Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7665346b-5715-4d4a-9ee7-32affc669e92.roa
File: 7665346b-5715-4d4a-9ee7-32affc669e92.roa (raw, json)
Hash identifier: pMxjYJxIHhHcBE0+ogKRegISBc8wF6YHFRLGcjRbQj8=
Subject key identifier: 00:69:0A:E6:6F:42:9A:17:6C:36:BE:A7:07:AA:44:AD:E6:FB:65:A5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5FB94E0144F89C74F04AC99917CF00054BFC42BE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7665346b-5715-4d4a-9ee7-32affc669e92.roa
Signing time: Mon 01 Sep 2025 19:30:21 +0000
ROA not before: Mon 01 Sep 2025 19:30:21 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:2040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b9:4e:01:44:f8:9c:74:f0:4a:c9:99:17:cf:00:05:4b:fc:42:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 19:30:21 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=1bf923b1f46dcf0d99f9ab3fd02530bf53117a002ad65c7bac6151e5e3b2c182, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:95:91:c8:84:71:65:a0:1e:0b:34:82:ba:1e:
1f:c7:48:7f:f0:f1:30:2c:6e:a8:f0:9e:69:a5:cd:
62:b9:c2:bf:1a:a0:d2:a9:df:e1:16:53:6b:4e:2e:
6a:00:f2:79:8b:07:d3:84:e4:6f:fc:40:a4:e7:d4:
0b:49:31:e1:85:dc:ba:5d:60:eb:de:fc:3c:94:d2:
45:0f:eb:74:f7:55:48:c3:48:dc:23:34:b5:06:2b:
0e:88:45:61:e6:70:14:85:e4:01:1d:76:cd:81:d4:
57:2d:2d:bb:12:ad:1a:1c:57:2d:45:e3:f5:ca:3d:
b2:8e:91:9b:16:1d:d4:b3:7a:fa:7a:6c:2d:b3:3c:
2d:87:f1:07:2d:a8:eb:31:f5:46:85:3e:8a:ca:24:
58:0b:a6:4a:26:4f:ed:c8:f1:8f:af:dd:f7:88:aa:
38:58:69:95:cf:28:0c:3a:b4:12:75:6c:9b:25:3e:
70:15:8e:b0:18:08:58:a8:ae:4d:44:55:9b:81:1b:
a8:38:93:4b:34:a7:cf:53:be:9a:fb:3d:96:54:ac:
5a:8b:74:7b:73:5f:e7:d7:fa:ca:b4:e9:19:02:84:
4f:ca:3a:c5:b4:55:4a:bc:43:aa:18:3d:82:ac:78:
9d:2f:74:a3:14:fa:87:c2:82:db:cb:e0:c7:8b:e6:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:69:0A:E6:6F:42:9A:17:6C:36:BE:A7:07:AA:44:AD:E6:FB:65:A5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7665346b-5715-4d4a-9ee7-32affc669e92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:2040::/48
Signature Algorithm: sha256WithRSAEncryption
10:00:0e:3a:5f:9a:01:5c:da:e7:02:90:94:c4:f7:90:0a:4e:
fb:be:47:f1:f4:82:1f:89:4c:17:8f:b2:a9:e2:c2:ab:4b:1d:
a1:18:ea:4c:dd:57:ad:47:25:e5:de:dc:dd:1e:fe:c9:48:95:
6f:ba:11:bf:51:63:74:44:fa:dd:24:6a:51:4d:02:7b:1f:86:
0f:e3:62:c7:32:ec:ea:1a:a7:5f:8d:1d:32:a5:70:d3:fc:e6:
b7:44:5a:ff:43:cf:be:70:42:f8:e8:91:1e:be:14:4e:12:f2:
05:0b:9c:42:45:a6:b3:b6:12:dd:e1:d6:62:c6:7e:c0:52:4a:
49:e3:a3:5b:55:c8:5d:b7:f9:89:1f:52:c9:9d:6e:f8:b9:98:
64:24:6e:d3:9c:1f:4b:c0:e7:dc:1b:d6:55:29:87:c6:41:85:
4a:20:42:a9:d1:53:17:2a:d9:ff:d4:b3:ed:26:1e:0d:1b:96:
d0:06:86:9f:a6:0e:be:41:67:1c:0f:33:3c:99:3d:5d:c6:7c:
ad:b5:1c:83:7c:cd:93:48:cf:5a:ba:e0:af:70:ca:bf:e1:6c:
78:a6:a2:3e:42:81:6d:bf:33:0c:68:fb:0e:a6:aa:7f:78:bd:
2d:c4:88:ab:fd:e1:fe:20:db:d9:da:bb:32:c7:f2:30:1f:15:
19:7a:96:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:09:22 2025 by rpki-client