Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88e98e26-39c9-4a1c-82e8-cc63267ca942.roa
File: 88e98e26-39c9-4a1c-82e8-cc63267ca942.roa (raw, json)
Hash identifier: AYj5C5jW2lndYfcuDyiHQY1FpVLBxHx70Zeu8LBLQX8=
Subject key identifier: BF:DB:04:6F:76:22:5A:E0:E9:CB:92:69:41:CC:FC:3B:E8:72:24:5A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 102B571647DCB9DF92A3395EB04FA813DA1AD1C4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88e98e26-39c9-4a1c-82e8-cc63267ca942.roa
Signing time: Fri 15 Aug 2025 15:40:58 +0000
ROA not before: Fri 15 Aug 2025 15:40:58 +0000
ROA not after: Fri 19 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:8020::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:2b:57:16:47:dc:b9:df:92:a3:39:5e:b0:4f:a8:13:da:1a:d1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 15 15:40:58 2025 GMT
Not After : Sep 19 23:59:59 2025 GMT
Subject: serialNumber=e46e264711d369bd9fe79773daeaffe4df6991e8b3425e4ab168b16a7bfe522c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:40:9b:a4:9a:85:54:80:51:bb:6b:8f:84:
67:60:e9:84:3c:e5:76:f0:d4:78:43:b0:2f:0c:55:
eb:ed:18:02:5b:86:43:7f:3d:24:ca:1a:f5:42:a4:
47:4d:71:28:70:20:5d:75:83:81:c8:73:f8:15:2a:
61:05:72:29:12:34:f7:70:7f:be:21:ec:f5:d4:97:
ad:5c:2d:2d:0b:d6:2e:00:ae:7f:b6:60:68:8f:3b:
8a:3b:d5:44:a8:3a:67:87:2f:83:97:b0:91:41:59:
fd:99:5e:98:ef:b8:d3:ce:e2:fe:4d:fb:4a:28:8e:
da:76:cb:13:7e:8a:79:5e:e0:58:21:59:f7:a8:ff:
fb:e1:27:a7:62:b5:e9:61:78:90:ad:37:78:30:aa:
a3:04:37:b8:57:7c:1d:69:9d:14:97:a9:1e:40:3c:
64:51:d0:58:84:f7:27:9f:3c:dd:f5:a7:ef:4e:6c:
2d:3c:4a:ac:d5:54:4d:db:b7:51:5c:1d:61:31:75:
bc:a2:34:49:34:9a:5f:44:4d:11:84:10:fc:d3:3f:
80:76:65:ea:ed:90:7f:ba:9b:95:bc:6f:b0:27:14:
ee:13:1e:96:cb:11:9f:e3:57:42:67:4a:6d:6a:6b:
94:3b:6f:f6:95:e0:f3:c7:17:fd:95:cd:ed:02:12:
f1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DB:04:6F:76:22:5A:E0:E9:CB:92:69:41:CC:FC:3B:E8:72:24:5A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88e98e26-39c9-4a1c-82e8-cc63267ca942.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:8020::/46
Signature Algorithm: sha256WithRSAEncryption
58:76:be:48:8f:f7:5c:d6:06:98:34:4d:c1:ca:2a:7f:e6:5f:
a1:4f:4c:65:9a:d5:67:84:aa:c8:93:e6:bb:67:00:7a:67:72:
3a:5a:a7:13:c2:28:7a:14:15:2e:e7:4e:40:42:31:9e:01:93:
63:7b:0f:8e:e4:7d:5f:98:3b:ee:86:59:e5:09:83:06:a6:d1:
7a:21:ce:0c:b8:84:8a:79:39:25:88:39:ae:20:c5:54:db:20:
97:68:e9:86:36:9a:0e:e8:51:b6:9b:b5:71:ad:6b:8b:47:32:
79:63:21:63:1e:b4:2b:15:97:d0:f2:51:36:30:e6:5b:91:6a:
72:99:b7:fc:a6:ae:9a:04:19:14:28:7f:33:53:ed:89:54:50:
b3:13:35:86:dc:66:cd:32:b4:10:67:99:59:69:9e:3a:4e:89:
a4:3e:5c:56:4f:38:02:8e:0d:5b:f5:b6:a5:42:f5:ab:ab:32:
a4:08:3c:22:ca:f1:39:93:93:5d:7d:1d:dc:77:c3:69:a0:58:
d6:c2:4e:a5:6a:33:f1:04:1c:4d:80:8b:05:fb:e3:34:08:4e:
8e:42:c6:8a:a3:e1:87:ba:50:2b:a6:04:c0:54:90:3b:ef:3d:
75:68:b1:0b:a3:81:62:27:58:3a:ee:45:96:c0:2e:cf:9c:dd:
30:b3:95:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:37:39 2025 by rpki-client