Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a96d9971-6d4e-47a3-9408-d633699b643b.roa
File: a96d9971-6d4e-47a3-9408-d633699b643b.roa (raw, json)
Hash identifier: JEXv7F4O3hlJo+E3Pa+CY/rhYCzJaH3/glPzcTfA5Sg=
Subject key identifier: 63:73:92:F6:B8:28:45:09:1A:60:28:BF:45:94:67:3E:1B:2E:72:A1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 55A21458A1EBA092AA5857FC223FF1B1C07C8CC1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a96d9971-6d4e-47a3-9408-d633699b643b.roa
Signing time: Mon 01 Sep 2025 20:31:17 +0000
ROA not before: Mon 01 Sep 2025 20:31:17 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a2:14:58:a1:eb:a0:92:aa:58:57:fc:22:3f:f1:b1:c0:7c:8c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:31:17 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=87858527230c914364c6ec53b0778aea7e1db8ff8980c6e1e3ffe1ca778f7f9a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:b3:8d:b0:4c:9e:67:df:ac:23:0d:ed:8d:
de:fa:20:cd:10:0d:27:3a:12:68:1d:ff:47:08:28:
82:cd:c1:b0:f8:4d:7f:31:50:29:f8:b0:13:84:fa:
21:a7:2c:65:f7:20:4f:23:5b:2e:fa:59:cd:1b:51:
c7:71:c2:07:06:20:74:0d:93:c4:1c:c6:19:32:34:
8f:ab:da:aa:7a:6d:ae:d2:94:e6:31:8a:2e:be:6e:
a6:11:17:ee:40:46:de:b1:47:95:f7:c7:2f:74:fa:
bf:d3:c1:f6:7c:4c:73:15:8e:95:86:9c:e6:b9:d0:
32:e5:13:1c:f6:6d:27:b9:6d:4d:7f:43:36:7e:51:
a0:90:bd:08:c5:d0:a5:b0:8a:7b:1d:53:9a:c4:24:
f9:25:ad:ef:55:b0:0e:30:13:45:9b:e1:cf:fe:72:
12:f9:0f:0c:1b:4b:3f:f2:63:2c:3b:f5:77:b8:64:
17:c3:a6:9d:91:fc:9f:59:ca:49:a9:10:d0:7f:5b:
9b:b0:e0:6f:3d:2d:80:e8:27:24:47:ee:28:d2:c9:
ca:8f:c4:21:8c:45:b1:f4:39:a6:69:2e:ad:6c:66:
05:82:24:db:90:dd:13:fb:57:ab:32:df:f6:10:89:
60:82:c3:6f:f3:e0:f1:66:ec:a4:78:94:af:4f:24:
52:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:73:92:F6:B8:28:45:09:1A:60:28:BF:45:94:67:3E:1B:2E:72:A1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a96d9971-6d4e-47a3-9408-d633699b643b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:2000::/40
Signature Algorithm: sha256WithRSAEncryption
7d:bf:b1:b6:2f:ee:9e:8f:98:ca:c3:f8:d9:d3:ea:bf:d3:f5:
b3:96:8a:a8:eb:4c:7c:6f:84:ad:a7:05:20:b3:3e:a5:5c:e0:
7b:28:23:6c:13:92:95:8b:76:37:57:85:df:a8:fc:e0:0a:30:
33:d3:8e:f4:01:3e:33:29:8e:ae:0e:4f:36:c9:bc:54:c7:85:
84:51:3a:d1:6b:3e:bd:ba:bf:8b:06:e9:2d:37:7d:df:be:6f:
fb:ee:83:97:fc:24:a3:71:63:e7:6c:ac:23:ef:74:2d:39:0a:
1c:7d:44:bb:0f:fe:f1:6b:f5:28:8b:e8:54:d4:eb:19:64:fc:
cc:a8:60:25:42:21:f8:a6:dc:a7:b8:d7:59:bd:2e:9d:74:19:
2b:a4:8e:0a:03:ad:f6:0e:85:c0:e8:c6:44:2a:c8:ef:cd:b2:
e3:da:70:0a:bd:67:73:1a:72:5e:11:f4:58:19:9b:b8:27:63:
a5:66:db:01:0f:fc:93:31:10:c8:36:e4:f5:38:b4:cd:a0:ae:
51:77:23:82:27:50:c1:37:cd:eb:17:0f:6c:f6:0c:b4:b8:de:
cf:7f:58:a8:a8:b0:db:23:d3:9f:f8:9e:d3:87:f2:4d:17:fe:
75:af:9a:2d:dc:12:d7:00:0e:70:ed:5f:fd:76:ee:a3:02:9f:
61:07:e6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:13:27 2025 by rpki-client