Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c6065d-431b-4a4f-98c4-f607358ee480.roa
File: a6c6065d-431b-4a4f-98c4-f607358ee480.roa (raw, json)
Hash identifier: rMJhAfmNSos0I5MymqCCux2gqSDUPQq/VDzubjfDvKw=
Subject key identifier: 67:EE:EA:EE:6E:19:EF:51:51:B9:3F:E4:90:A3:07:A6:48:F5:4F:AB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0938A1E4F5E06B779B769E4390816AEC23CC6C07
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c6065d-431b-4a4f-98c4-f607358ee480.roa
Signing time: Tue 21 Oct 2025 13:10:13 +0000
ROA not before: Tue 21 Oct 2025 13:10:13 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:38:a1:e4:f5:e0:6b:77:9b:76:9e:43:90:81:6a:ec:23:cc:6c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:10:13 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=7e1bf9ab43bd69ed9b57a8edd9278d4cdaac95c850010ca8ee6c57be839e9b84, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:70:5b:ad:ac:22:c2:a8:ba:8b:3a:0f:41:dc:
8a:74:98:47:53:19:46:ed:2c:3b:21:b8:db:3f:e7:
37:5c:94:d5:f3:53:87:9d:0c:3b:34:c5:7f:7c:dd:
85:00:40:ca:aa:f8:dc:b9:9e:a6:ad:4a:0c:72:67:
eb:4f:98:71:fd:21:d7:7b:5f:27:ba:f5:af:6a:d9:
67:a3:f4:80:8e:9d:2b:f0:eb:96:23:f7:a9:00:fb:
60:4e:47:0e:0e:0d:83:43:ca:af:51:99:bb:ba:23:
d3:e8:d8:40:e9:46:73:d8:d8:9f:7a:11:7a:f0:34:
c1:c6:f1:51:1d:f5:89:ce:ce:d5:62:57:76:b6:bb:
5d:de:15:0c:24:95:09:d7:24:d4:99:b1:3b:d7:52:
d7:d1:2d:5b:c5:e5:88:86:dd:e1:c3:dc:da:3a:13:
ac:9c:58:e1:fe:04:6a:ad:51:a9:c0:0a:d3:94:ae:
72:d7:fa:12:6f:18:eb:9c:15:06:6b:04:e9:e2:1e:
65:02:c1:3c:3b:a2:7f:7c:38:ee:d1:e5:b9:b9:e4:
aa:77:0b:3b:eb:a1:44:ab:11:22:3e:90:32:b3:c1:
39:dd:f9:f2:f4:59:65:2d:bd:f1:ca:81:50:ac:48:
7e:f0:67:2f:2d:c9:51:1c:63:9c:ef:4d:8d:cd:80:
11:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EE:EA:EE:6E:19:EF:51:51:B9:3F:E4:90:A3:07:A6:48:F5:4F:AB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c6065d-431b-4a4f-98c4-f607358ee480.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:c000::/40
Signature Algorithm: sha256WithRSAEncryption
9e:82:f6:40:27:9b:ea:aa:67:95:a8:d8:9b:23:00:70:23:b9:
90:db:e2:6e:f1:5b:56:e0:cc:72:ee:c2:ec:11:83:df:a3:d1:
8c:35:f5:b2:17:3a:5d:fb:1d:91:ab:ee:4d:22:ef:dc:1c:76:
fa:54:de:40:63:b1:41:23:a9:54:6f:60:d0:46:5a:9a:e2:c0:
d6:e4:b1:22:97:69:e1:fe:00:e7:84:44:f3:04:65:7a:f7:2c:
1c:88:42:9e:6f:74:93:03:3c:4f:9d:ac:3a:5f:fa:5b:8c:4c:
47:9e:97:5e:76:43:57:76:68:07:04:d8:93:dd:0b:58:e8:15:
cf:7b:83:3a:5d:9c:eb:3c:07:2c:2c:a7:19:39:69:0f:8a:8a:
c6:d0:47:58:02:f4:d8:8a:27:1e:76:34:f9:67:27:f3:f7:d5:
1c:b5:79:86:40:88:4c:8e:0a:98:12:73:cd:63:8c:08:f2:3e:
4d:cc:2b:cb:5f:ae:de:18:2b:e0:45:58:dc:55:6f:90:51:00:
e7:7b:74:e7:d0:96:e6:5c:36:60:ea:00:a7:00:00:34:c3:03:
49:46:84:d3:57:c4:3b:63:34:19:e6:2e:1f:a6:83:55:06:e5:
76:1c:ff:63:ad:24:84:64:7e:36:bf:50:fe:fa:10:2b:9f:8e:
1c:7c:2d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:19:39 2025 by rpki-client