Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c153f994-19fd-4682-b6f7-f4e92e6144ea.roa
File: c153f994-19fd-4682-b6f7-f4e92e6144ea.roa (raw, json)
Hash identifier: om4zfqz9kUjAl/IUz+Qe7667VVxe2cD5xK/wEqsMdwQ=
Subject key identifier: CB:DC:B2:2F:5F:14:67:2E:14:CD:44:00:1E:20:45:D4:ED:5D:90:53
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0DD36E0B4F9E836E97B0E916538431752046D865
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c153f994-19fd-4682-b6f7-f4e92e6144ea.roa
Signing time: Mon 01 Sep 2025 21:01:23 +0000
ROA not before: Mon 01 Sep 2025 21:01:23 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01c:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:d3:6e:0b:4f:9e:83:6e:97:b0:e9:16:53:84:31:75:20:46:d8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:01:23 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=1308e3bacb348dede197a54d47a8432d08d89271566b42faf0f18b1b72e42235, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:8b:2b:38:18:e6:55:6a:f2:f0:22:9e:aa:
06:ac:b4:b0:b7:83:83:38:57:47:19:4d:2f:c2:12:
ca:57:e7:ab:dd:ff:39:d1:81:a8:29:02:c2:73:43:
b1:9c:8f:d9:77:4c:ca:15:69:9b:ea:57:0d:6b:72:
72:48:6f:86:8a:5a:67:4d:04:18:12:15:5b:3c:31:
5e:f0:a3:80:a4:27:ba:b3:21:37:4a:5c:51:ec:18:
4e:4e:0a:6b:e4:b1:b6:59:41:ad:b5:d1:fb:31:53:
92:a3:c0:48:6b:09:00:8a:3f:07:41:9e:4c:e5:38:
66:7d:06:c8:62:b4:41:ff:8b:76:8b:c6:10:4d:c3:
f1:41:b9:f2:d6:5a:71:f6:fe:4c:1e:c4:c8:fa:86:
17:c0:b6:dd:2a:e1:1c:57:bc:e2:76:d0:06:7a:87:
93:51:05:7d:e5:7f:ca:a5:f6:c7:4c:d6:91:da:b8:
d5:ae:89:ab:04:72:60:6f:c4:d9:5d:c3:a6:5e:78:
b4:01:9f:f6:37:c1:a7:84:18:7d:1f:8e:33:fd:79:
cb:56:e4:b6:30:61:dd:b5:e6:bd:25:5e:12:93:a3:
8b:c5:60:82:d5:02:52:a6:e9:e5:85:7d:13:c7:3f:
e4:92:07:ca:1d:8f:6e:90:c8:ab:b6:a5:a9:31:e5:
17:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DC:B2:2F:5F:14:67:2E:14:CD:44:00:1E:20:45:D4:ED:5D:90:53
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c153f994-19fd-4682-b6f7-f4e92e6144ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01c:c00::/38
Signature Algorithm: sha256WithRSAEncryption
75:fd:c2:20:0d:92:2b:bc:b3:74:81:5c:f1:de:10:bd:5f:50:
da:fa:e8:f6:ce:8b:c8:3d:76:fc:a7:8d:a1:bd:a1:00:b6:c4:
8b:1f:95:82:6e:50:6b:95:bc:18:66:69:4b:b5:9b:ac:4f:ce:
52:f1:d5:cb:74:f6:a8:cd:91:91:eb:17:15:c3:30:d4:3c:c2:
72:94:b8:65:b7:cf:78:a1:a0:b5:24:d8:82:ef:d6:6a:dd:e7:
d3:ec:50:ea:1d:cf:21:8f:a7:d3:b2:6f:7e:7f:a9:29:58:3d:
3f:6e:e0:87:4c:09:44:85:ea:0b:bf:25:79:d5:b5:2b:eb:c9:
d6:02:10:e5:14:3e:90:ca:8d:d1:50:d0:5f:58:c4:77:f7:41:
ea:74:f0:94:c3:91:16:1d:d8:01:31:f5:7e:6e:ec:7d:af:11:
a4:a6:e7:1f:2e:2b:15:7c:e1:d4:d9:3a:20:07:ed:0c:3c:dd:
06:72:52:9f:0f:d4:2e:02:fa:f5:b6:05:53:93:60:dc:27:9d:
f5:63:f7:19:21:96:69:86:6a:9d:c5:ca:9c:7e:33:71:72:f4:
3e:99:e7:77:ca:6e:73:55:b4:a7:62:6b:b1:6b:41:b5:b0:a0:
c1:bf:7d:97:d4:15:4b:f9:0e:ba:54:b3:16:27:b0:a2:11:98:
44:97:50:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:13:26 2025 by rpki-client