Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a8cd111d-bddb-47e0-af43-fc5a8d930376.roa
File: a8cd111d-bddb-47e0-af43-fc5a8d930376.roa (raw, json)
Hash identifier: 4CD5J7ovmSmdIBdypnc05+arCKZhqjT/mbC8gGCAL2I=
Subject key identifier: AB:A1:62:F9:B6:29:C6:81:4E:9B:28:CD:AF:4C:A9:22:F6:2D:32:59
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2D425B68CFD4BFED6C85D37D806D33FE0003C12F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a8cd111d-bddb-47e0-af43-fc5a8d930376.roa
Signing time: Mon 01 Sep 2025 20:00:16 +0000
ROA not before: Mon 01 Sep 2025 20:00:16 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:42:5b:68:cf:d4:bf:ed:6c:85:d3:7d:80:6d:33:fe:00:03:c1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:00:16 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=f4c031dfc9cb8c4e562703b6a3c63f48454cc530ccc72bfdc36a8606f42ee116, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:be:a9:99:c6:0d:cb:dc:56:27:8d:d6:92:72:
7a:72:d9:9c:0a:98:b8:ff:6b:76:e0:66:8e:c3:88:
f9:96:b3:d4:1a:ed:e7:cc:e6:ad:6f:52:da:f7:4b:
64:b9:79:34:b8:5d:bf:6a:b3:e0:b9:0e:05:78:ad:
94:cd:c6:f7:8e:70:9f:8a:4e:b8:f1:60:76:5a:72:
4b:f0:f7:9f:5d:51:01:4d:e4:48:21:b9:f4:15:57:
59:ed:af:0b:62:69:27:a2:ab:3f:9b:6c:63:2c:16:
ec:67:72:5e:71:be:70:f8:17:29:9a:aa:38:38:46:
89:64:0b:32:23:ed:23:47:75:98:95:e4:39:0a:67:
f5:74:11:c5:aa:4f:6d:87:51:b4:fe:cf:ba:e5:fc:
15:42:92:0a:f3:5c:31:9d:e2:09:fe:51:a7:59:8a:
2b:36:45:01:d6:65:4c:2f:d5:ac:4c:c2:0b:bc:b9:
33:52:62:1f:8f:1a:ef:46:c8:09:85:c6:bb:aa:11:
24:46:6e:51:6b:fd:b3:0e:49:b2:d5:0c:45:b7:bc:
c5:1f:09:a3:04:57:cf:30:d3:41:06:3a:f4:e2:77:
f2:9c:cb:8e:17:37:b9:c8:3e:41:2a:c2:16:61:19:
00:01:cb:13:d7:d9:cc:3c:21:fd:8a:21:46:7b:05:
5c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A1:62:F9:B6:29:C6:81:4E:9B:28:CD:AF:4C:A9:22:F6:2D:32:59
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a8cd111d-bddb-47e0-af43-fc5a8d930376.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:1000::/40
Signature Algorithm: sha256WithRSAEncryption
1e:3a:c9:da:17:4f:fa:55:16:c1:3b:08:c0:93:6d:9f:3f:55:
80:36:c1:27:0c:e1:7f:c8:d8:c3:c3:5c:e4:98:70:8b:be:fe:
81:4e:da:17:98:53:fd:27:73:cf:7f:10:38:ee:3d:4f:e5:18:
6f:02:cd:ae:ba:13:d9:1d:4b:22:3b:3d:e9:96:65:5d:c0:18:
e6:66:4c:43:9e:25:8a:79:45:a9:66:62:fe:d3:81:6c:40:ce:
b6:48:4d:52:b4:62:a0:c6:82:7b:20:e5:50:98:81:64:26:6e:
c2:12:49:2e:9e:a1:14:f2:2d:dc:54:3a:d1:f1:2b:a2:4f:01:
b7:30:3e:37:8f:3d:27:7f:e8:7e:47:46:e2:9e:97:c0:1f:e6:
fa:b0:b1:91:68:6b:c3:ce:14:ff:b9:5d:3d:78:f0:ba:11:2c:
04:fe:98:3a:8c:dc:ce:d4:9f:12:2d:08:2e:07:35:ca:e2:28:
4e:17:85:49:26:55:02:fb:1f:3a:64:64:e8:7c:b6:0f:5b:b3:
7c:ce:de:dd:4c:ef:00:e6:a9:28:4b:95:60:88:18:75:61:9e:
9e:14:80:6b:6f:f8:f4:62:2e:8a:ed:de:0a:65:9a:5f:ca:20:
0f:06:05:e7:88:e1:95:aa:8d:ab:84:61:26:ad:72:63:cd:f8:
73:0d:fe:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:08:18 2025 by rpki-client