
d4:b1:59:16:42:88:d1:e8:23:73:4f:54:df:0f:a3:
be:85:8e:e1:e6:7f:84:10:b2:87:3d:94:52:3f:cc:
d3:22:70:26:9b:b3:ba:61:28:03:d1:94:1b:93:3e:
cf:04:1f:d8:d7:cc:50:e0:cf:3f:57:f9:31:64:59:
38:ba:45:fc:d8:b3:5d:a0:8f:7d:dc:cd:35:6f:68:
89:55:7b:a1:10:f3:14:4f:5b:52:28:80:63:8c:d1:
19:89:87:91:1e:ab:2e:de:cd:db:ab:1a:89:de:0a:
07:cc:77:d2:41:d1:99:0f:80:ef:76:72:2d:44:fb:
64:29:62:18:0b:02:ab:d5:08:c7:a6:f6:cc:b3:3e:
b0:1a:cd:85:66:64:5a:f2:78:67:e6:3c:d4:f4:8b:
6b:0a:81:72:7f:43:56:ea:fe:c4:91:11:a8:2b:9e:
30:79:61:d7:17:a2:56:87:ad:9e:59:52:0f:e2:5b:
2c:1f:42:4a:63:69:bf:d2:d6:70:df:35:13:ae:ec:
ee:f3:2e:be:81:a0:85:a9:56:fe:8d:69:4b:56:20:
b1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:54:8F:BA:21:9D:F1:FB:15:43:15:B3:37:64:0E:7E:2C:04:FE:C7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cca7c73-7a82-43fc-81aa-657ae0b0bc30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:8080::/48
Signature Algorithm: sha256WithRSAEncryption
15:13:11:48:d0:54:1d:1e:ef:f7:cf:72:ee:fe:16:fe:fc:e4:
ea:9d:26:2c:f0:41:1d:ba:18:b0:65:32:af:bf:c8:f3:19:9d:
d9:7d:09:f3:32:01:6f:5e:d4:14:ec:a4:6e:c3:04:2a:d5:f2:
0a:62:8a:c4:f1:5c:3d:bd:ae:33:e8:b4:1d:4d:e2:81:cd:12:
e5:20:99:ad:f8:b6:3d:47:96:aa:4d:5a:41:61:8b:5b:68:d2:
38:ad:62:3a:fc:61:5c:cc:71:34:65:55:c0:e2:a9:a1:a9:13:
16:ff:44:29:6b:f5:c5:ff:41:76:d2:e8:9d:7a:b6:c8:91:bf:
ac:63:19:3e:fd:be:3d:3f:01:fe:77:3b:ae:25:18:c5:38:89:
54:b1:33:fd:1b:d3:b2:72:49:12:b5:af:27:df:93:dd:a9:e8:
3d:4a:e8:c5:3e:cb:b4:50:20:f1:9e:aa:3c:6b:5e:90:26:f0:
c9:83:a1:05:ac:bc:da:72:6b:ca:78:23:6e:0f:f7:ae:e3:96:
84:9a:f4:7d:36:a5:5d:a8:9b:d6:6c:7a:9d:7b:50:89:eb:52:
61:c3:cf:51:8b:4f:4c:04:92:d3:7b:79:71:56:b7:a1:6e:59:
82:23:a9:60:7c:94:e3:e2:f9:63:3b:ac:ed:80:c1:96:06:e2:
19:e8:a2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:09:28 2025 by rpki-client