Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7109e934-b803-4bd3-8dfc-cfe0c2222824.roa
File: 7109e934-b803-4bd3-8dfc-cfe0c2222824.roa (raw, json)
Hash identifier: a8DQSi0p4rjleVlCxjebJn544LfRDU+lZxLyv5SlmTE=
Subject key identifier: 1F:21:95:D9:74:5B:FC:82:89:F8:4B:E7:59:E8:58:29:89:09:17:ED
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 59DB944B7B186CC8E553E30A09615FB79FBCD655
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7109e934-b803-4bd3-8dfc-cfe0c2222824.roa
Signing time: Fri 15 Aug 2025 15:40:20 +0000
ROA not before: Fri 15 Aug 2025 15:40:20 +0000
ROA not after: Fri 19 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:5040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:db:94:4b:7b:18:6c:c8:e5:53:e3:0a:09:61:5f:b7:9f:bc:d6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 15 15:40:20 2025 GMT
Not After : Sep 19 23:59:59 2025 GMT
Subject: serialNumber=74dca23915d768907dfe683dd6e389edecd4ee6a895804e62a76c777277a0b89, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:e9:44:41:c9:51:c3:5b:ef:64:e4:ab:7e:
b5:46:9e:af:55:1b:e9:85:40:2b:1f:97:c6:be:0c:
7b:87:75:26:27:bd:92:97:9f:63:3c:9c:ef:d5:4e:
66:8c:a0:6c:4d:9a:97:e7:ef:34:2a:33:97:0e:4d:
0f:81:96:97:45:d0:9a:39:47:cf:38:59:22:a2:a6:
52:14:4e:53:0a:d7:10:6c:ca:0f:34:4d:62:89:ff:
e6:49:c0:4b:99:25:08:1c:aa:c4:12:be:ee:2a:47:
91:e1:47:1a:ce:e1:43:52:47:24:95:08:45:2b:ed:
d7:76:4c:48:5e:4b:29:ac:af:02:35:78:47:a1:b6:
7b:23:3f:6b:81:96:92:bb:29:34:35:b4:e3:75:0d:
21:9e:e3:56:79:53:c6:77:fa:e7:b1:41:ef:94:60:
fa:6d:ae:3d:c7:8a:2a:a9:94:a1:5f:08:8a:44:7d:
0b:cd:83:43:3d:7d:f7:c1:11:88:2d:ba:0d:58:8f:
1e:93:46:83:ea:58:7b:74:d3:dd:10:c0:ba:dd:87:
89:57:4b:2a:4f:dc:22:fa:41:5b:05:04:b7:6d:4e:
21:ed:c3:a7:c7:20:c5:6f:a4:eb:c0:30:9b:26:7b:
30:0d:65:e5:41:fb:87:a3:bc:d5:8c:0d:ed:b8:69:
f6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:21:95:D9:74:5B:FC:82:89:F8:4B:E7:59:E8:58:29:89:09:17:ED
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7109e934-b803-4bd3-8dfc-cfe0c2222824.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:5040::/46
Signature Algorithm: sha256WithRSAEncryption
83:de:c8:4d:2a:d4:37:21:fe:74:06:65:06:2f:ae:31:d0:75:
41:dd:e4:5c:f4:ae:50:4a:ad:8a:56:30:82:4b:84:07:32:45:
17:bd:40:42:41:f0:64:e3:b9:db:a7:82:bf:76:82:c6:a2:05:
8a:2f:12:1d:f5:e4:75:05:d1:ef:2a:df:86:d1:36:b3:74:2c:
9a:06:a6:81:ac:83:97:ad:76:a7:c1:3d:20:da:d3:69:3b:b8:
20:d7:90:48:1e:51:56:ce:3e:cb:2f:7d:65:c3:ae:1f:70:49:
d0:07:3c:bb:51:59:90:36:7c:c7:39:30:72:42:93:05:00:27:
52:d1:99:82:5b:cf:c2:6b:44:72:d6:68:ae:a4:ac:1c:48:47:
16:c1:5a:d8:0b:be:a1:e5:b2:cc:4e:1f:3a:56:a4:d8:9c:52:
0f:95:68:10:c9:f6:e5:1e:3d:a8:ca:a9:1d:3a:a3:5d:cd:57:
c4:9e:e4:5a:5a:8f:76:61:61:03:60:84:b3:4f:fe:90:7d:a7:
20:57:4b:8a:1e:4c:ef:1b:3f:c5:e6:35:91:c6:3f:00:dd:c6:
1c:ad:1f:fe:c4:fc:43:b2:1c:2e:b8:ba:07:e9:82:a9:5f:c7:
9a:c4:0b:c6:89:8e:02:71:7a:4c:a0:4e:6e:4b:38:42:95:91:
4a:b0:ec:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:37:35 2025 by rpki-client