Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa
File: 8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa (raw, json)
Hash identifier: MCTKwBd6C53v+ztILwz4EY8z+ZvKWxgpBh9H6PtVYog=
Subject key identifier: CA:52:BC:26:0B:F8:08:B8:62:FE:5E:C7:98:A6:1E:8A:E1:0F:A0:24
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 10AA1CCA698534F55F182DE1542F4F5CF2FD65CD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa
Signing time: Mon 01 Sep 2025 20:10:53 +0000
ROA not before: Mon 01 Sep 2025 20:10:53 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:aa:1c:ca:69:85:34:f5:5f:18:2d:e1:54:2f:4f:5c:f2:fd:65:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:10:53 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=651d31d99c6b8c4d5297576a4ccfff5b85298d0341b92a1b0affadb17829efc5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:e8:2d:3f:26:89:af:4f:d6:52:05:59:85:
59:1e:64:08:a4:52:32:8c:d2:60:77:75:e4:af:f2:
18:a8:31:68:9b:c9:5c:6f:94:f2:58:8d:c8:a7:6e:
1f:50:75:8f:88:62:1e:ef:3f:f5:8e:68:c4:af:dd:
3b:46:64:56:fd:da:be:ec:73:77:59:02:fb:a1:c6:
94:ce:d3:72:30:0e:ac:23:d6:28:0c:c9:35:df:89:
d2:84:46:21:0c:61:e8:05:4a:90:4f:09:1c:96:e0:
ce:de:d4:f5:a6:8e:2d:79:04:c1:88:75:ea:75:a7:
df:4e:89:50:8a:99:35:a0:b3:65:bd:9b:f9:3c:db:
3b:40:63:34:bb:25:d0:a6:34:36:6a:55:94:99:2f:
f1:b0:34:9f:06:02:26:b0:2b:42:d8:d4:e4:b5:d7:
5d:20:ad:99:77:ca:3a:e8:dd:59:65:86:5f:46:cc:
cd:de:a1:cc:9b:2a:9f:62:2d:9e:e8:54:5d:50:97:
09:48:a6:b2:f6:9d:8c:c7:b7:4e:25:3b:58:e0:0c:
19:b3:2f:3e:ed:d9:14:41:3b:0b:95:bc:2e:37:82:
bc:12:01:7a:36:57:5d:77:62:31:26:17:38:5a:71:
20:bc:a2:51:cf:62:c8:6e:df:7e:6d:01:ad:c2:10:
24:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:52:BC:26:0B:F8:08:B8:62:FE:5E:C7:98:A6:1E:8A:E1:0F:A0:24
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
41:f8:29:e9:de:dd:15:3e:e7:c7:92:a8:b9:5d:30:ee:ea:e3:
9c:8a:ff:0b:15:27:8c:a8:6b:c8:96:65:3f:07:34:02:26:84:
cf:9d:62:8a:4d:58:d6:22:28:41:cd:6c:77:bd:04:9e:de:37:
3c:d7:05:ce:0e:31:d4:ed:91:ef:4a:17:18:73:70:31:f3:d1:
5c:21:24:6c:32:2c:f7:27:64:54:d2:9a:c5:c2:b8:ba:59:44:
43:7c:9b:ee:04:25:c7:cc:c7:72:5a:6e:00:c4:ee:a9:82:92:
72:f6:ce:0b:a7:d5:db:d8:5d:3c:56:45:9b:8a:a1:af:e9:e6:
35:96:07:45:bd:46:90:c6:a3:a8:c6:af:7f:6b:1e:9d:a1:37:
f0:25:7d:bb:3e:d1:fa:d2:12:31:4e:0d:aa:6d:7f:bb:d2:32:
0a:79:4a:a0:6b:f8:41:db:ae:9c:e8:bd:58:90:fc:57:5c:6d:
0a:c9:4e:86:de:69:07:76:08:71:79:fc:7c:8f:ce:9e:82:69:
c5:72:e7:60:66:8d:b8:92:10:3a:48:2c:9d:a9:30:3f:6e:99:
10:e1:a6:f9:57:b3:31:6f:cc:e9:06:80:34:3e:56:66:42:53:
58:71:21:6e:e2:b0:af:2b:2f:79:e9:40:42:e8:3f:e5:39:82:
b8:b6:a5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:12:41 2025 by rpki-client