Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa
File: c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa (raw, json)
Hash identifier: CF7OC/puj2RePMOxG1TmIPELQ4PZaUnuI7M+nBHAM1E=
Subject key identifier: AF:27:BD:DF:CE:AE:0C:AF:40:DF:71:FC:06:25:97:45:F4:A2:C9:00
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 69BB53BC94E937FCEA6EE873DA5CE2A0A688415D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa
Signing time: Fri 15 Aug 2025 15:41:37 +0000
ROA not before: Fri 15 Aug 2025 15:41:37 +0000
ROA not after: Fri 19 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:40c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:bb:53:bc:94:e9:37:fc:ea:6e:e8:73:da:5c:e2:a0:a6:88:41:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 15 15:41:37 2025 GMT
Not After : Sep 19 23:59:59 2025 GMT
Subject: serialNumber=010f21bac9ec4471b64abf26621a464457647c6fe892d166f31e4b8483c5c4e3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ab:39:a9:50:20:4f:55:e2:7f:60:5d:96:0a:
c6:c8:f8:0f:3b:62:96:bc:c5:1d:20:69:ba:2b:29:
9b:fc:8e:01:cb:78:3a:00:2c:0d:52:74:13:21:57:
f4:8e:fd:54:d8:52:84:36:5a:03:d3:cd:47:a8:23:
f7:39:0d:89:af:d4:ec:03:2e:ee:d0:1c:28:0b:a6:
87:25:bb:01:cc:ba:f6:f5:46:b9:cc:a4:39:f4:61:
54:cd:0d:06:31:5c:32:20:60:8d:38:d6:76:3d:09:
d7:37:51:d1:ce:c4:44:3b:c1:18:2a:29:5a:e7:8c:
ef:44:c3:16:c0:be:85:ee:5d:78:46:99:15:9f:de:
cb:42:28:6e:01:32:e9:1b:28:0b:bb:12:84:17:1d:
3c:90:0f:80:ca:6e:32:3e:4b:12:0e:96:37:35:ff:
c3:68:ed:78:97:00:9c:61:04:cf:ea:2a:d4:50:92:
8d:fe:57:b3:08:57:eb:78:51:5f:3a:90:88:82:3a:
8b:62:94:69:63:40:ed:9e:60:4c:de:59:61:09:80:
36:b2:13:ed:90:bd:ef:fb:c3:6d:20:c5:0c:83:6b:
9e:31:7e:7e:5e:e8:92:66:92:1f:04:cb:e5:0e:26:
d6:7d:91:46:51:6b:cc:4f:70:f8:4e:56:6e:22:9f:
84:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:27:BD:DF:CE:AE:0C:AF:40:DF:71:FC:06:25:97:45:F4:A2:C9:00
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:40c0::/46
Signature Algorithm: sha256WithRSAEncryption
82:e0:a6:e9:e5:82:50:1f:7d:d3:1d:5b:9c:3b:f0:56:f6:1e:
ef:e4:e7:d7:e5:66:41:5c:64:1d:58:b4:94:9f:40:d0:4b:d4:
0d:73:1b:76:28:d0:e8:71:63:27:79:df:58:2c:19:7c:6c:0e:
07:7c:de:dc:e2:42:df:d1:ce:90:c4:d6:5e:bf:b4:d3:c3:56:
52:69:e3:30:5c:ac:07:ea:22:ff:d3:3d:c3:5a:72:ff:7e:aa:
07:57:ae:c8:40:95:e7:18:5e:94:a0:20:29:5f:16:61:45:4d:
fc:4e:57:a9:d2:12:c0:28:e4:82:40:a2:9a:a6:22:51:9c:ab:
f8:73:ef:94:84:45:bc:2c:1e:ba:12:8d:68:95:e1:54:c3:97:
cd:e1:21:b4:a5:3f:0d:84:18:01:9f:1f:45:ec:bd:96:f2:59:
12:4a:de:a4:0d:7d:89:7d:b9:ee:dc:18:d8:09:14:92:30:54:
d2:ce:64:05:6f:a5:dd:a1:bf:5f:ff:41:4a:14:d7:6c:02:42:
16:f8:02:a2:b0:1a:4c:da:7a:d4:74:89:b4:8f:48:35:74:1c:
24:c9:6c:e7:26:03:dd:2b:88:9b:a5:d6:cd:df:05:b1:d9:33:
8c:b6:e7:e4:30:18:b9:c9:49:02:bc:8e:87:77:7c:23:9a:6c:
49:9c:f3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:37:44 2025 by rpki-client