Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acaa599d-041d-4181-81eb-d1fa213089e1.roa
File: acaa599d-041d-4181-81eb-d1fa213089e1.roa (raw, json)
Hash identifier: BD9ILUF2doi3doQdfl2KMD4LhvaHcB2vb4Fu8kD8XSE=
Subject key identifier: A2:6C:29:53:E6:E1:63:2B:2E:D0:72:9B:2B:D1:9C:7E:E9:2E:08:62
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4E730A4E7604DF311A0B242A2B9A0A8152C2273C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acaa599d-041d-4181-81eb-d1fa213089e1.roa
Signing time: Fri 15 Aug 2025 15:41:03 +0000
ROA not before: Fri 15 Aug 2025 15:41:03 +0000
ROA not after: Fri 19 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:2080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:73:0a:4e:76:04:df:31:1a:0b:24:2a:2b:9a:0a:81:52:c2:27:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 15 15:41:03 2025 GMT
Not After : Sep 19 23:59:59 2025 GMT
Subject: serialNumber=4860d757848650d0d271215c8035a03b1da0a435521227fb0d4968689b641154, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ab:0c:97:d2:a8:b2:a7:e9:fd:ad:b8:30:f2:
c0:ce:1b:ae:20:85:a2:b9:9f:4a:1c:ec:3a:df:2e:
dc:db:92:e7:ea:90:31:ae:20:ca:41:25:b6:8a:f3:
f7:c0:59:b1:55:bb:4a:40:3f:61:cd:93:b7:a1:17:
34:32:9e:c0:df:ec:cd:d6:67:ef:64:fd:e0:dc:69:
a2:40:3c:4a:68:10:77:1e:d7:54:a6:f9:e8:a9:7f:
ee:90:cd:b6:1d:63:23:ad:60:e2:af:9e:b5:43:02:
c9:23:5c:67:45:59:47:5e:3b:6d:65:a8:70:31:47:
37:d0:bd:54:64:7f:70:24:ca:d9:93:e8:11:31:5b:
de:1b:f6:93:e6:53:36:f0:99:7b:eb:78:04:93:6e:
c4:54:ff:98:40:1d:68:17:d9:b4:51:5f:fe:57:bb:
aa:ed:6e:8c:50:08:a9:1b:f7:61:af:87:93:4d:5a:
24:eb:87:15:75:f6:a4:11:5d:85:01:8c:7a:82:74:
a6:3f:0d:79:c7:ba:d2:a7:bc:22:c3:67:6c:fa:8b:
c4:a9:93:a0:4a:df:8c:f1:72:32:2a:a9:f3:a0:28:
c3:7e:11:2d:c3:0e:9d:ff:70:3c:b6:0f:3f:93:68:
e5:64:70:ed:29:6f:42:b3:9a:3e:b6:a4:d3:31:ea:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6C:29:53:E6:E1:63:2B:2E:D0:72:9B:2B:D1:9C:7E:E9:2E:08:62
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acaa599d-041d-4181-81eb-d1fa213089e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:2080::/46
Signature Algorithm: sha256WithRSAEncryption
b5:95:6d:0c:6c:4d:0a:a4:20:66:bf:aa:bd:bd:6a:82:c1:db:
ee:63:eb:ee:dc:5e:a9:06:c6:8b:24:d0:c8:e5:69:3d:54:58:
2f:e0:cd:c9:94:37:3d:29:66:ca:12:9f:50:e5:fb:83:e1:6a:
72:56:5c:89:38:eb:49:b7:f3:89:8c:82:37:d7:e1:a9:ba:47:
87:e1:cf:e9:c5:2f:56:d4:ed:14:17:cc:0e:23:5d:5c:97:6f:
f0:1b:c5:52:92:37:7b:d4:ba:c0:bf:5d:18:6e:bb:5d:4e:68:
7e:71:93:e9:07:ab:68:01:7b:7d:96:40:b0:cb:d3:c9:29:22:
a0:10:2a:26:4a:3c:d6:50:1d:7f:c4:d8:fc:a8:24:c1:60:10:
32:0f:2d:6a:22:c4:33:35:7f:00:95:d3:20:ea:37:70:dd:2f:
13:4a:98:7d:33:50:41:56:60:41:37:dd:2b:8c:90:ff:25:6d:
d0:4f:ae:bc:31:9d:fe:10:0a:a2:db:b0:92:98:88:30:73:64:
5c:d7:29:70:0d:54:97:b7:10:0d:04:70:11:08:3f:4f:e4:cd:
29:53:dc:4b:10:78:eb:12:17:e7:3c:ec:66:6b:49:07:b6:56:
a1:50:8b:b7:20:77:a7:da:c7:5a:af:57:91:1b:bf:0a:21:e6:
f0:86:ee:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:37:26 2025 by rpki-client