Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa
File: 88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa (raw, json)
Hash identifier: 9OkT25WfaHNn3ZrZbVwUIb2++pTEW/NHCoHqJ4pSKVQ=
Subject key identifier: E7:C7:2E:2D:83:BB:60:07:71:74:49:42:F7:12:5E:4F:CC:C5:7E:B7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 672655F0E506E306436FD246515F5D2C3CFB389D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa
Signing time: Mon 01 Sep 2025 21:10:16 +0000
ROA not before: Mon 01 Sep 2025 21:10:16 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d012:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:26:55:f0:e5:06:e3:06:43:6f:d2:46:51:5f:5d:2c:3c:fb:38:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:10:16 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=012cb3c2a2a2a91bc7a1d205c15c97ff6a78ed5aa613abe701d9f6a32e0df334, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:59:60:a8:1f:c6:a6:80:27:ce:e2:76:1b:b5:
23:1f:b1:49:c0:07:a9:85:88:1a:0b:9c:c2:56:21:
2e:f3:0e:73:ed:8a:3d:bb:8d:cb:a9:60:c1:49:f7:
7e:51:91:eb:09:f8:4f:ee:26:0f:c1:6f:be:9f:15:
b2:56:ba:9e:f6:13:4b:2b:89:e9:d1:30:c2:b4:64:
f1:99:38:74:17:ce:fc:09:88:47:68:47:3f:ab:49:
68:89:76:6b:a7:04:f7:64:7d:b3:b3:04:cc:ed:e6:
06:6f:3d:83:56:de:f7:6f:00:c9:5c:aa:94:b9:a2:
50:cb:f4:22:04:5d:98:5c:0a:60:72:84:25:1a:cb:
28:1c:1c:46:ba:ed:af:3b:2d:53:40:7e:4d:df:db:
9c:15:e4:2e:1e:95:ef:cc:7f:45:77:9e:29:4c:4b:
6b:ab:d6:ff:dc:b6:d8:7a:80:1c:75:08:7f:f9:a4:
51:03:c2:05:9c:4d:47:6f:be:48:55:3a:49:2d:c5:
e7:61:c9:4b:1d:ad:2d:30:78:8c:35:0b:5d:2d:7e:
af:ea:91:d4:b7:9f:95:ea:57:6a:a1:12:17:ac:a6:
91:3f:2d:0f:b2:bc:b1:69:2e:a3:9a:36:b6:1f:a8:
37:42:de:f7:29:1a:33:b1:32:0f:22:e7:19:4c:97:
b0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C7:2E:2D:83:BB:60:07:71:74:49:42:F7:12:5E:4F:CC:C5:7E:B7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d012:c00::/38
Signature Algorithm: sha256WithRSAEncryption
b5:17:b3:76:30:7e:5e:12:5f:0e:90:3b:1b:bb:20:25:1e:14:
cb:b3:77:32:67:bf:42:a1:23:39:c8:e1:eb:c9:bb:7e:75:31:
93:0b:91:7e:16:11:d7:f6:d3:23:5e:d5:dd:c5:e8:83:96:d7:
7a:8a:56:bf:0c:04:21:2a:66:6c:14:d6:d6:58:7b:a7:3c:40:
4f:85:d6:90:f9:24:f3:78:ce:04:c5:2a:8d:f1:ec:32:34:d1:
7e:86:ba:61:b6:ea:49:74:02:39:6d:24:24:99:af:60:f6:57:
53:2c:65:cb:cc:d2:b9:2d:91:f6:e2:04:16:3a:00:03:2b:fe:
29:62:76:ba:4d:98:55:56:f7:30:e2:a5:70:8f:72:09:09:e3:
52:c4:a6:d3:b9:76:a4:c5:b6:99:ca:e5:88:ad:8d:9c:a2:61:
23:e3:77:fa:53:69:6d:3b:c2:49:e4:95:27:30:ee:a2:77:d0:
7b:1d:12:aa:8a:1f:38:9d:1d:0a:02:75:db:d6:ce:df:7a:79:
e4:9a:65:ff:7d:c8:54:00:8c:34:36:95:67:89:27:07:7e:83:
c7:1c:cd:ec:2b:db:4b:d9:c9:83:94:a2:7d:84:5c:bd:92:4b:
af:44:2f:17:8f:9b:36:ba:c2:4c:f4:1f:e9:69:2e:d6:8b:bd:
3c:81:e8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:13:30 2025 by rpki-client