Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/640a1f52-8635-44af-ae6e-cc941e49e749.roa
File: 640a1f52-8635-44af-ae6e-cc941e49e749.roa (raw, json)
Hash identifier: xHd5ygqz0Z7pySHSoOqMMQwq4aysWrSpEuAptlyeuVY=
Subject key identifier: EA:E1:32:E0:36:F9:6D:5E:7A:08:2C:CC:92:EE:C5:0B:43:4D:AD:CE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 09EFFFAC0E7555160416B8E56F0E4B638925A766
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/640a1f52-8635-44af-ae6e-cc941e49e749.roa
Signing time: Thu 04 Sep 2025 19:51:59 +0000
ROA not before: Thu 04 Sep 2025 19:51:59 +0000
ROA not after: Thu 09 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d034:6080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:ef:ff:ac:0e:75:55:16:04:16:b8:e5:6f:0e:4b:63:89:25:a7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 4 19:51:59 2025 GMT
Not After : Oct 9 23:59:59 2025 GMT
Subject: serialNumber=d2610e8cad40c176225ce08049d005360df42cba7d01fcb851d633c3855abb5e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:d0:75:4f:ff:7a:6f:19:a2:d9:28:cb:61:
b3:c8:ce:06:6b:15:72:56:06:a8:9a:02:2f:6b:bd:
06:94:79:b4:c0:65:97:31:89:7b:b7:7a:5a:d6:3f:
fd:7a:9e:61:ba:9d:a5:f4:a1:0f:50:b3:49:1d:2e:
78:0e:50:30:61:a6:6d:cb:90:90:c0:15:b8:23:b9:
4e:fd:78:f2:e7:58:d1:e8:4f:66:a1:2b:34:17:bd:
a4:6d:dc:84:4a:39:13:43:43:77:7f:a5:e7:58:9e:
25:71:79:2c:01:15:2b:1c:7b:6b:0f:76:2c:06:e9:
74:bc:c1:94:c3:f2:03:a2:e8:e6:47:36:a4:03:d0:
61:6b:f0:de:8f:95:9e:03:b2:22:3f:b0:25:b0:f8:
2e:ae:9b:0a:35:cf:b6:57:e7:c0:da:33:4f:3b:b8:
bc:ac:8d:9a:06:91:cb:4c:ac:8a:12:00:b3:4e:88:
31:30:6f:85:a3:d8:74:2d:fd:58:83:69:de:ec:8a:
af:12:7e:82:ec:35:aa:a2:74:cd:93:9b:82:5c:b9:
eb:16:c0:0b:09:c6:a3:c4:33:15:f1:91:f3:10:b3:
d9:df:f6:ee:9d:97:c8:8b:51:0e:60:6a:f5:0f:1a:
99:db:a1:5d:c0:b4:29:d0:d3:63:83:ee:91:83:13:
28:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E1:32:E0:36:F9:6D:5E:7A:08:2C:CC:92:EE:C5:0B:43:4D:AD:CE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/640a1f52-8635-44af-ae6e-cc941e49e749.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:6080::/46
Signature Algorithm: sha256WithRSAEncryption
8e:f5:88:25:20:25:f5:de:e8:c6:e1:2e:2a:98:95:17:91:6f:
77:00:9b:fb:34:db:d7:97:56:88:49:3d:ff:ac:24:38:a5:ae:
23:4b:3b:8e:76:2f:f7:14:44:22:92:97:42:64:5f:5e:1a:81:
45:f8:83:f1:ff:41:7f:8e:05:60:13:87:5c:62:ce:e9:a7:e5:
df:58:03:d8:82:bb:26:b6:01:ec:c9:85:96:93:f2:92:13:c2:
1c:0b:e3:d1:37:36:b4:1d:90:06:11:f2:b2:14:ba:76:ba:6e:
be:1d:da:eb:ac:a7:25:b5:60:2a:d9:57:01:b2:48:af:9f:ab:
81:2a:8e:ca:4f:2e:dc:df:48:ce:b8:c7:79:2f:50:b3:34:6b:
83:4a:e1:7f:cb:5e:d8:70:e5:34:9c:d5:93:17:30:bb:28:db:
b9:ef:6e:5a:93:7e:21:5e:23:a8:7e:7b:92:72:31:ef:54:69:
0c:f6:2c:ca:5b:26:8a:5c:e1:31:86:db:43:df:6d:82:20:42:
d2:14:79:68:ab:e9:35:d9:ca:db:2e:40:70:24:87:b7:4c:63:
0f:84:ad:63:92:41:44:ca:64:5e:38:24:dc:1f:93:29:a5:e0:
28:c5:0b:88:d0:d0:23:d4:91:ff:2e:70:0c:e0:18:51:56:29:
02:d4:37:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:14:51 2025 by rpki-client