Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe71cd9-cbff-4ca4-b8a6-7dc13b1013e4.roa
File: 5fe71cd9-cbff-4ca4-b8a6-7dc13b1013e4.roa (raw, json)
Hash identifier: WSrshc72owq4FAvw4OWMNYV7mMIor1axbWr8TCkNMdg=
Subject key identifier: 14:C1:47:51:0E:4E:B2:07:8E:AF:E8:1B:4C:ED:31:32:7B:7E:42:99
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2C3BC641BD3E8AC0EB28CBA8B4D24C0AE5CC535F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe71cd9-cbff-4ca4-b8a6-7dc13b1013e4.roa
Signing time: Mon 01 Sep 2025 21:21:25 +0000
ROA not before: Mon 01 Sep 2025 21:21:25 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01d::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:3b:c6:41:bd:3e:8a:c0:eb:28:cb:a8:b4:d2:4c:0a:e5:cc:53:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:21:25 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=bd9bef24115dc27617c4851c9cbb6b5d8a3e62a6813928288691417eabb0e919, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2f:fa:af:23:97:7d:5f:da:db:62:e1:f9:e8:
7b:f1:49:a6:f5:f3:ac:80:bb:a5:e0:8a:b9:aa:d8:
e6:51:09:fb:3c:eb:d1:18:42:2f:05:f9:80:3a:4e:
53:38:ff:d8:35:15:60:76:77:0d:d5:fd:c9:5d:f9:
ac:7e:0b:52:09:39:97:c0:f2:78:46:70:3d:90:ec:
76:6c:0d:d5:41:a1:6b:96:62:e9:7a:57:84:c9:75:
f6:53:3e:af:6a:6b:2c:c5:74:34:52:4c:13:31:20:
1b:6e:f7:c5:2e:ce:7f:9c:e0:4c:36:e6:6e:5d:36:
bf:da:cb:1c:e4:6a:76:31:cf:1e:a3:10:b4:44:47:
e8:6d:a3:8a:b1:26:33:41:29:ad:28:6f:7f:22:fc:
27:6d:0d:cc:a0:68:c5:da:db:a7:ae:51:db:7d:9b:
87:2e:50:04:1d:ea:0d:d5:11:6e:2c:47:f2:eb:21:
58:b0:27:4f:66:39:cb:f7:5b:e3:24:ce:57:2d:60:
98:71:a4:e7:a8:0a:2a:ae:a0:9d:b0:22:b1:73:3e:
64:4d:f5:2d:0b:2b:bd:f5:2f:cd:f6:07:da:b9:8b:
68:da:92:6d:f2:69:a7:38:42:f7:33:f1:ca:23:12:
2a:31:18:23:d2:30:69:b2:d7:d8:8e:24:e8:df:82:
a4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C1:47:51:0E:4E:B2:07:8E:AF:E8:1B:4C:ED:31:32:7B:7E:42:99
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe71cd9-cbff-4ca4-b8a6-7dc13b1013e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01d::/36
Signature Algorithm: sha256WithRSAEncryption
9c:85:8f:5b:94:7c:fb:93:4c:a7:da:57:5e:d1:da:cf:92:89:
6e:03:93:17:c3:e6:a3:67:26:36:45:7c:88:94:d0:9d:16:f6:
6a:34:3b:c0:a2:25:3d:d0:1e:1d:bb:61:21:c3:77:9c:cf:4a:
ae:b1:36:97:63:8d:4a:96:47:b6:08:5c:27:9f:50:c4:48:7c:
8c:53:c8:66:f3:49:8d:de:0c:8c:01:84:ff:18:60:0d:dd:f3:
48:db:ce:a1:e7:e6:06:0d:fe:bf:e9:e8:dd:3b:80:8f:1b:36:
84:f0:1e:41:41:70:1d:b5:f4:89:0b:cf:f2:c4:c9:6d:14:4a:
8d:dd:f6:d1:0c:f7:ac:ef:76:45:cc:0e:60:ef:8c:a9:f7:a8:
b1:3f:a6:41:c2:de:9b:c3:66:8c:f3:12:ca:d9:98:b1:8f:ee:
52:c5:68:10:32:e3:50:72:73:d7:fb:ef:fe:46:55:5f:4a:83:
1c:82:f8:69:d4:5b:11:b5:b1:73:ab:71:a2:02:40:04:34:1d:
1d:98:e1:93:f2:b3:a8:b2:e4:6d:05:10:20:0c:13:a0:6f:73:
ca:64:25:75:b1:b0:e8:8d:ac:a4:3c:ac:44:ca:79:23:2a:1f:
45:c5:1c:73:4b:24:42:8d:8c:3a:69:98:7b:ac:01:ef:ac:8a:
04:1a:25:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:18:27 2025 by rpki-client