Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98ae6903-6674-49ca-b677-ce1e731619a3.roa
File: 98ae6903-6674-49ca-b677-ce1e731619a3.roa (raw, json)
Hash identifier: PeW2n88cLHo+SnwnY9MZ8V9yZ0TZQXoMLkY6A5UiPws=
Subject key identifier: BA:CA:8F:40:3A:2C:8E:61:90:81:0F:EA:3E:4E:86:B4:10:77:0A:4C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 139F246CD6D3FEC46A87DECDCEB93740C5B70900
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98ae6903-6674-49ca-b677-ce1e731619a3.roa
Signing time: Tue 02 Sep 2025 00:40:26 +0000
ROA not before: Tue 02 Sep 2025 00:40:26 +0000
ROA not after: Tue 07 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014:1c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:9f:24:6c:d6:d3:fe:c4:6a:87:de:cd:ce:b9:37:40:c5:b7:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 2 00:40:26 2025 GMT
Not After : Oct 7 23:59:59 2025 GMT
Subject: serialNumber=e87db4df31b86d3a219ceb4253c0319f61121f16cd450d8195a1dbff70752cd6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1c:20:a6:99:19:a3:54:72:e7:5e:a8:b9:cd:
15:9a:fb:98:c1:52:f7:3e:b6:73:1f:4f:f6:53:d9:
b8:b7:74:bb:9c:28:d3:f7:77:b3:73:e6:b3:3c:75:
0b:0d:95:f3:b0:c9:ea:18:95:d4:ac:75:ae:a2:e5:
f4:32:71:20:54:1a:2c:4e:d5:6e:64:91:7b:14:13:
39:6e:b5:ba:1b:d4:ba:f2:6b:59:12:6e:d8:f6:2c:
e6:6c:03:cd:86:6d:48:be:9f:ef:80:cd:b8:ba:6d:
c2:d4:b7:e9:74:f0:0c:3a:a9:aa:53:75:6e:4f:06:
9c:26:8a:fc:5f:c0:7e:e6:84:fd:8a:34:87:ff:83:
4d:09:a2:59:78:41:86:03:4b:09:fe:80:9b:5e:64:
18:52:d4:de:ab:49:55:a9:0e:0d:3c:46:f0:bf:f3:
87:22:cb:9e:98:42:ec:b1:b5:07:9b:63:f2:8f:9d:
0d:76:30:0f:3f:0e:8d:ba:70:e0:7f:86:46:aa:37:
b4:18:33:32:e9:e5:6b:69:b9:90:af:a8:46:d1:69:
33:30:ba:2e:7f:96:c1:f4:77:2f:7a:69:a8:70:96:
7d:07:4e:30:9d:a5:bb:ec:51:56:48:61:57:b5:4d:
20:af:99:b9:1b:57:c1:c0:ad:32:c7:9b:cc:e5:dd:
8b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CA:8F:40:3A:2C:8E:61:90:81:0F:EA:3E:4E:86:B4:10:77:0A:4C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98ae6903-6674-49ca-b677-ce1e731619a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014:1c00::/38
Signature Algorithm: sha256WithRSAEncryption
14:2d:d4:6d:db:94:de:65:29:02:71:35:c0:40:9c:43:5d:44:
af:52:88:ae:9a:07:6b:bc:46:90:9e:09:16:33:26:91:0a:57:
91:a8:17:37:71:63:42:ea:bd:78:e4:4e:c3:73:d8:45:d6:89:
87:70:fd:cf:17:f7:cd:b2:79:e7:a5:a6:05:bc:7d:6b:9d:42:
94:a4:56:5a:f7:6c:d6:d1:87:ae:0e:2a:46:10:de:ee:39:d8:
d4:c1:35:d1:67:9b:19:5a:f4:f8:c4:7b:f4:f8:62:4e:87:d3:
23:da:2f:ef:31:01:39:f3:97:df:b9:7f:31:9a:04:44:ec:e1:
9a:a6:19:b0:e7:cb:47:69:08:61:98:19:09:2e:21:6d:d6:62:
87:bd:ef:d4:e9:c4:36:67:67:4f:b6:aa:f0:df:e8:a5:87:f6:
74:8d:f6:dc:68:c3:68:f7:8a:4a:a0:02:09:ff:e1:81:98:1f:
69:27:ca:86:d4:ca:d5:e1:2f:96:8b:04:27:34:fd:85:df:99:
8e:cf:e3:19:1b:f3:d1:b0:ab:b4:62:e8:15:6a:fd:f9:e3:47:
39:68:4d:aa:e2:cf:1e:a5:2e:ca:e1:92:d6:f8:f4:18:a8:cf:
93:aa:62:d7:12:1f:97:41:02:6e:19:05:cb:7a:7a:a9:e3:fe:
5f:91:c9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:10:22 2025 by rpki-client