Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8615f258-46a8-450c-972c-84b27581bb43.roa
File: 8615f258-46a8-450c-972c-84b27581bb43.roa (raw, json)
Hash identifier: kPJPqXexXy+FWheHQKFNMNm0/OLXpK4m8SyAztW76mg=
Subject key identifier: F5:8B:96:35:6E:E5:51:3B:2A:7F:00:4F:76:A0:66:9F:E2:1E:2D:FD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2D786E09C02EE75D84BD2ED96C58C4E95DCA84B9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8615f258-46a8-450c-972c-84b27581bb43.roa
Signing time: Mon 01 Sep 2025 21:11:07 +0000
ROA not before: Mon 01 Sep 2025 21:11:07 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:78:6e:09:c0:2e:e7:5d:84:bd:2e:d9:6c:58:c4:e9:5d:ca:84:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:11:07 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=ec88c2b41f202453178b31bf39ab12bfdbf0731394e248aa0e76d8926688cdba, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:9e:a9:1c:4f:eb:bc:71:a0:04:d0:66:40:
2f:ea:2b:7f:c0:8b:32:62:c6:32:d6:15:b2:3d:f4:
fa:24:73:62:f7:fd:bf:2f:4a:a6:c1:65:76:fc:e7:
b7:a8:03:43:12:64:c8:12:d0:0f:48:a7:d5:9b:c0:
7a:ad:d6:ed:ce:2f:03:23:cd:25:aa:b4:d3:6d:8e:
77:a6:01:4c:6e:55:02:36:18:e8:11:b1:89:b4:55:
80:74:f5:d7:cf:2e:71:a8:5e:ad:e0:64:93:fc:0e:
cc:35:ef:41:49:37:73:57:7d:2d:fe:34:c4:b7:a3:
cc:81:92:03:2c:7a:d8:d5:04:52:1a:07:22:93:f0:
17:c0:2f:28:b8:f9:db:59:f8:3d:da:ea:cc:1d:35:
b4:23:9c:06:24:c2:51:8c:7c:aa:ae:4a:21:42:81:
06:70:39:82:60:44:84:80:c2:53:06:8e:84:20:83:
1d:fc:53:f9:0d:f4:d3:52:cb:07:60:2e:31:c7:e6:
75:32:d1:e1:a8:9b:88:29:e1:6d:45:96:57:ed:92:
c1:ab:a8:5d:f1:5b:37:fa:9b:82:b3:98:b4:57:18:
c9:84:34:35:c9:d4:94:3e:de:20:49:e5:b2:41:72:
72:a2:b9:e2:c3:d7:59:1b:79:06:30:d2:db:3d:24:
42:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8B:96:35:6E:E5:51:3B:2A:7F:00:4F:76:A0:66:9F:E2:1E:2D:FD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8615f258-46a8-450c-972c-84b27581bb43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018::/36
Signature Algorithm: sha256WithRSAEncryption
01:30:5d:91:7a:cd:e4:65:37:7a:ec:5a:59:60:d2:af:b8:1e:
b3:26:f9:f6:f3:22:5d:82:6b:7a:2a:f1:50:17:fb:99:45:a4:
b2:8d:0a:96:ac:e1:bb:0c:a1:3c:0a:91:21:b8:1d:d1:ce:92:
49:6a:31:71:ff:37:5c:20:3b:ab:11:d5:8b:b3:8f:b8:69:61:
88:87:c0:7f:71:f0:ca:d0:a3:55:db:e8:f9:bc:71:dd:87:f9:
a1:b5:fb:5b:ad:2a:17:09:65:ff:3f:39:b1:da:ff:62:dc:d4:
87:77:cc:77:b4:39:08:ce:88:0a:95:be:c5:5f:56:4e:e0:c5:
51:67:4f:2c:b5:e5:9c:f8:ea:9e:16:56:6f:68:07:6e:81:42:
de:4e:b4:1e:96:e0:6d:15:92:5c:1c:dd:f4:7c:24:bb:ee:87:
c6:91:99:0e:0a:70:f5:40:8a:bd:30:43:7c:cf:4a:0d:aa:87:
3c:31:48:f9:4e:da:9f:bf:55:77:7c:5e:8e:88:53:a1:c3:7c:
50:b9:c6:62:5b:3e:cb:2b:4f:2c:a5:c4:87:a5:f9:42:26:3e:
67:da:ca:98:11:cb:c5:34:de:ac:3c:89:8a:66:e0:44:c4:af:
24:54:4f:c1:2d:0b:4b:ab:37:2a:e0:bd:f6:28:03:32:a6:ad:
cb:21:3b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:13:24 2025 by rpki-client